Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: 3MIRVaI69OeInG7Z5UBYpXUXEmPytszckG5mPXnOHqk=
Subject key identifier: 52:2B:C8:8B:6D:F4:5B:EC:B3:55:78:3E:33:9D:00:E7:5C:06:87:89
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 01A123C197C359D1547E0CF29A14ADEE2AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 08EF
Signing time: Sat 10 Oct 2026 03:00:51 +0000
Manifest this update: Sat 10 Oct 2026 03:00:51 +0000
Manifest next update: Sun 11 Oct 2026 03:00:51 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: WYKmRqHa73GABkBG3AXwxJeqekMhErJhSyrzgBDld5M=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:97:c3:59:d1:54:7e:0c:f2:9a:14:ad:ee:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Oct 10 03:00:51 2026 GMT
Not After : Oct 11 03:00:51 2026 GMT
Subject: CN=522bc88b6df45becb355783e339d00e75c068789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:09:cd:b8:92:1d:8b:31:6b:ad:67:6d:5e:
ea:8a:be:55:56:f4:6d:ba:bb:0c:7a:43:a1:e2:42:
8e:52:63:09:2d:9d:18:ab:8a:dc:00:80:bc:f1:f9:
37:09:d9:35:f3:69:56:dd:7d:8c:dd:6f:93:d2:45:
fd:08:d8:27:ce:89:92:68:cc:ed:2c:eb:41:1e:66:
78:72:bc:60:2e:4a:98:a5:16:fa:27:33:83:e6:0e:
05:f0:85:b1:c6:60:a5:a2:eb:71:84:9b:cb:c1:d1:
99:aa:61:2f:6a:64:74:41:0b:f0:3d:0d:b2:99:7b:
02:36:6f:27:ac:ad:24:49:ef:f3:f5:98:b4:d4:43:
fd:80:25:e5:dd:a1:a0:60:b6:5b:7f:3f:f1:6c:48:
c2:54:e0:44:bd:05:57:1b:4b:4b:25:88:1f:b5:bf:
55:49:b8:0b:dc:5c:9c:83:4b:10:60:52:62:ea:8b:
3c:b3:05:2d:a0:82:84:33:66:d0:47:1c:11:00:82:
3c:9f:fb:3e:9c:20:b6:e9:a3:1b:c5:e8:61:c2:cf:
11:30:65:4a:56:3f:74:f4:46:7b:ca:1e:62:35:55:
31:9e:7d:41:90:29:9f:58:5c:33:5e:68:59:bb:53:
57:a3:3f:a4:44:28:31:b8:31:ce:b2:34:4f:84:c1:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:C8:8B:6D:F4:5B:EC:B3:55:78:3E:33:9D:00:E7:5C:06:87:89
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:4d:74:8f:98:49:1e:16:ca:f8:b3:41:d7:18:cb:66:e4:
19:ec:a6:ac:16:11:fd:f3:15:4c:3d:4a:9e:df:ff:51:23:0f:
30:21:f4:c3:f4:c0:f9:a8:5a:e8:bc:c1:09:27:ef:09:3d:9b:
cf:0b:cb:8d:b9:d2:58:fc:de:c9:81:81:4c:21:1c:e7:9f:c4:
85:69:fb:06:60:64:49:cd:50:2b:47:04:d3:11:66:7b:26:7d:
41:83:0d:2d:62:e2:80:55:65:5e:8e:12:c0:a8:fc:1e:73:f0:
99:fa:c6:e1:ee:6e:4b:82:46:50:6b:f9:ba:21:a9:d2:a9:72:
fc:c9:a9:fe:16:c4:dc:1e:a7:41:09:12:ed:54:87:b4:bf:80:
68:67:b5:7d:51:05:ff:b7:9d:6f:8d:aa:51:64:12:72:32:0f:
a8:12:b4:1c:5b:2a:5f:45:5a:57:8b:28:1f:94:09:88:24:98:
5c:f1:60:64:e6:ec:4b:86:8f:d8:20:b7:63:d0:f5:d0:98:67:
66:1f:90:44:19:96:5b:76:30:84:87:d4:40:e5:95:df:ef:03:
b4:fd:bd:26:3c:18:5f:b9:32:70:bd:1f:84:12:d3:e3:4d:86:
fd:bf:2c:ca:79:6c:a4:1b:38:a7:7f:9c:7c:c8:db:b9:6f:4d:
bf:c8:59:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:29:53 2026 by rpki-client