Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: v6Rpyph2jEN0ISDO31Qb2HGPcGz1HdSJgwqg9Yq4020=
Subject key identifier: BC:D1:33:98:23:01:C5:BA:F9:8B:9F:13:62:68:43:5A:35:FE:98:84
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019F8F7E8D2BAA83538A6C8AC2BA55CF64FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 15:01:03 +0000
Manifest this update: Thu 23 Jul 2026 15:01:03 +0000
Manifest next update: Fri 24 Jul 2026 15:01:03 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: QbEfCjIXHi9qhAz/+ra3+T7x8RwzFrsywbJQjq1scgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:8d:2b:aa:83:53:8a:6c:8a:c2:ba:55:cf:64:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Jul 23 15:01:03 2026 GMT
Not After : Jul 24 15:01:03 2026 GMT
Subject: CN=bcd133982301c5baf98b9f136268435a35fe9884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:59:d0:7f:ac:65:41:ab:2a:6a:25:b5:d6:
fa:66:cf:7d:56:eb:fb:20:06:4a:70:47:ae:61:8c:
9d:77:00:91:fb:76:db:6a:79:98:a2:35:89:c9:28:
e6:97:36:5f:ad:57:7b:99:1c:bc:cd:08:de:a7:2b:
47:8d:8c:80:93:ae:19:e7:02:32:16:b8:7b:c0:4f:
e9:7d:f9:cd:24:21:29:2f:4e:29:2f:6b:3c:1c:b9:
3e:de:fb:e8:d1:26:31:42:10:12:08:93:ae:06:96:
47:ef:5c:f6:8f:9e:bc:e4:59:83:17:15:5b:1e:b8:
98:77:4c:97:ae:ce:39:57:96:f6:66:99:b3:d1:70:
d1:bd:8d:e0:4b:f0:a4:1e:a6:ca:c4:5d:f7:a3:29:
11:15:dd:ca:c2:6a:49:6f:11:f6:dc:19:e5:f3:16:
86:f8:0a:e3:62:3a:28:4a:74:bf:77:9e:ff:91:4e:
25:30:16:b6:6c:fa:ea:fb:66:50:4c:8b:c0:12:50:
23:bb:e7:c4:6f:c2:16:3c:6e:3f:32:55:92:af:f2:
c3:cf:c1:6b:ab:da:cc:95:64:f3:72:03:d0:af:eb:
38:e0:f5:c7:42:0f:ca:df:0f:35:46:13:77:9b:e6:
90:f9:dc:30:d9:75:dd:b7:77:a2:38:84:16:d9:aa:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:33:98:23:01:C5:BA:F9:8B:9F:13:62:68:43:5A:35:FE:98:84
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0a:9b:46:58:d5:55:ee:d0:60:18:f2:77:6a:03:fe:2e:84:
fc:65:f1:b3:e2:68:d4:87:94:ed:fa:76:3a:ca:8d:3a:5a:9c:
58:a7:dd:f3:df:36:31:e4:03:36:64:45:60:45:52:67:a7:9a:
94:44:68:44:dc:d0:c6:dc:6d:53:6f:c9:f0:72:43:d7:ef:3b:
63:a5:02:fa:96:61:66:67:ab:bc:f5:7b:be:36:6b:27:2d:d4:
9b:fa:aa:27:bf:c0:18:62:d5:00:6b:34:85:00:c9:3e:69:2c:
c8:2a:62:4f:b5:35:4a:b2:31:98:00:92:df:17:e2:16:1c:c1:
dc:a4:63:17:72:82:da:bf:fc:42:f7:0d:47:73:e6:2a:c8:92:
d5:1a:b8:b7:9b:5c:c3:c5:88:d6:94:9e:cb:40:00:66:ac:ad:
0d:85:fb:e8:e8:81:7c:1c:10:61:1a:8f:6b:09:22:31:93:a6:
28:e7:9c:75:65:19:58:62:d8:b5:b1:49:88:46:5c:06:66:07:
6e:47:d8:40:40:7e:52:48:a9:c6:94:b9:6b:81:9d:c1:c2:28:
e1:16:d7:ef:41:cf:ab:d5:59:53:df:eb:5a:ef:80:81:5a:3f:
d5:5b:dc:8f:4b:2b:31:1a:f1:b1:4c:2d:1f:09:0f:78:66:75:
2e:ff:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:37 2026 by rpki-client