Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: M+Gq0F0rE8o0Usan8F2T1YY540RwQkKz8SyHBy7NcjE=
Subject key identifier: 92:DC:84:A6:04:E9:D9:81:23:1C:D5:7F:D7:E4:17:34:9F:F3:B7:25
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019E1DC7843720DB9E63E17DE62DCADFB769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 16D5
Signing time: Tue 12 May 2026 20:01:15 +0000
Manifest this update: Tue 12 May 2026 20:01:15 +0000
Manifest next update: Wed 13 May 2026 20:01:15 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: yUBJLkOBNgXUQlM+GHykL+M60iD/tlH0xVOd52+iSMY=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:84:37:20:db:9e:63:e1:7d:e6:2d:ca:df:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: May 12 20:01:15 2026 GMT
Not After : May 13 20:01:15 2026 GMT
Subject: CN=92dc84a604e9d981231cd57fd7e417349ff3b725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:c8:84:47:16:e2:87:f3:04:93:58:7e:a5:
2a:68:a3:13:dd:09:d0:44:a2:50:db:12:03:33:ea:
78:c1:b1:f6:24:bf:96:8c:19:08:7f:e1:39:98:35:
73:28:a3:bf:0b:4d:ce:ba:f1:94:3b:f0:4a:bc:cc:
4e:1b:ca:ae:21:99:fe:aa:07:2a:ea:d4:c1:73:41:
c9:c4:ac:f9:b2:f5:cf:4d:b3:87:2b:b8:4a:32:af:
73:94:d8:b0:d8:44:f4:f0:fa:ca:ed:5f:fa:e3:4a:
64:eb:f4:1a:af:ff:af:d5:26:1c:7d:fd:1e:ec:56:
43:c6:9e:8e:9c:b5:3e:fa:ae:3d:83:90:f1:95:4f:
6d:37:da:a7:d5:5a:86:c3:b1:79:34:24:ae:9c:e4:
9e:17:fc:8d:11:66:41:71:13:11:26:7c:64:cb:6f:
45:9d:98:db:88:30:19:89:05:4c:87:81:63:9c:29:
53:10:d4:c8:32:43:e2:e1:18:7b:20:e7:c2:b4:ab:
a0:7b:b6:1f:44:b5:47:9c:59:73:ba:9f:45:84:6a:
fb:6a:bf:bf:fb:77:6c:5c:21:84:13:18:2d:65:e7:
26:21:ef:8c:d1:f4:25:5c:5d:b9:8c:00:b2:2c:25:
e3:5a:04:c5:66:1f:d1:98:44:28:a4:68:1c:39:00:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DC:84:A6:04:E9:D9:81:23:1C:D5:7F:D7:E4:17:34:9F:F3:B7:25
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:cd:b5:c1:df:bf:3a:4f:99:0b:3c:27:54:1b:f9:db:12:
48:89:81:f1:d5:7d:29:a1:45:f4:2a:7e:67:98:9d:0a:c3:5a:
bd:2c:76:e9:3a:3c:cd:ae:95:23:c3:81:cc:25:89:25:7e:68:
e4:3e:9b:79:a0:10:4b:46:a9:d8:7f:6c:0e:75:16:b1:4e:b0:
24:15:31:5b:e8:08:a3:e2:93:df:45:ab:16:27:92:6a:94:49:
42:2d:3a:a9:44:23:ed:b6:95:7a:1b:ff:e8:cb:8a:46:a0:32:
5b:c9:27:e3:45:0a:76:69:47:fd:95:24:55:9c:38:64:58:ac:
66:75:ab:b1:45:b2:a0:a5:e0:90:ad:6f:8d:ff:c3:fc:d6:a2:
9f:b8:c7:6e:b1:fa:44:e2:a8:66:59:f1:5b:1b:34:44:c1:c5:
13:19:09:2f:5b:91:4d:f7:0b:14:97:cc:67:3a:1d:36:4c:52:
f6:12:e3:dd:d8:02:8b:b9:aa:a0:ee:6e:09:d8:b0:30:71:ee:
da:e2:0f:d0:ac:b0:84:1f:0a:7f:06:c0:ab:d2:19:3b:65:64:
07:40:89:96:d6:c4:a2:88:00:23:8c:ad:66:c2:b0:78:09:2f:
37:ba:2b:8b:aa:34:9d:a5:3e:e9:c9:9a:0d:8e:a7:c5:e4:b9:
3d:75:5a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx4Q3INueY+F95i3K37dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjYwNTEyMjAwMTE1WhcNMjYwNTEzMjAwMTE1WjAzMTEwLwYDVQQD
Eyg5MmRjODRhNjA0ZTlkOTgxMjMxY2Q1N2ZkN2U0MTczNDlmZjNiNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUbIhEcW4ofzBJNYfqUqaKMT3QnQ
RKJQ2xIDM+p4wbH2JL+WjBkIf+E5mDVzKKO/C03OuvGUO/BKvMxOG8quIZn+qgcq
6tTBc0HJxKz5svXPTbOHK7hKMq9zlNiw2ET08PrK7V/640pk6/Qar/+v1SYcff0e
7FZDxp6OnLU++q49g5DxlU9tN9qn1VqGw7F5NCSunOSeF/yNEWZBcRMRJnxky29F
nZjbiDAZiQVMh4FjnClTENTIMkPi4Rh7IOfCtKuge7YfRLVHnFlzup9FhGr7ar+/
+3dsXCGEExgtZecmIe+M0fQlXF25jACyLCXjWgTFZh/RmEQopGgcOQD6bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLchKYE6dmBIxzVf9fkFzSf87clMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYDNtcHf
vzpPmQs8J1Qb+dsSSImB8dV9KaFF9Cp+Z5idCsNavSx26To8za6VI8OBzCWJJX5o
5D6beaAQS0ap2H9sDnUWsU6wJBUxW+gIo+KT30WrFieSapRJQi06qUQj7baVehv/
6MuKRqAyW8kn40UKdmlH/ZUkVZw4ZFisZnWrsUWyoKXgkK1vjf/D/Nain7jHbrH6
ROKoZlnxWxs0RMHFExkJL1uRTfcLFJfMZzodNkxS9hLj3dgCi7mqoO5uCdiwMHHu
2uIP0KywhB8KfwbAq9IZO2VkB0CJltbEoogAI4ytZsKweAkvN7ori6o0naU+6cma
DY6nxeS5PXVa+Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:13:11 2026 by rpki-client