Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: 9S1NitwjNh2BFjR2oew8/lA1PfiqR95uU7xbA+NPlBw=
Subject key identifier: 2D:76:56:68:73:CF:9E:9A:83:8C:60:A6:77:51:B5:4D:B4:B0:50:24
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 01A0D1FFE8969C30C783958741C97351A7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1A69
Signing time: Thu 24 Sep 2026 06:00:04 +0000
Manifest this update: Thu 24 Sep 2026 06:00:04 +0000
Manifest next update: Fri 25 Sep 2026 06:00:04 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: K1+u1iAvA6Htoh0S/lwvuxvc12Xmj6Op+70Coj/PUkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:e8:96:9c:30:c7:83:95:87:41:c9:73:51:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Sep 24 06:00:04 2026 GMT
Not After : Sep 25 06:00:04 2026 GMT
Subject: CN=2d76566873cf9e9a838c60a67751b54db4b05024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:ce:2e:84:57:5d:c2:f6:83:be:8f:d8:67:
d4:28:3e:db:66:f1:af:23:e3:b8:70:c4:4f:54:4e:
7d:b1:3a:31:9b:45:c5:60:3e:1e:0f:20:2f:57:c9:
4c:ee:27:e0:e5:c7:f1:da:b2:c7:df:12:e0:9b:c8:
bd:9a:98:92:33:29:33:c5:2b:db:36:bb:2d:44:df:
79:5a:7a:46:4d:92:6a:32:f1:65:d0:9d:cf:07:28:
f2:16:7d:7a:d6:2c:0e:d1:a9:e6:f3:be:cb:bd:9e:
7b:a6:2e:78:c0:7e:15:75:97:58:9d:a8:fe:58:22:
04:62:35:d8:29:d5:e3:f9:2b:af:d8:48:e3:2f:2c:
1a:70:49:23:8a:99:9b:a8:f7:ab:d4:70:49:89:58:
14:46:4a:51:2a:6f:f9:a5:76:9c:9f:e6:a1:20:8f:
8d:05:38:c8:6a:51:58:b4:ad:1a:5d:db:f3:4f:6d:
95:2c:44:8c:46:47:d4:15:87:7a:1e:5c:9c:f5:75:
72:c0:b2:7f:67:da:b6:2f:0e:13:ef:d9:2c:f0:a9:
74:42:09:e2:2e:0a:57:f4:0a:7a:a4:59:59:c6:ce:
8c:27:8c:db:b6:96:3f:57:f6:4a:d2:d1:35:44:7a:
63:c6:d9:54:57:b2:1b:d1:d2:75:59:d9:d8:7c:0a:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:56:68:73:CF:9E:9A:83:8C:60:A6:77:51:B5:4D:B4:B0:50:24
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:24:80:81:29:86:b1:da:ca:ff:0b:ec:c9:34:79:86:d4:
32:90:dd:cb:44:80:c3:50:40:23:bf:35:e2:6f:0f:3d:3d:46:
ab:87:c5:12:09:52:a9:28:24:7a:2d:a8:7a:31:08:6d:89:55:
c9:67:76:c2:19:c7:b0:df:3f:9c:60:18:7d:d8:88:83:73:53:
f8:54:b9:03:81:20:47:e2:8c:8d:86:84:99:47:c5:73:d2:aa:
ba:a9:9c:c7:9c:20:bf:cb:9b:46:1f:b9:1d:50:bd:ef:0c:24:
68:b4:30:06:0f:2b:ab:ca:86:1f:4b:4b:87:8f:5c:88:17:7e:
77:4b:9c:19:71:88:19:7c:48:07:7f:37:52:3c:dd:8f:2f:5b:
7e:b8:63:31:75:49:2b:4f:3e:92:f5:da:d9:59:2b:e1:89:f8:
67:02:35:57:1e:67:c9:5e:47:bb:c2:67:b1:f2:d2:ff:01:17:
1f:9d:96:fa:f3:f3:66:a2:cb:25:2b:07:5c:45:1e:38:72:b3:
2b:9f:79:96:b8:5f:e0:7e:32:7e:b9:5c:9b:c8:d6:1e:16:f2:
80:2e:5a:fe:f0:58:44:07:f4:e3:d8:61:12:a1:b1:46:83:33:
35:2d:e9:81:bd:76:1c:c4:1a:4e:11:f5:4b:43:76:2b:cd:f8:
73:b8:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:06:03 2026 by rpki-client