Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: F+28XY4365JH/DdWnBOlxx8HRs7EDxbioJr4YGiU+jk=
Subject key identifier: 29:8E:28:B5:70:21:6E:B5:2E:F1:94:4C:E3:CF:2F:97:F8:F4:C5:5C
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019D38D3C21495CF903A7CEA7AB442202322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: LOL4KD8JDfkohB3VoUkKSrc7tZnoVNg6R4oLOAgnpFo=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c2:14:95:cf:90:3a:7c:ea:7a:b4:42:20:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=298e28b570216eb52ef1944ce3cf2f97f8f4c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:ce:18:88:68:bd:8a:66:b6:90:46:63:13:
fc:b1:4a:29:85:2c:4b:52:8c:cc:53:b0:f9:cd:dd:
f8:04:41:1c:4c:d9:78:62:d6:6a:91:84:d9:b3:d2:
4f:14:67:19:04:86:15:84:10:e3:8c:b8:48:35:b8:
ee:83:cf:69:41:f5:33:c8:93:a8:7b:f2:81:85:36:
7a:96:8a:c3:8d:a6:f9:7f:9a:2e:2c:fe:69:11:3e:
ad:db:4f:23:cb:e1:21:08:fb:04:e4:b3:d8:ec:df:
e0:1f:02:68:8c:54:a5:51:a0:2e:cc:eb:4d:ce:da:
12:13:17:33:86:e7:7a:b0:73:10:f9:4f:03:67:73:
07:64:7a:3a:06:6d:8d:4e:ea:3d:5e:4e:35:f9:51:
8e:6a:53:2e:91:40:06:cb:1c:5a:e7:86:5c:39:16:
0b:fe:f6:ac:55:e3:dc:f2:6e:6c:8c:89:d8:af:3a:
5a:e4:e9:01:e2:97:e5:59:03:0b:89:94:ff:2d:b0:
e0:33:c9:6b:f1:39:a5:a1:90:5d:71:e5:d6:98:6e:
19:bb:98:4e:ee:6a:46:d8:2c:07:10:ac:a5:c3:b7:
67:42:59:10:bf:6e:1b:fc:ce:e0:76:2b:20:be:cc:
c3:f3:46:11:aa:92:d8:05:27:9b:75:b6:66:62:c2:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:28:B5:70:21:6E:B5:2E:F1:94:4C:E3:CF:2F:97:F8:F4:C5:5C
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:3c:60:27:0f:6a:25:75:9e:4a:62:77:81:8d:57:81:54:
3d:c1:d3:4c:63:7a:2b:92:c7:d0:de:3c:5f:76:90:54:57:bf:
50:ce:8b:e4:9b:06:48:7d:99:69:6c:e7:05:c3:d1:ed:ef:2a:
d3:63:88:dd:ee:89:a4:30:8f:28:2b:b3:ab:c8:09:af:d3:f9:
65:83:ce:93:74:19:30:86:16:dc:82:ab:98:b4:7f:cf:33:e8:
93:e2:fb:4b:b0:8c:79:c4:89:b0:ce:c2:62:6b:e0:62:07:a3:
ce:b9:bd:a6:ea:ef:46:d9:58:cb:11:34:76:7e:e9:43:bf:f3:
18:a4:24:9b:64:f7:ca:c2:92:f7:fa:88:ff:05:55:40:30:05:
56:3b:a8:c3:f4:6e:a8:2d:8c:84:55:3b:fe:6c:b1:e1:35:54:
ed:d2:e7:e5:2d:57:11:d1:ec:52:68:43:7a:85:fe:c4:f0:d8:
64:6a:96:80:72:90:a9:2c:72:2b:10:d9:30:65:b8:d2:9a:ce:
05:c9:57:da:de:19:0e:a4:ae:f4:cb:4c:f4:a0:a6:f5:2d:f7:
9c:f5:53:d4:d6:42:96:58:6b:8c:13:35:71:83:c6:97:26:9d:
71:df:5d:f6:25:79:1f:21:d7:91:40:8f:1c:13:b8:49:23:a3:
df:27:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:15 2026 by rpki-client