
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: uD7f6gSWBGdGWcQSac7vFHW+lxsramhblJx4yl1yGr0=
Subject key identifier: F9:F7:B5:8E:1C:AB:A8:9D:75:E0:6B:98:9D:4E:30:35:23:31:32:9D
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 01A024D6F17D174998B3360BF528C0B16110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 086B
Signing time: Fri 21 Aug 2026 15:01:01 +0000
Manifest this update: Fri 21 Aug 2026 15:01:01 +0000
Manifest next update: Sat 22 Aug 2026 15:01:01 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: LAqF1tVYeUU6v4FkCvF4O1xxHvPN90VEECTDhvMzMsY=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d6:f1:7d:17:49:98:b3:36:0b:f5:28:c0:b1:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Aug 21 15:01:01 2026 GMT
Not After : Aug 22 15:01:01 2026 GMT
Subject: CN=f9f7b58e1caba89d75e06b989d4e30352331329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:5c:86:7b:1c:11:1e:f4:a6:4b:6b:0c:b8:
4a:a2:57:06:93:3f:ea:84:a0:39:6e:ca:16:7d:ab:
e1:eb:11:c2:00:03:06:51:75:f2:c9:bb:ca:e3:7a:
d0:0f:9e:23:02:a6:34:27:86:5d:2e:91:da:51:ee:
4b:8a:e4:64:77:c1:6f:3e:0e:ca:bc:e6:58:95:8c:
56:cf:3d:7b:36:d9:6a:2c:dd:04:74:a2:b0:0d:60:
17:15:e3:9e:69:71:65:65:6d:a3:b6:a5:fb:ea:3e:
be:0e:96:12:bf:0f:be:0d:dd:bb:5c:20:d6:97:d3:
43:a5:1d:ed:09:5e:6b:aa:93:b0:19:d7:fa:db:f6:
51:4b:bf:3f:79:95:a9:6a:70:28:0a:5f:40:28:c7:
ed:d7:be:59:85:24:59:c5:ba:c9:91:38:39:bf:7c:
06:c1:84:0d:25:ff:1f:a2:84:86:ad:9c:3c:9c:cc:
19:6c:79:2b:67:47:60:fe:48:52:59:ab:5c:7b:7b:
20:1e:d6:3a:0f:93:1a:44:9e:8c:d7:16:b1:f2:46:
42:cf:c7:f9:d1:85:cb:6a:c1:7c:5b:94:05:7a:d8:
20:82:79:eb:b7:52:9c:47:e1:f9:38:d5:01:ef:40:
34:5c:cf:63:33:29:45:50:fd:39:42:b8:dd:a7:6d:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:B5:8E:1C:AB:A8:9D:75:E0:6B:98:9D:4E:30:35:23:31:32:9D
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1f:7c:98:ae:f4:07:b9:13:fe:00:96:0d:97:af:19:b4:d0:
8c:78:f0:70:d1:47:9f:91:82:e6:e7:8f:c6:68:4e:3d:6c:8e:
c9:da:21:70:ec:55:95:7d:2d:39:3a:47:0b:f5:f5:e7:28:c1:
ec:4d:24:6c:19:86:09:f2:b4:42:1f:75:28:43:9a:9f:4c:2f:
5b:08:b7:15:13:8f:9f:e5:62:0f:3f:7e:33:f1:f2:9f:b8:db:
db:bf:bd:c6:3e:bc:bc:60:bd:35:da:c3:d8:3a:97:70:31:ac:
6e:b4:fc:b6:cb:70:10:f9:38:61:1a:d5:ba:64:6c:0b:cf:1f:
67:5e:13:cc:8c:59:38:35:a2:f0:3e:4d:99:26:70:09:06:13:
b8:b7:17:2e:d7:52:98:9a:1e:d4:64:9f:b9:20:da:49:34:ac:
54:83:43:50:0c:5b:cc:c9:06:cc:ff:90:31:0f:85:d0:4d:24:
aa:fd:bc:5d:f4:c4:64:77:74:9c:d4:94:73:b3:cf:62:c0:cd:
63:9d:57:20:48:ba:ce:19:7a:4d:22:b6:84:ad:2e:a1:99:dd:
2f:aa:fb:85:b3:ba:cd:76:91:5e:f2:e2:5a:ff:92:36:89:3b:
a8:ee:77:ff:e4:20:fd:ec:45:78:b3:f5:d7:83:4a:93:1e:d7:
1c:ca:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:11:45 2026 by rpki-client