Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: qLGwWRuQlBG0U9LAkp3145wr0yOPsqyyM+tZKETCtAo=
Subject key identifier: 5A:FB:33:FC:03:C7:09:2F:80:2A:F9:D6:DA:4A:9C:78:0C:2B:9F:01
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 019D38D376936EA255A7C125D7E560B3E5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa (hash: QRB4xsl/x8yZHcMu29po3RVY6KKKQr540pqKTN21RU0=)
2: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: MOmmXPapuyB5TfW2K2fx3ZELSmJH9VVL56/FsQMIa6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:76:93:6e:a2:55:a7:c1:25:d7:e5:60:b3:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=5afb33fc03c7092f802af9d6da4a9c780c2b9f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:4b:b5:e3:96:d0:42:5a:10:fe:17:c3:2c:
ab:2f:a8:53:9d:8d:e4:28:0e:0e:04:b5:c1:09:3e:
bf:09:86:62:c2:ec:51:5c:70:4c:9b:5b:c0:2d:bb:
4f:56:81:51:d1:53:df:40:aa:82:18:00:59:28:c9:
9d:1e:2b:b7:11:e4:0d:0d:b5:31:9d:2b:b6:52:07:
4e:7b:96:b4:79:1d:e6:47:cc:53:91:5b:2a:57:05:
e8:e4:41:e6:cd:2f:75:41:88:7f:e0:d3:aa:1b:2a:
2b:90:f9:6e:b1:62:d2:1a:1e:46:bb:bb:de:28:db:
3f:ae:12:25:bf:0b:e5:34:10:62:6d:96:97:01:c3:
1e:56:7a:42:2c:94:e2:f0:10:3b:20:bc:29:09:9b:
a4:39:d7:f5:50:f3:01:b7:35:c9:12:e1:d2:be:aa:
08:6c:81:a1:e5:69:12:f7:4e:86:12:d4:30:47:41:
86:6f:af:d9:70:7c:78:eb:01:b3:a2:9e:11:28:6e:
70:4d:e6:6a:0b:92:e6:18:e2:ac:0a:7c:b8:73:ec:
17:02:47:29:bb:95:f5:75:14:cd:cc:67:84:28:79:
fd:f0:da:c7:40:1e:1d:d4:1c:ac:fe:51:82:9b:23:
8b:d1:f9:dc:8b:c8:91:5e:cd:6b:38:a1:3f:57:9e:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:33:FC:03:C7:09:2F:80:2A:F9:D6:DA:4A:9C:78:0C:2B:9F:01
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:79:f5:68:a2:55:5c:c0:82:5b:fd:a9:5e:ca:4f:77:6c:7f:
54:af:c4:89:e4:d2:a1:9c:c3:bc:c1:40:9d:46:ad:9d:23:d5:
a7:b0:d0:cc:ec:cd:ff:fb:85:57:2f:77:37:b9:50:72:a1:41:
08:bf:12:45:3f:0a:66:a6:e6:db:5b:c2:63:9a:af:cb:05:04:
c3:61:8a:5d:9e:3b:1b:42:99:c8:9c:5c:0f:fe:47:e2:09:ed:
5b:29:e3:b4:21:a9:09:ed:f0:70:6f:89:3b:8d:4f:6c:16:7a:
e4:f8:f6:82:6d:c1:b7:f0:97:74:1c:fb:8a:d1:6a:79:05:b3:
a6:47:fe:c1:e1:d2:fc:23:bc:b4:28:39:b1:78:be:00:81:49:
47:24:7c:08:f0:00:5d:6f:fb:70:cd:37:5a:04:15:22:04:d1:
5d:fd:07:e7:97:5f:de:7b:5c:eb:d7:62:04:2e:77:a9:d7:d8:
b6:f4:0d:11:9b:ba:a5:d9:8b:04:9b:bc:05:3d:91:62:53:82:
aa:e2:f0:bf:6c:30:58:cc:bc:e1:08:37:b5:89:e8:eb:ab:4a:
1c:55:00:ca:f0:b6:a4:18:b6:1e:49:24:ec:c0:75:d7:fa:a5:
53:86:c4:db:39:3d:e6:22:9f:bf:25:d0:50:de:ee:23:42:01:
fd:7d:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:20 2026 by rpki-client