Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: G2Vo4onxpALWWEIkUMIb17qPjzhD3aDZ4ue2Wzr3NVg=
Subject key identifier: 84:D7:52:6B:37:A8:FB:E3:AD:61:1F:83:93:45:DD:07:B5:AE:92:5F
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01A0DACDAEEAE375D44B803B31F340FEC1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1840
Signing time: Fri 25 Sep 2026 23:01:47 +0000
Manifest this update: Fri 25 Sep 2026 23:01:47 +0000
Manifest next update: Sat 26 Sep 2026 23:01:47 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: qAcaGNc87N+hQ5BI3MOmhlP3UIlEAxrR3KzIAyEnFD0=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:ae:ea:e3:75:d4:4b:80:3b:31:f3:40:fe:c1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Sep 25 23:01:47 2026 GMT
Not After : Sep 26 23:01:47 2026 GMT
Subject: CN=84d7526b37a8fbe3ad611f839345dd07b5ae925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:35:08:20:07:0c:83:90:44:14:45:3c:a9:
fd:79:aa:05:3b:6f:c0:bf:de:ec:06:c8:8d:33:97:
ee:d3:ae:d8:8b:92:2b:a1:40:e4:c9:9a:7f:bb:61:
90:24:c2:db:77:ad:96:9b:5a:35:48:a7:98:37:af:
79:b4:c7:c3:cf:ac:ad:b7:6c:4a:18:0e:fc:d8:b1:
17:c8:60:66:b7:68:73:63:6b:2e:d9:c8:09:a8:3f:
a0:ec:6d:e7:92:70:93:60:6a:3a:52:de:89:8e:6f:
ba:4b:32:72:d8:fa:6d:16:84:8e:f2:98:ac:82:8b:
69:77:18:71:4d:20:66:3e:80:b6:15:11:e5:e7:1b:
04:9b:e8:52:6e:c9:24:08:11:97:9b:f3:61:55:98:
ef:7d:ee:93:9e:9c:e7:b5:d7:93:f5:c6:d7:b8:32:
93:69:88:c5:58:96:1b:1e:78:70:f3:3d:26:86:58:
0f:db:db:04:89:d0:22:f4:91:7c:4c:e3:59:7f:ba:
be:9b:6f:49:77:b0:f2:a1:71:45:5b:7c:63:4f:fd:
9c:d8:29:46:35:77:03:20:2b:ae:f2:89:da:3a:3c:
64:b4:a7:00:78:9a:45:02:bd:51:9b:34:57:f0:50:
c8:27:9b:34:f9:70:58:ec:7e:47:2b:78:fe:ee:4a:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:52:6B:37:A8:FB:E3:AD:61:1F:83:93:45:DD:07:B5:AE:92:5F
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ad:fd:e2:11:e5:f6:ac:15:3a:ab:f2:c6:2c:f7:47:8c:81:
c4:6d:cf:da:b0:de:00:a9:9a:ad:6d:1f:fa:aa:0d:bf:0a:cc:
8f:38:fd:dd:67:57:77:57:19:78:db:0b:6c:68:28:54:18:7b:
92:f6:07:94:06:1d:cd:59:42:bb:50:90:de:86:bd:ed:17:5d:
71:fe:07:fb:3a:91:7f:66:26:8e:17:64:9f:cd:67:9a:5e:64:
c8:0c:e0:98:c0:73:42:17:4f:e7:c5:5e:1e:17:a0:50:bd:af:
15:ea:a5:88:81:b5:7f:45:18:aa:b0:53:cb:72:d9:ec:64:94:
30:51:85:e5:e4:40:48:c6:72:29:b5:32:c4:c0:ce:60:5d:f1:
e4:6b:24:d7:e7:db:9d:3a:f7:9c:9f:b9:79:08:f7:35:55:a9:
86:86:b3:68:f9:2b:bc:82:b3:23:64:96:45:e4:9f:62:b2:c4:
f6:a7:f2:1d:fe:b0:6b:fe:20:53:ff:63:aa:77:9d:26:11:d4:
5e:6f:28:6f:f5:73:a7:49:7d:76:63:50:86:95:a6:8c:63:89:
35:99:35:15:0f:c8:68:73:d3:f9:f7:97:2c:2b:aa:e4:15:46:
a7:2a:72:7c:bd:31:50:13:67:fc:5a:9f:99:0e:9c:6a:1f:ad:
72:ba:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:44 2026 by rpki-client