Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: i5B99jKuZ7sssdFN26oLIY1m0SW0wPUoAK0Q21eX7ZM=
Subject key identifier: 87:55:EB:6B:21:1D:27:B7:E9:B1:96:07:4F:D8:A7:0D:05:E9:B0:DD
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 019D2B4EB1CD179D08B6173D96C6CE5E18DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 18:01:10 +0000
Manifest this update: Thu 26 Mar 2026 18:01:10 +0000
Manifest next update: Fri 27 Mar 2026 18:01:10 +0000
Files and hashes: 1: nQwNTcvcN16kGMcF9EkVK9LTmpA.roa (hash: fbtF0vzhJretPqTSidwr3SzDufK3auj33qZoaGUrKJc=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: Ls63nlDqk/M5awZ2+kaffiLHVW5hDKjtvqt58BdfqBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:b1:cd:17:9d:08:b6:17:3d:96:c6:ce:5e:18:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Mar 26 18:01:10 2026 GMT
Not After : Mar 27 18:01:10 2026 GMT
Subject: CN=8755eb6b211d27b7e9b196074fd8a70d05e9b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:d9:84:de:b9:f0:e6:c9:70:f6:46:e6:e7:
0e:9a:c4:45:72:40:7e:b8:52:2d:52:cb:5d:72:6f:
e4:0e:a5:b8:23:ef:cd:8e:29:d0:4d:96:89:03:c8:
6e:08:95:3d:a7:0f:6a:98:76:8c:e1:af:78:5d:70:
ac:3b:52:18:46:2e:ea:50:53:fe:13:d1:c8:8a:86:
71:91:06:1a:bf:90:1b:d4:9d:bc:be:2c:0f:7f:ca:
d0:49:6b:5a:ef:75:3a:65:f7:9e:7d:6d:a2:11:7f:
63:42:10:50:c9:63:ac:f1:a0:56:a4:4b:b7:4f:76:
4a:5c:1d:79:a9:0b:df:19:2f:48:e9:18:80:57:e5:
0d:4b:29:8c:0c:4a:2d:83:b9:37:22:59:00:9d:a4:
74:af:0a:35:63:8e:bd:66:49:b0:ea:b8:6d:17:61:
07:27:92:38:f7:ac:51:58:35:5d:d7:05:ad:e3:ba:
b7:f8:3a:d2:32:f4:ba:dc:ec:33:40:4d:11:9c:5d:
74:38:5d:87:66:75:b7:c3:13:42:05:66:e4:d5:dc:
07:88:b0:fe:ed:8f:55:13:06:94:02:df:dd:36:8f:
d9:cf:9d:70:cd:1b:be:4d:a3:21:a0:98:f3:56:39:
61:81:db:c2:e1:6d:89:16:a4:a8:b1:6f:ed:44:ff:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:55:EB:6B:21:1D:27:B7:E9:B1:96:07:4F:D8:A7:0D:05:E9:B0:DD
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bb:44:1e:d4:f4:cf:20:a4:2f:4a:6f:2a:9d:46:2e:d2:cb:
88:d0:d4:b5:84:cc:2e:da:fe:2c:b4:59:e8:fd:99:a6:06:c7:
c2:3a:e6:d3:5f:0f:fe:ba:36:de:1d:29:3d:b7:17:10:49:40:
53:de:dd:98:41:fe:7a:3a:96:ba:2f:ca:73:ca:7f:39:4e:af:
2f:88:97:72:9a:aa:99:cd:c0:d8:4a:86:1e:a6:66:b0:35:88:
b6:4f:29:64:ad:f0:51:2d:b1:e9:54:d4:53:2d:cf:53:6c:85:
5d:6e:06:41:49:bc:1c:d1:c8:1d:98:ae:17:69:b6:11:60:ac:
fa:52:3c:ea:6f:98:79:07:cf:c6:74:f2:f9:7d:33:e8:44:39:
2f:01:88:29:79:24:99:98:6e:65:5a:49:9c:33:cb:dd:68:b4:
ff:63:9e:c1:6c:f0:af:db:ef:ba:fb:e6:4f:b0:49:68:6f:7b:
5f:09:ad:b7:78:9a:6c:88:9f:03:18:16:15:78:bb:e4:4d:3f:
7a:46:e9:8d:bb:9a:90:d6:d3:d9:00:3c:a4:3c:da:c2:b1:98:
d8:12:5f:b6:1f:64:75:64:86:7f:c8:b6:4e:66:d1:95:57:05:
84:0c:a5:84:1b:34:fe:e0:8f:39:e7:82:01:f5:8b:cc:3a:3f:
10:7b:d9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTrHNF50Ithc9lsbOXhjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx
ZGViNGIwHhcNMjYwMzI2MTgwMTEwWhcNMjYwMzI3MTgwMTEwWjAzMTEwLwYDVQQD
Eyg4NzU1ZWI2YjIxMWQyN2I3ZTliMTk2MDc0ZmQ4YTcwZDA1ZTliMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3ZhN658ObJcPZG5ucOmsRFckB+
uFItUstdcm/kDqW4I+/NjinQTZaJA8huCJU9pw9qmHaM4a94XXCsO1IYRi7qUFP+
E9HIioZxkQYav5Ab1J28viwPf8rQSWta73U6ZfeefW2iEX9jQhBQyWOs8aBWpEu3
T3ZKXB15qQvfGS9I6RiAV+UNSymMDEotg7k3IlkAnaR0rwo1Y469Zkmw6rhtF2EH
J5I496xRWDVd1wWt47q3+DrSMvS63OwzQE0RnF10OF2HZnW3wxNCBWbk1dwHiLD+
7Y9VEwaUAt/dNo/Zz51wzRu+TaMhoJjzVjlhgdvC4W2JFqSosW/tRP9kCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdV62shHSe36bGWB0/Ypw0F6bDdMB8GA1UdIwQY
MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt
ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx
LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLtEHtT0
zyCkL0pvKp1GLtLLiNDUtYTMLtr+LLRZ6P2ZpgbHwjrm018P/ro23h0pPbcXEElA
U97dmEH+ejqWui/Kc8p/OU6vL4iXcpqqmc3A2EqGHqZmsDWItk8pZK3wUS2x6VTU
Uy3PU2yFXW4GQUm8HNHIHZiuF2m2EWCs+lI86m+YeQfPxnTy+X0z6EQ5LwGIKXkk
mZhuZVpJnDPL3Wi0/2OewWzwr9vvuvvmT7BJaG97Xwmtt3iabIifAxgWFXi75E0/
ekbpjbuakNbT2QA8pDzawrGY2BJfth9kdWSGf8i2TmbRlVcFhAylhBs0/uCPOeeC
AfWLzDo/EHvZLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:12:40 2026 by rpki-client