Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: 6Z00QADcv3qtnBnuLGGbYyOWXEFexT/A7YIjEhGSAM0=
Subject key identifier: CD:6C:73:6A:D3:4F:82:13:45:30:E7:C4:25:6E:54:6A:31:40:6F:DA
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019F11F84FAF35EA696F61AF119A465C8224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 06:01:53 +0000
Manifest this update: Mon 29 Jun 2026 06:01:53 +0000
Manifest next update: Tue 30 Jun 2026 06:01:53 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: YcTsQYhcfBQi8B7MGXTlU+yydoGJKMAzbvfoDsm68K0=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:4f:af:35:ea:69:6f:61:af:11:9a:46:5c:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jun 29 06:01:53 2026 GMT
Not After : Jun 30 06:01:53 2026 GMT
Subject: CN=cd6c736ad34f82134530e7c4256e546a31406fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:0c:5a:3e:79:03:2e:83:ce:10:05:d2:02:
99:ab:2b:37:1e:86:65:6f:60:b2:50:4a:ca:91:9d:
7e:a4:47:3c:77:97:d4:4b:9a:a2:f4:ab:35:82:b1:
cf:ac:29:8d:d6:99:ba:f6:b8:f2:86:1f:9a:02:b0:
22:4b:ad:2d:a9:2a:ab:c8:d7:a4:51:d3:b3:36:d2:
5a:c3:dc:41:82:a0:bb:b0:3a:99:fd:6f:97:f3:b4:
74:50:c2:87:02:9c:4d:46:cc:c8:02:13:8f:f9:30:
8b:f1:ca:72:3f:08:0f:0e:85:2b:55:d4:8d:db:c8:
94:75:b4:3a:0f:9e:c1:93:8a:6f:f2:90:14:35:18:
aa:da:fb:72:56:e1:c9:54:bf:e1:e3:e6:51:03:db:
b4:32:53:3a:a1:3c:8a:a4:8e:2b:94:81:76:d2:10:
bf:6d:f7:11:67:9b:d9:75:bc:31:cb:d3:7f:c2:34:
33:46:40:65:81:9b:cd:c8:53:e6:5d:8e:3c:78:ab:
02:4e:f1:be:a5:f2:30:dc:e6:cd:0e:1c:5f:8d:65:
cb:90:79:bd:e8:a0:49:76:ee:33:2c:e4:55:55:a2:
f4:0f:7e:f5:e3:7e:ca:86:77:3b:54:5e:33:bb:4d:
f8:e9:ea:bc:ab:42:ac:70:e3:03:76:95:f4:5d:7a:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:73:6A:D3:4F:82:13:45:30:E7:C4:25:6E:54:6A:31:40:6F:DA
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:4d:43:07:8b:4f:ea:01:33:0e:b5:47:48:4c:ff:10:98:
6d:62:e5:61:40:14:75:e0:d3:54:3e:aa:c5:1c:88:89:3c:36:
12:eb:08:b3:c1:c8:39:14:37:3a:d2:16:f1:a6:e3:50:b4:49:
0f:be:93:11:6b:13:46:26:3e:64:ee:02:a7:1f:a1:c2:3d:e9:
c6:87:0e:41:58:8e:0b:4a:95:1a:37:b9:0d:3b:bf:86:2b:ee:
84:86:26:79:9e:80:41:96:23:eb:c6:13:86:fa:79:eb:20:49:
a2:d6:e4:97:43:7d:70:d7:a0:a6:12:9d:98:f4:fe:a4:dc:db:
38:21:66:8e:7d:02:94:99:85:e4:10:64:06:02:3e:b7:b2:9c:
64:51:b1:01:a4:6d:36:11:98:18:0b:c7:e7:a9:99:1f:4b:9c:
69:fa:dd:7c:be:8a:1e:d3:fe:66:4a:0f:35:74:a5:ef:93:a8:
3b:fa:bf:d8:98:10:8c:a6:d1:d8:dd:a0:38:15:d7:06:45:3d:
79:1f:db:b8:e0:c6:64:9b:5f:28:c1:bc:10:53:9b:ed:6e:e1:
c9:21:ed:d0:23:88:c1:79:a9:e1:21:7a:fb:9e:e0:f1:86:85:
dc:1c:bc:b8:7c:2a:c3:74:85:bc:43:46:1c:68:0a:53:ee:b3:
80:72:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:00 2026 by rpki-client