Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: uThwSJYwuEW8EDQceziTHLmbCdZE8hGPvfFXcijf2Ng=
Subject key identifier: 31:B4:32:38:7F:09:B2:F1:A4:EB:22:3D:40:EA:1C:48:8C:6E:D5:35
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019CE748C718EFEE3743F8A19761AE63F61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0EE3
Signing time: Fri 13 Mar 2026 13:00:32 +0000
Manifest this update: Fri 13 Mar 2026 13:00:32 +0000
Manifest next update: Sat 14 Mar 2026 13:00:32 +0000
Files and hashes: 1: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: dfTdYUpem235WhG+3A0j3t2g7DGA3CpDktdlvMgHdzc=)
2: tPOM2vOyRXLlpAH8tGuHWMTFfJE.roa (hash: +fqqEcmQJOglmRruo7MOCNENvJ3e5VUzYn6LUaZmpyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:48:c7:18:ef:ee:37:43:f8:a1:97:61:ae:63:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Mar 13 13:00:32 2026 GMT
Not After : Mar 14 13:00:32 2026 GMT
Subject: CN=31b432387f09b2f1a4eb223d40ea1c488c6ed535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:00:a3:8c:0d:b9:ea:8e:34:6d:16:0a:0d:
bd:e5:ab:08:cf:ae:3f:3d:9d:a4:a1:c6:29:da:09:
f1:a8:a2:2f:c9:ca:42:bf:80:1d:e4:e0:eb:84:46:
09:82:b4:5d:62:7a:38:64:bb:c4:f5:e2:6b:27:d3:
3f:a3:b4:c0:00:57:a6:ff:11:34:20:30:13:20:07:
8d:10:f1:d8:b9:f4:da:26:1d:27:3f:8d:51:44:9a:
e3:80:48:84:67:3d:22:d1:4f:ee:f1:93:9e:1f:e2:
56:bc:6d:e7:dd:98:34:45:70:f5:7c:71:1c:ca:0a:
a8:a6:29:05:38:6b:b8:a3:77:13:9b:bb:d6:18:42:
49:19:68:c3:86:48:94:1c:07:9b:08:71:73:d8:f4:
b4:41:52:41:d1:51:9a:5d:d1:04:0e:7c:5a:86:6a:
e5:90:41:8c:1b:7a:48:cb:38:43:cc:08:05:8e:d2:
5b:f3:f1:26:8d:09:7a:97:b0:3a:0e:5a:ae:df:1a:
b0:d5:4f:fe:39:73:9d:3b:a6:20:cc:61:60:80:8d:
b3:ea:ff:79:56:32:c0:43:8c:e4:09:08:86:a6:5a:
43:d7:6e:30:41:98:6a:2e:f6:4e:f1:c1:3c:f6:82:
94:40:fd:f7:32:c5:7e:a9:23:8f:9c:f4:bc:98:0e:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:32:38:7F:09:B2:F1:A4:EB:22:3D:40:EA:1C:48:8C:6E:D5:35
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:eb:88:26:d1:e6:1c:c9:35:03:fa:b5:66:43:a5:70:00:
9a:a6:7e:7d:17:f5:52:70:08:30:26:01:5b:6c:62:7b:b3:58:
f8:68:6d:e6:e2:bc:2d:ea:b8:ef:1e:fd:48:10:94:b1:f8:4a:
a1:21:05:17:0c:0d:94:f9:cd:6e:ea:3e:5d:db:e3:3f:2b:33:
87:9f:60:18:84:5f:38:0c:ae:70:ad:d4:59:bb:32:3d:d6:66:
45:50:f8:3a:20:c0:dc:3c:78:9f:44:a8:59:61:2f:2e:87:71:
48:cf:46:0c:42:b9:8b:74:c0:2c:fc:0f:f6:1b:0e:ac:e9:08:
8c:77:ab:e4:c4:af:ab:13:40:83:45:af:9c:5d:a2:c2:d1:41:
c2:0d:c6:4a:c7:a2:30:eb:bf:27:e0:d3:a0:f6:14:e1:0f:77:
45:70:d0:ec:d9:2c:4c:fd:7e:1a:59:a6:82:dc:46:71:c5:53:
0b:76:91:d3:7f:ba:29:50:aa:ed:76:ba:b0:e9:bc:ad:ac:04:
c9:5c:c7:9c:8d:de:d8:10:16:7d:3d:a4:c7:58:5a:47:67:e6:
4f:34:20:6c:c0:6a:38:42:f0:ce:f8:8c:2a:38:a8:9a:7a:45:
92:62:22:7e:73:ad:a7:eb:ad:a8:ba:37:4d:d5:b0:62:8c:44:
fa:d4:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:51:06 2026 by rpki-client