Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: JxQT4GRh4nr9l3MYth32EzP+E72hBeRUC3K9bnVlqrA=
Subject key identifier: 3F:31:14:A5:C8:3C:97:03:55:83:DF:80:92:32:53:25:66:60:A1:04
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019D26963A02D63CEE34A609C4268200E7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1655
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: PkVMUrrQgkXZhWDdaRzPwA8O0V9RnFxDth3My4bLj0A=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3a:02:d6:3c:ee:34:a6:09:c4:26:82:00:e7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=3f3114a5c83c97035583df80923253256660a104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:3b:55:00:91:51:a8:4d:2e:b2:dc:cb:02:
83:a8:5f:72:e3:f0:e3:de:ce:60:46:44:34:5b:b3:
84:79:56:35:a5:6b:b1:68:e2:e0:a4:44:9c:07:c8:
71:d6:58:c2:0e:64:84:20:45:46:15:4b:18:db:57:
02:40:76:72:08:7d:11:04:0e:8c:ed:1a:75:bd:01:
2b:73:71:22:9c:a1:1e:b1:68:06:20:1f:5f:6d:1a:
dd:45:4f:15:1e:fc:ee:2f:37:de:bf:97:1d:58:a0:
16:05:cc:bc:8e:0f:f8:a5:10:14:9e:29:23:c1:9c:
34:36:bb:8b:53:0b:f6:64:a9:99:53:77:3d:4f:ec:
5b:34:2f:d7:bb:92:0e:11:84:c4:c0:38:7d:e5:56:
8c:fb:db:76:0b:4a:e1:4a:1c:68:82:10:21:e6:fc:
e8:27:28:e8:f4:4b:3f:1d:2c:f6:96:5d:d6:ea:f5:
66:5c:1e:ce:5d:70:87:8f:67:89:2b:5e:c3:3c:78:
de:27:fb:a5:f7:6a:0f:64:24:c8:e1:71:4b:97:c2:
68:88:c6:9e:eb:5b:d3:4c:18:df:1a:3b:28:47:88:
33:c2:5e:b0:09:cf:63:ad:6f:52:1e:3b:8a:fd:e3:
61:6f:b6:30:39:68:9e:9c:c6:40:05:5a:fb:2f:bc:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:14:A5:C8:3C:97:03:55:83:DF:80:92:32:53:25:66:60:A1:04
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b5:33:09:27:aa:b7:05:c5:9f:f4:be:93:22:ac:50:c8:4d:
c5:7d:d1:d0:84:e9:95:bd:f2:71:4f:11:3b:1f:7a:c1:1e:15:
ec:f4:dc:39:32:fa:db:23:ac:1b:7c:64:2d:a8:4d:64:60:3c:
0e:3d:5f:a3:43:eb:23:d4:a2:ca:02:fc:eb:0f:99:5f:0a:5f:
6f:e2:ac:c9:89:34:4c:fb:ad:24:36:7b:91:f3:79:d2:ac:c5:
60:ad:ca:02:42:7a:ea:1e:8f:5c:21:c0:d1:7f:60:a7:da:1a:
32:b8:21:4e:66:fe:30:af:6b:46:d1:f8:72:a7:ee:0e:f4:14:
93:f2:c8:c2:8e:e9:92:fb:9d:18:86:0c:90:16:dc:32:05:48:
0b:b6:b1:d5:94:9b:19:f9:4c:e5:36:69:ca:05:33:fb:85:d5:
05:24:6c:b9:ee:e0:87:ef:33:0e:40:ff:d3:00:57:8d:64:7d:
29:4c:33:74:ce:59:f3:d0:f1:94:8c:62:8e:0c:a6:67:95:7f:
1c:83:c2:63:f8:46:c8:12:da:53:76:18:b2:ed:9a:20:c3:74:
01:05:e9:42:71:59:38:7e:1d:48:94:75:3b:20:71:65:7c:61:
28:ee:9d:14:49:90:ab:d7:e4:9f:03:da:c6:0e:34:7d:c7:75:
a5:7c:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:04 2026 by rpki-client