Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: 4pDTqxPSdxvA4cDdnBj0owU1cSv4OXDr0ozRhWp00dA=
Subject key identifier: 72:4B:B6:74:51:84:76:70:50:A6:03:F9:62:84:8D:B0:FB:27:C1:79
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019DD0F5D3452CBAFE44356E15DB04FB08E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0F5C
Signing time: Mon 27 Apr 2026 22:01:04 +0000
Manifest this update: Mon 27 Apr 2026 22:01:04 +0000
Manifest next update: Tue 28 Apr 2026 22:01:04 +0000
Files and hashes: 1: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: 7+wBX2vYbFJWVngN+KvUjV/PAo0HqnwD+wZX6aWRWQw=)
2: tPOM2vOyRXLlpAH8tGuHWMTFfJE.roa (hash: +fqqEcmQJOglmRruo7MOCNENvJ3e5VUzYn6LUaZmpyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:d3:45:2c:ba:fe:44:35:6e:15:db:04:fb:08:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Apr 27 22:01:04 2026 GMT
Not After : Apr 28 22:01:04 2026 GMT
Subject: CN=724bb6745184767050a603f962848db0fb27c179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:9d:a6:79:91:ec:7f:1e:a0:8e:b5:ec:a5:
ec:c4:f2:6c:13:30:25:24:5b:47:72:38:24:69:64:
71:1f:5c:e8:dd:ec:70:0f:3f:98:e3:1e:5b:ce:ac:
eb:c2:44:13:1e:32:05:ce:8b:10:6f:95:67:90:d6:
a0:73:5f:5d:e5:a5:e9:22:c3:f5:de:72:08:0e:0b:
12:49:85:5a:70:77:e6:c7:c6:59:c4:8e:1d:6b:a3:
db:de:ba:da:a2:87:6c:94:bb:80:60:af:6c:09:f9:
37:5a:90:e8:12:05:4d:62:15:f6:f4:77:88:aa:11:
81:ba:7b:c0:e2:7f:ef:4e:d6:30:94:36:45:fb:a5:
e9:7d:82:c5:6f:de:28:8c:51:0e:ff:66:4e:58:40:
66:14:7c:20:68:fa:6c:92:5d:17:f0:06:bc:70:74:
9a:f2:c1:9d:a5:33:aa:c1:40:03:c4:65:4b:b6:14:
5a:e4:47:48:8a:dd:f9:ad:2b:0c:b8:bf:fe:2b:c7:
5d:98:ce:00:89:3d:c2:16:e2:ba:69:b4:7e:c7:b1:
37:d6:b7:6a:0a:63:b3:ea:ac:25:4d:06:a0:3a:99:
77:c3:a9:6a:3f:40:08:6a:f0:79:fd:ea:36:17:63:
30:92:34:c1:58:22:09:ac:ed:24:c7:2f:5a:14:66:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4B:B6:74:51:84:76:70:50:A6:03:F9:62:84:8D:B0:FB:27:C1:79
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:d1:a6:4a:0d:a9:5c:19:97:18:48:4e:b9:82:a5:07:c1:
a7:b8:46:e6:37:4a:c3:4b:60:db:8b:c3:1c:50:25:ea:b5:9c:
ae:d7:9e:02:d9:90:fe:c0:82:44:a2:eb:dc:f3:27:6a:73:e4:
c6:38:0e:04:5a:48:ee:b1:47:9e:9c:19:0d:4f:cc:97:0e:2b:
b8:84:2f:aa:8c:9b:fc:09:1c:19:19:59:32:c9:2d:bb:54:b7:
26:b1:a1:8c:88:78:19:14:bb:ad:8b:51:fa:1b:10:e7:85:76:
32:b4:28:b6:b6:8c:7b:90:71:7e:47:43:42:52:31:9e:a2:95:
cd:e8:4f:67:82:d0:03:06:6f:77:86:1e:4b:7e:95:5a:bf:50:
c0:ac:65:0a:5c:b5:45:ac:0b:3e:eb:f0:b4:04:d8:54:54:46:
cc:dd:78:0b:18:28:a8:ca:f7:6a:cb:b7:b9:a5:e7:32:08:a4:
d6:9b:f1:f4:b3:9e:8b:4f:7f:9f:b7:c1:91:a4:0b:f9:ec:5c:
0f:0d:0c:5b:0b:13:44:62:46:66:84:eb:ff:1c:3a:51:7e:db:
3b:52:3f:f4:fa:b0:df:6f:93:1c:8f:45:c3:13:e3:16:3f:dd:
7f:16:14:53:a7:72:69:5e:4f:65:4d:6a:4e:ff:83:c8:87:93:
16:ed:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:55 2026 by rpki-client