Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: oACUoKrpp/MmklMMPWOLpAEnYsmrf/cRGou2GzAcCj0=
Subject key identifier: 0F:60:BE:79:EB:4C:A5:F0:21:28:9A:E7:62:6B:D4:E2:55:0D:5E:9D
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019E1E35683DAE250D515D592DA6403293C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0F84
Signing time: Tue 12 May 2026 22:01:16 +0000
Manifest this update: Tue 12 May 2026 22:01:16 +0000
Manifest next update: Wed 13 May 2026 22:01:16 +0000
Files and hashes: 1: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: 16EM6cNlIAQj5EzNijD0CZzuC79BNXahZt0ega9GHF0=)
2: tPOM2vOyRXLlpAH8tGuHWMTFfJE.roa (hash: +fqqEcmQJOglmRruo7MOCNENvJ3e5VUzYn6LUaZmpyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:68:3d:ae:25:0d:51:5d:59:2d:a6:40:32:93:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: May 12 22:01:16 2026 GMT
Not After : May 13 22:01:16 2026 GMT
Subject: CN=0f60be79eb4ca5f021289ae7626bd4e2550d5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:75:cd:42:03:20:ff:3d:2e:b1:5f:a1:2a:
c9:3e:5c:f2:eb:a0:a0:e4:c9:0e:12:38:ad:4a:d0:
7e:98:95:64:b9:c8:11:9a:b6:dd:a0:22:e8:f4:b6:
d8:3d:d6:40:e0:67:05:0e:f9:b3:6d:d6:53:c9:cf:
fd:b8:cf:8b:8a:8c:8f:a0:ae:99:5d:43:1c:ba:c4:
68:ed:a7:9d:c6:ad:f2:33:08:7a:bf:5b:fb:4a:8e:
53:f6:05:90:21:9f:1c:b0:91:ad:6e:bb:21:9b:7e:
a6:fa:18:38:61:74:a2:e3:fc:8e:70:fb:80:b7:78:
69:4c:07:75:32:7d:e4:6b:1a:dc:4d:d7:b0:e1:e2:
07:2b:00:d2:ff:e8:54:a6:e8:20:91:36:0d:8f:64:
c9:5b:2c:a3:54:f1:81:e6:37:db:99:f1:2e:35:67:
ae:39:1d:9e:9c:76:7c:67:55:2b:83:52:43:c4:08:
0b:eb:7a:d3:ab:97:0f:fc:af:b4:a1:31:87:b9:b8:
9f:a4:d9:d7:59:1f:b3:5d:26:ec:7d:65:e4:18:c6:
ae:21:f5:03:10:75:e6:ee:40:17:99:2f:e8:90:77:
e8:c3:28:62:53:d1:8c:08:bb:19:69:3a:88:5f:3b:
a8:3c:25:cb:04:57:6f:03:83:34:dc:ff:77:b8:78:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:BE:79:EB:4C:A5:F0:21:28:9A:E7:62:6B:D4:E2:55:0D:5E:9D
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a0:22:39:70:a4:9e:03:38:43:30:93:7d:cb:23:b8:7a:38:
22:78:80:23:34:bb:e4:f6:a9:7a:53:48:61:5b:eb:5c:a4:92:
60:16:18:50:3a:f6:b1:02:4e:71:84:e4:26:2d:ac:eb:9a:05:
c3:c9:b5:82:b2:d8:86:7e:df:a1:24:df:88:8c:d6:d4:44:b7:
55:74:42:63:dd:c1:ea:c4:9c:cf:fe:dc:7d:02:89:57:50:74:
ee:8d:72:01:99:28:64:6f:fd:fe:a1:e7:dc:ca:c0:ac:b0:6a:
6f:b7:81:de:3a:2d:ff:2a:09:be:79:6e:0b:31:ec:4f:2d:fb:
47:c9:75:48:12:1e:95:38:3a:57:44:c7:27:55:68:b3:8a:eb:
6c:ff:a0:70:50:78:30:67:1f:1f:c8:58:37:e2:05:20:79:5b:
40:79:f2:23:89:1f:4b:1c:5d:46:32:ab:b3:ab:a7:99:e4:8c:
4d:44:c7:91:54:15:96:31:0e:a6:13:14:0d:ba:a5:c8:05:3a:
94:6e:e2:fe:56:b6:e4:12:05:fb:3b:f5:df:00:e6:90:6d:1c:
35:0b:05:f9:67:a9:97:49:fc:c0:fe:8e:8a:3a:d5:74:de:10:
d6:33:d9:3d:ba:54:c4:c5:ba:2e:b9:43:60:50:0b:e7:42:1d:
8d:5c:4e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:03 2026 by rpki-client