Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: xzhQpT7A1mVx4HLNnis7jec2hFPJRO9M2ryVsfOaLFA=
Subject key identifier: 8B:E1:5A:08:49:F3:91:4F:B9:48:63:66:E6:29:B4:FD:39:55:92:4D
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019E284AB8A61DA86CC9BA8F888C1229F8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 190D
Signing time: Thu 14 May 2026 21:00:45 +0000
Manifest this update: Thu 14 May 2026 21:00:45 +0000
Manifest next update: Fri 15 May 2026 21:00:45 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: 5wn4kuTBJoHoLTAeVbgv418uU0bDx9fRYVeAD4rmHag=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:b8:a6:1d:a8:6c:c9:ba:8f:88:8c:12:29:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: May 14 21:00:45 2026 GMT
Not After : May 15 21:00:45 2026 GMT
Subject: CN=8be15a0849f3914fb9486366e629b4fd3955924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:76:9d:c1:c7:9d:59:54:3a:35:cd:22:ed:
8b:2f:50:0e:05:18:9d:0d:47:aa:42:21:06:67:1e:
88:56:10:96:2a:42:44:5d:3c:3e:1e:05:96:80:3d:
64:d2:65:ab:e5:f3:08:39:27:07:9d:f5:d1:57:eb:
17:3e:fa:c8:e9:a9:49:e4:62:9f:e2:2a:6d:cf:6c:
7a:2d:9e:a1:d7:b3:f2:89:70:7c:88:8a:a5:0e:e9:
b3:42:13:5b:e9:aa:1a:75:8b:47:39:88:3e:16:06:
bb:e0:8f:ec:4d:84:6d:eb:bb:f2:a6:12:01:ba:fa:
d7:32:ac:48:6f:5f:de:16:ef:41:05:a9:01:dc:c0:
f6:d9:5f:eb:e0:0b:03:05:7e:51:70:f7:f8:a1:98:
78:09:3a:f1:bc:35:1e:7e:33:4c:40:0e:94:8c:43:
a4:2a:5a:86:02:eb:8a:73:d9:c9:87:6c:8d:a6:a5:
01:51:cc:ea:18:26:73:05:95:93:16:69:bb:80:f0:
68:83:c8:d4:2e:74:33:4d:4a:74:c1:8d:d9:8f:22:
49:f7:e5:c0:82:fb:ee:87:98:ef:9d:18:3e:60:fc:
5c:5c:f4:1c:1d:91:cc:f9:3e:c5:1c:e1:26:45:d0:
52:36:2a:1f:ce:64:6f:92:93:f2:20:1e:81:d4:a8:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E1:5A:08:49:F3:91:4F:B9:48:63:66:E6:29:B4:FD:39:55:92:4D
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e1:c0:9b:c0:83:7d:ee:e9:e1:64:f9:68:f2:6b:09:fd:fa:
d1:39:4f:e7:72:d1:88:c7:65:3f:20:3c:2a:fd:52:60:1b:16:
b5:05:96:88:8a:a4:da:0f:d1:05:90:3f:45:0d:29:eb:4f:88:
8a:45:64:88:57:df:a0:0d:43:06:eb:fe:bc:a9:cf:9f:ac:ba:
75:40:e3:f3:ce:3d:07:11:24:90:e5:56:ee:05:96:8a:e5:39:
fe:cb:dc:d7:59:17:fc:9b:c3:4d:49:58:80:a7:e9:7c:e1:74:
08:54:50:97:46:04:ff:40:2b:6b:88:72:92:50:6c:ed:79:6e:
c9:c6:a6:69:13:e6:bb:56:2a:04:53:fc:0f:f8:73:9c:89:d9:
39:c8:bb:64:93:07:46:58:c4:08:99:39:5e:ec:00:b5:df:ad:
db:7a:3b:b8:04:17:21:bc:20:45:45:f6:a3:7a:a6:60:37:a9:
aa:e0:9b:ca:2f:e2:7c:23:db:3a:09:b3:fd:cf:8d:43:09:80:
72:9a:68:55:ee:d0:73:9d:fe:56:cb:ae:65:4a:53:7f:93:84:
6d:00:2a:4f:b1:6d:21:5e:0a:b7:61:2d:9b:38:bd:7d:29:5a:
11:39:ea:9c:73:00:61:9e:a1:05:b2:38:c9:77:4f:94:14:e4:
00:e6:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:47 2026 by rpki-client