Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: bZs6sfFg2unklDQZxJiGi9jZejLx/3cVBrOog+zd3B4=
Subject key identifier: DE:F6:08:2B:DE:0B:07:0F:28:3F:FB:6E:1F:0E:CD:94:77:30:E8:F9
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019D2628540B648AE67D018A8B7A8E40B4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:10 +0000
Manifest this update: Wed 25 Mar 2026 18:01:10 +0000
Manifest next update: Thu 26 Mar 2026 18:01:10 +0000
Files and hashes: 1: QdPFDtWVxkEJpznnKF6tITle6G8.roa (hash: DNgnhPj30PZlfK71mnwNTLe3HEwOKQYeLOXwSPHiQp0=)
2: Qtm2y6O9fQOxDLh4r9HUduXRJPk.roa (hash: EeZqlsTqzdCbFC/CM71VpRuG30gKSOjHa90sXicLvG4=)
3: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: tyDHx+shTExBvy+Jzuquc23RoNvtYnJIjtSsbMtn/tI=)
4: qkZbad248G4D0mXEkOMEjzYi1Ec.roa (hash: fqso9UJIp15vhELsb8vv3FftzXgRXh9zaLx7ly4FaQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:54:0b:64:8a:e6:7d:01:8a:8b:7a:8e:40:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Mar 25 18:01:10 2026 GMT
Not After : Mar 26 18:01:10 2026 GMT
Subject: CN=def6082bde0b070f283ffb6e1f0ecd947730e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:4c:32:ea:06:5b:7f:4d:dc:94:be:cc:d0:
ac:16:05:30:d3:0a:3a:42:ad:b2:63:11:c1:22:ec:
c1:60:90:11:c3:e1:a3:92:e1:4a:d8:93:43:a9:9c:
89:13:af:bc:54:05:c7:0e:0b:4a:cb:b6:3f:89:8f:
9d:85:44:0a:1b:81:d1:9c:db:95:b2:cc:4d:4b:36:
9e:26:2e:7c:e2:c0:9d:61:40:1e:72:64:8f:7a:8e:
79:b1:aa:67:e1:5c:45:5f:3d:4a:4e:c7:bd:89:ff:
be:ae:1b:3f:3f:72:03:6e:fd:9b:a4:24:dc:ea:d6:
68:42:a5:e6:b4:cf:9a:7d:e2:02:60:e0:77:22:35:
b8:9d:d0:50:8a:73:76:64:78:ed:57:bc:9a:e6:c7:
ae:92:25:1a:c2:1f:01:9c:94:5f:0d:66:ca:0c:42:
f4:88:1c:b9:71:4d:69:8b:21:db:47:96:b9:0e:cf:
dd:5b:47:43:bf:76:3f:6d:94:81:67:d9:f2:46:73:
18:9c:90:14:4e:f6:59:9a:14:84:21:90:0c:7f:f9:
1e:7d:c5:31:3a:d1:39:db:17:ef:b3:8d:6a:78:c7:
13:b9:b3:b9:5e:55:32:42:4f:10:71:05:6e:ab:93:
20:95:19:0b:38:0f:ba:fe:15:52:d5:ac:99:68:7d:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:08:2B:DE:0B:07:0F:28:3F:FB:6E:1F:0E:CD:94:77:30:E8:F9
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:a3:bb:7f:10:c5:40:9d:a4:33:11:ec:6e:c1:c2:be:0b:
db:16:15:93:9a:fc:2f:d0:b0:b7:22:9d:52:c7:ee:9d:d5:c7:
6c:55:d4:c0:2b:5d:a6:58:ee:9a:66:31:4b:e0:2c:a1:4e:f4:
8d:89:46:5f:e6:01:f7:e4:08:02:f9:4b:ab:a4:88:fd:58:2e:
51:9b:e1:cc:4f:bd:f1:4b:39:b0:54:09:a2:39:50:9d:72:9f:
41:80:74:15:ae:39:b8:16:ee:0b:de:46:04:5a:c9:ee:ed:36:
58:42:01:b7:a7:92:8b:3a:b6:c6:a2:90:ba:24:ce:9a:45:c2:
7c:aa:1e:03:dc:32:67:ac:c4:91:53:8f:bc:fa:b7:42:6e:83:
c5:f0:8b:3e:aa:4e:51:99:31:a6:b3:9f:65:14:8a:ab:69:be:
43:bd:cb:16:f4:14:74:d8:4a:6f:ab:b5:1b:df:7c:15:c6:07:
d1:e7:8f:98:e1:38:84:4f:9e:dd:3e:36:25:66:97:af:4a:07:
98:5f:5b:68:05:61:40:c0:8c:75:1c:35:7e:a9:17:fb:b7:6d:
34:6d:b7:4a:e1:2b:42:36:3a:ab:94:d0:09:82:b3:d3:e7:ac:
75:9c:5e:29:da:eb:6d:2b:63:cd:19:33:9b:53:f3:9f:fd:48:
80:34:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:55 2026 by rpki-client