Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: xE4NJXRt5vfUPoMxju9NqfnyOpuHQ3Bk9jUl0nZNcwU=
Subject key identifier: 1E:2E:67:A2:AE:C2:3E:DD:D2:75:23:FF:22:4A:F5:08:04:74:25:9B
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 019D3865655EA893DA73F7026E1C971F3854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0D1D
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: KiCxhL1VdoIWQC6aiYIHyNv9qgV78gNdSSIhJZSxfTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:65:5e:a8:93:da:73:f7:02:6e:1c:97:1f:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=1e2e67a2aec23eddd27523ff224af5080474259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:04:d5:3e:50:52:d5:e1:4c:6c:33:d4:e9:
a2:49:9b:17:22:61:5c:61:29:28:a8:27:7a:97:9a:
0e:77:2f:ce:e4:10:bd:e0:1f:8a:c3:d8:bc:fe:94:
b3:3f:2a:54:18:46:10:31:69:b2:18:35:7a:8d:6a:
ac:bd:50:b7:e2:b6:51:a7:8a:8f:50:a0:d4:a0:40:
4e:46:5e:83:7d:d2:0f:94:64:d8:03:38:65:f8:36:
9b:4e:47:fe:11:25:df:5c:8c:3e:3f:3d:59:96:de:
51:42:4c:c5:01:94:4c:14:37:76:56:99:4b:29:55:
a8:2f:37:06:c9:13:40:9e:7a:ac:7c:69:9c:09:84:
44:28:22:35:5a:b6:48:77:cc:99:19:bd:65:be:c8:
f1:fa:4f:44:55:b8:2d:25:cf:8a:e8:b2:cc:d0:15:
4e:d3:02:99:cc:66:ae:c2:fb:b5:97:b2:62:ec:e1:
6c:ec:26:66:bc:08:4a:02:1d:32:2d:20:bd:8d:cf:
33:24:58:55:a9:4b:41:25:29:7a:4c:2d:45:27:f7:
9d:e5:76:19:fc:4a:70:ce:1f:b7:45:e3:e6:9e:fe:
1f:e0:73:c8:c9:1f:76:6a:b8:44:6d:ec:19:69:63:
62:27:1b:ec:e5:50:74:76:ae:7c:48:d6:4c:fa:07:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:67:A2:AE:C2:3E:DD:D2:75:23:FF:22:4A:F5:08:04:74:25:9B
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:8f:e2:60:5d:60:e8:9a:b3:10:31:9f:42:f5:33:51:7f:
63:a6:93:c9:74:28:ef:1e:23:c1:79:49:9f:c9:59:74:0f:f1:
e2:2f:86:55:d0:de:17:87:1b:5e:5b:cb:6d:ab:81:61:da:6f:
d0:7b:8c:1f:28:cc:0b:e9:31:a5:c6:6c:a0:fd:81:6f:28:11:
31:13:46:02:a7:fd:17:fa:83:0b:ed:00:7e:03:96:56:f1:d4:
1b:44:31:0c:e9:76:f8:ff:6a:ab:6c:71:ee:93:98:da:84:f1:
55:61:f6:f1:81:c8:75:52:1a:23:5a:a9:37:b3:a2:db:23:00:
37:4e:9f:3d:b5:4a:eb:ec:a2:b1:65:73:b5:dc:82:01:e5:33:
e3:63:59:74:97:b9:96:ab:3d:2a:4c:58:5f:80:17:ce:2a:60:
2e:52:25:db:5b:a7:01:11:ab:13:27:53:9e:54:e9:c5:7c:d3:
d9:a4:89:80:7e:30:a2:66:c8:86:fd:5d:3d:69:ac:cc:94:4c:
11:e2:46:bf:14:86:b6:05:c0:7c:cd:bb:35:f6:00:08:ee:ef:
24:e7:44:8d:02:2c:3a:c4:40:50:1d:89:35:05:4b:c4:8d:8e:
03:1f:13:07:11:c7:bc:8b:d6:65:57:58:4a:bf:44:2d:0b:10:
eb:29:f1:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWVeqJPac/cCbhyXHzhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NjMwNWE5YTFkZmEwNmRiYTg1N2I0M2YwZGU5ZTYyMmY0
OTUxYTMwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EygxZTJlNjdhMmFlYzIzZWRkZDI3NTIzZmYyMjRhZjUwODA0NzQyNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0UE1T5QUtXhTGwz1OmiSZsXImFc
YSkoqCd6l5oOdy/O5BC94B+Kw9i8/pSzPypUGEYQMWmyGDV6jWqsvVC34rZRp4qP
UKDUoEBORl6DfdIPlGTYAzhl+DabTkf+ESXfXIw+Pz1Zlt5RQkzFAZRMFDd2VplL
KVWoLzcGyRNAnnqsfGmcCYREKCI1WrZId8yZGb1lvsjx+k9EVbgtJc+K6LLM0BVO
0wKZzGauwvu1l7Ji7OFs7CZmvAhKAh0yLSC9jc8zJFhVqUtBJSl6TC1FJ/ed5XYZ
/Epwzh+3RePmnv4f4HPIyR92arhEbewZaWNiJxvs5VB0dq58SNZM+gf84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4uZ6Kuwj7d0nUj/yJK9QgEdCWbMB8GA1UdIwQY
MBaAFERjBamh36BtuoV7Q/DenmIvSVGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMt
MGM4Njc0NTc2OTJiLzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMtMGM4Njc0NTc2OTJi
LzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes2P4mBd
YOiasxAxn0L1M1F/Y6aTyXQo7x4jwXlJn8lZdA/x4i+GVdDeF4cbXlvLbauBYdpv
0HuMHyjMC+kxpcZsoP2BbygRMRNGAqf9F/qDC+0AfgOWVvHUG0QxDOl2+P9qq2xx
7pOY2oTxVWH28YHIdVIaI1qpN7Oi2yMAN06fPbVK6+yisWVztdyCAeUz42NZdJe5
lqs9KkxYX4AXzipgLlIl21unARGrEydTnlTpxXzT2aSJgH4wombIhv1dPWmszJRM
EeJGvxSGtgXAfM27NfYACO7vJOdEjQIsOsRAUB2JNQVLxI2OAx8TBxHHvIvWZVdY
Sr9ELQsQ6ynxSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:12 2026 by rpki-client