Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: m/IuvcZXX5Nqtz6+Gfmuwu2QHegDPf3muCLrJhw/vog=
Subject key identifier: 55:EA:3E:12:36:C5:F5:17:14:29:1A:0D:4E:46:F8:26:E4:4E:DE:98
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019D28F30A539F238765924E72BCE1530670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0F05
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: aBrvFQbe/ZqCjIxEt8CSIfEkwb+ZixmWN8JKkcYOyMQ=)
2: tPOM2vOyRXLlpAH8tGuHWMTFfJE.roa (hash: +fqqEcmQJOglmRruo7MOCNENvJ3e5VUzYn6LUaZmpyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0a:53:9f:23:87:65:92:4e:72:bc:e1:53:06:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=55ea3e1236c5f51714291a0d4e46f826e44ede98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:32:4f:20:61:37:ff:5b:a7:b4:16:5c:19:
f7:0d:96:6b:76:8e:14:20:df:42:e1:86:e2:cb:61:
c3:50:83:cd:c2:cf:cc:55:eb:21:9b:e0:a4:11:b0:
28:f7:35:22:99:e2:8d:a7:ee:7b:95:9c:aa:72:f6:
3b:af:0f:4b:c6:e0:e0:dc:11:aa:34:d7:4d:03:bf:
62:a8:21:01:92:9f:a4:78:69:50:08:9f:b4:17:0b:
ff:45:2e:1c:93:d7:0d:0d:51:25:16:a3:81:f8:f0:
59:42:2b:78:93:8b:62:b6:d7:f6:e0:ab:1d:04:f4:
86:d3:8a:3c:38:62:de:20:4f:d6:ef:a6:27:32:8b:
85:07:af:c5:af:12:85:b1:a5:36:5b:d3:69:b0:a7:
18:06:75:d8:16:d1:bd:b3:07:87:e8:cb:31:74:5b:
05:17:e1:85:51:e3:2a:0d:e6:ba:33:b0:a2:76:da:
2c:cf:00:f9:e5:61:ad:4c:28:31:c2:ad:b3:f4:cf:
2e:03:3b:c1:93:b4:45:fa:f5:00:bf:a7:60:ec:f9:
7a:16:59:56:b6:0a:e2:60:cc:b9:0c:75:02:b7:dc:
33:6f:25:f7:6b:61:04:cf:34:6f:ed:46:67:5a:bc:
3e:c1:fe:e8:73:95:08:11:90:ed:e1:55:0d:9e:7a:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:3E:12:36:C5:F5:17:14:29:1A:0D:4E:46:F8:26:E4:4E:DE:98
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:78:7b:d5:da:62:6b:d9:82:f2:71:61:9f:47:6b:27:06:38:
be:26:6c:63:0f:0c:f7:3d:5e:09:7f:9a:46:6a:32:fc:0d:b0:
36:a5:96:4a:0f:32:4f:ac:64:20:4a:15:e1:9b:75:a3:5d:ef:
e0:43:a0:1f:2b:c2:e7:65:0d:b8:03:fa:d7:cf:ae:03:7b:e1:
58:24:fa:76:a8:99:06:32:59:44:77:4a:05:4a:98:0b:21:26:
40:1c:cb:8a:2b:bd:71:c5:2c:e6:72:98:e5:09:01:ee:29:0c:
a3:e3:73:50:be:9c:e6:51:72:78:53:5f:c0:16:07:ce:33:e9:
30:e7:4e:a8:06:4b:8c:1f:58:ce:53:fd:8a:0f:63:db:21:91:
67:3b:bf:7d:2a:8f:e0:bc:2b:ff:d1:60:54:f3:5e:03:94:12:
ed:9e:23:20:28:0b:98:6e:82:59:18:e9:38:d2:80:59:bb:26:
6c:fc:f7:ed:6c:3a:86:ae:93:af:53:9a:1b:dd:1c:22:9c:b1:
5c:81:3e:a8:2c:d0:3b:f8:d8:c9:e7:e3:5a:38:91:24:60:fe:
61:7b:40:b6:e5:9b:62:b4:2f:c8:d8:2a:0a:69:91:2c:fa:92:
b7:5c:fc:d1:e0:c5:89:29:c1:87:78:ff:4d:85:79:a9:02:5a:
d4:67:02:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:38 2026 by rpki-client