Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: Tbrggfxa5Y/ZzeBy9QDnjTP04w+K7Rv5XJwnHd2cDlY=
Subject key identifier: 14:26:68:14:76:CF:FB:68:7F:D3:A0:DD:DA:DF:57:61:6D:9F:12:B0
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 019D284D88F419CE6079CCEB9BE128A2AE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 09DC
Signing time: Thu 26 Mar 2026 04:01:03 +0000
Manifest this update: Thu 26 Mar 2026 04:01:03 +0000
Manifest next update: Fri 27 Mar 2026 04:01:03 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: ZYTDhweTNjiqemx8+ATtsvbgeuifnKyAL24rJGtP8lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:88:f4:19:ce:60:79:cc:eb:9b:e1:28:a2:ae:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Mar 26 04:01:03 2026 GMT
Not After : Mar 27 04:01:03 2026 GMT
Subject: CN=1426681476cffb687fd3a0dddadf57616d9f12b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:f4:a2:54:c8:2d:f1:5a:e9:d4:b6:a0:6b:
ff:d1:11:68:ad:14:c3:4f:dd:fb:3d:99:49:8a:fb:
93:8c:7d:13:fa:7a:af:e7:3b:e5:63:b9:df:94:83:
07:8b:2f:17:6b:76:65:7f:c9:17:b2:38:4d:15:2f:
75:1e:e5:23:ad:95:d7:0b:ca:58:34:ee:8c:5d:1d:
58:b5:9e:0b:e4:dc:40:3a:b8:a1:48:76:3d:da:70:
f5:cb:b5:0c:a3:f1:21:62:0e:cd:7f:5c:5f:a0:4b:
32:cc:13:89:65:53:34:79:54:f8:a4:6c:1b:00:1e:
bc:cd:79:c2:50:65:b8:6c:54:14:5d:60:90:d2:f8:
47:e9:f9:aa:c9:18:c3:03:ec:43:53:5f:7b:ea:94:
17:47:7f:0d:64:c0:0c:1b:63:a9:e7:23:28:8b:f2:
af:e9:af:c3:53:57:6a:d8:89:9f:53:25:9f:df:02:
e8:df:1d:55:8a:9d:c9:b7:16:7f:54:e5:86:d7:c9:
e3:05:e5:04:05:4f:9e:aa:11:a1:d4:0c:81:f8:18:
46:a6:65:d3:ad:af:31:9f:9b:df:11:1f:17:e8:bf:
41:97:01:ba:82:d1:35:46:8a:a8:8b:65:8b:d6:1d:
83:0c:d8:7a:e2:bd:54:c4:7a:31:ea:15:56:8a:73:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:68:14:76:CF:FB:68:7F:D3:A0:DD:DA:DF:57:61:6D:9F:12:B0
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8d:f7:70:85:d5:07:98:3d:7a:cb:f2:ff:12:d0:84:5a:e5:
6a:8c:9d:05:4c:9b:27:ee:4f:aa:bf:ba:66:3d:80:51:ab:70:
44:f0:02:99:17:0e:7b:13:80:2a:bb:57:eb:cd:41:4b:fb:5a:
ff:69:88:72:98:5a:08:ac:d3:ed:60:b6:ad:95:f7:d7:bf:46:
2e:46:bf:b1:7c:0b:3d:1f:5c:f6:d3:0b:a5:09:c2:94:3f:44:
1e:cc:8e:18:8e:55:f0:9c:5d:09:a7:36:2a:e7:df:16:71:46:
84:f3:64:6b:76:e4:8e:ea:9c:eb:45:77:ff:2e:ae:0e:45:f1:
85:9d:ff:92:9e:f1:bc:b5:48:24:7d:47:fe:ef:0f:ce:5a:34:
b5:ce:13:e6:aa:8a:70:92:9b:a8:76:e5:c1:5f:92:b4:ef:51:
db:ee:18:da:b8:40:f8:60:97:d9:8d:d7:12:36:4f:4a:a4:01:
b8:f6:74:9f:83:9c:dd:9a:d3:f2:87:a3:d8:a0:14:df:fc:a2:
f2:d5:f7:a1:0a:31:af:ac:36:f7:6c:47:35:bc:9d:79:79:63:
62:a1:3e:26:83:8e:7d:61:2a:d9:0c:de:b6:9b:c7:22:a3:a2:
9e:19:cc:07:d4:5c:8a:cc:cb:5e:ed:28:e6:6b:9c:6d:8e:b1:
00:f7:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:57 2026 by rpki-client