Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: FRtdovIqSd4oADNTR6Pk0eiAhwYWFnhLqGu5fBtWoLs=
Subject key identifier: B7:F7:82:72:9C:4A:79:71:17:21:9A:EC:54:06:13:32:9F:F1:99:58
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019F9090F32EEA064529F6A43E8282FD53DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1795
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: oGpFdw/zolpm2ASzHSvHxaAk/LrfwpRip1/ecpR2wU0=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f3:2e:ea:06:45:29:f6:a4:3e:82:82:fd:53:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=b7f782729c4a797117219aec540613329ff19958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:aa:19:35:58:a7:17:78:30:1a:2a:d5:9e:
10:de:8a:3a:f6:03:f0:ec:21:68:56:85:a8:d5:de:
6d:a4:e3:ed:26:e6:59:89:15:3b:9c:a0:55:9b:59:
25:50:c2:ce:a3:00:b6:46:87:89:94:74:c2:96:36:
31:59:8d:a9:41:14:c7:25:c1:4b:df:d5:eb:86:a4:
43:e5:ae:21:59:0b:9b:02:81:d6:f5:5a:d2:5e:76:
d3:a1:f8:96:9d:b6:d8:27:42:a3:68:a8:60:7d:db:
17:4e:5e:d8:86:1e:23:2c:6e:55:f8:70:93:03:41:
01:64:91:1d:c2:5c:b4:4d:af:30:0f:c6:cb:d0:0c:
66:2b:9c:27:fc:aa:27:af:14:da:51:d6:ed:88:a1:
a4:a4:5e:1c:60:32:a9:b8:85:85:5b:51:80:f1:69:
18:32:85:30:e8:30:4e:d2:f3:1d:dc:de:1d:8a:29:
db:11:2b:ec:24:2d:fb:47:65:71:6f:c0:79:22:81:
95:b3:ed:e4:71:63:7a:5a:8e:9e:78:c1:a5:bc:53:
e2:04:fa:d1:e5:c4:47:ce:7e:38:18:b1:09:1c:a7:
d2:ba:ec:6c:eb:26:c7:bd:ca:68:ac:57:76:95:16:
26:3e:70:5e:88:40:68:df:20:28:bd:e4:b2:ed:1b:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F7:82:72:9C:4A:79:71:17:21:9A:EC:54:06:13:32:9F:F1:99:58
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:65:97:9c:8d:00:9d:eb:70:31:bd:37:43:39:9a:a6:a6:1d:
c6:dc:cb:3e:7a:3f:b8:59:10:d5:0e:fd:25:99:78:16:db:7b:
a7:66:91:7e:24:b3:16:e6:f7:c1:e0:f5:c3:ae:0d:1e:5a:41:
c7:d7:d4:67:0e:75:42:bc:4c:67:da:86:83:74:04:3b:99:ec:
75:0e:44:c7:b0:55:68:13:4a:cc:2c:cf:6d:5e:26:93:33:a7:
ab:8b:12:cc:48:00:49:d5:36:72:75:42:99:db:99:4d:03:ea:
65:31:7c:0e:c1:11:ad:a4:8b:55:2d:1d:ec:c8:e5:f2:6e:57:
a9:7a:52:1d:92:eb:da:8c:d4:8d:0b:35:b8:c7:b8:41:5e:83:
c7:a7:78:ee:d8:51:d6:90:26:f1:a0:51:24:2f:b6:e8:d1:98:
df:dc:5c:fe:3e:00:5b:90:79:d7:45:de:da:85:c4:ac:16:a9:
f1:f4:96:36:07:9b:bf:79:b4:55:fa:04:62:df:c7:d9:a1:c9:
f9:65:5f:64:16:67:2e:b5:62:74:be:e8:df:46:30:54:54:5e:
6b:9f:0a:c9:15:a6:c0:61:7b:ba:47:90:4a:8f:5f:cb:83:22:
2c:bf:89:34:fe:39:b0:af:43:7c:b1:e3:fe:67:b6:c6:41:2d:
0b:59:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:48 2026 by rpki-client