Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: xwWU6kuYRx+B3JJaerbLfDHtiePL2XwdWnxommijpy4=
Subject key identifier: 83:C6:89:59:E8:8C:9F:F1:75:90:E3:6E:81:FF:53:0D:05:95:7F:D0
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 019D2704AFDBBA57DE95FC7283561D78A726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0D14
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: hXCR742QOpj+RHKdS+z/M46DcgDe/TkQmCcoqsEPzCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:af:db:ba:57:de:95:fc:72:83:56:1d:78:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=83c68959e88c9ff17590e36e81ff530d05957fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:92:50:e3:45:f6:34:13:37:fa:ae:71:d4:
0f:37:c1:ca:53:9a:8a:29:3d:e6:2a:3d:ff:5a:e5:
77:a1:6b:30:a9:59:62:6a:09:18:71:32:48:a6:1f:
f1:fc:5f:e5:ef:a4:06:09:81:42:d3:f4:78:18:a8:
d0:62:6c:38:9d:30:bd:26:a6:98:79:af:55:b9:cb:
a9:86:3f:1b:9c:d9:2d:7e:74:c5:a4:5c:77:aa:99:
da:39:6b:6b:8b:3c:db:b4:be:de:07:4b:94:46:bd:
2a:2e:64:1a:79:2d:97:ad:30:18:31:30:6a:e3:f2:
25:15:3d:ae:8a:9f:d6:12:4e:fa:9e:fe:b6:69:77:
f1:ad:5f:3b:e5:2e:47:d1:bc:b2:30:da:37:5d:67:
46:72:94:11:f3:0e:cd:ce:72:60:93:13:13:7b:c6:
06:23:5d:5d:94:d4:ab:96:0c:19:08:1f:15:71:06:
e5:28:2e:53:51:e6:cd:91:5b:77:cd:32:9f:b2:d3:
17:43:1a:b9:21:d3:13:bf:58:b4:39:e9:f6:b3:97:
d3:81:58:2d:f3:65:83:75:19:8f:3d:b6:7d:1a:29:
14:6d:f7:52:7c:6c:12:d3:9b:90:b6:09:bc:20:3e:
b8:bd:49:6f:ba:0e:c9:90:59:e2:0b:21:ed:d6:28:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:89:59:E8:8C:9F:F1:75:90:E3:6E:81:FF:53:0D:05:95:7F:D0
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:36:d6:5c:0f:5b:10:6f:96:7f:2a:f2:6e:00:9e:dd:fb:
ce:70:b9:ae:33:39:eb:10:95:11:d3:f9:67:32:7c:e1:ae:d7:
85:53:8e:d1:5d:40:20:d0:70:85:b7:05:f1:b5:c4:b9:13:4e:
8d:81:1f:a2:8a:be:e0:f3:84:3a:51:57:c8:c9:f0:08:bb:c1:
95:de:c9:21:10:5f:f1:6e:5f:5d:18:44:38:59:42:ea:fb:4f:
84:12:6e:33:2e:7b:1d:33:c7:18:12:a3:76:bd:8b:5a:9b:fc:
36:8b:63:7f:93:27:28:61:9f:86:c7:51:83:b8:4c:8e:23:9b:
61:0d:0d:8a:6b:30:38:39:5e:04:82:05:f2:fa:32:89:3f:d1:
29:c1:02:7f:ee:b0:7c:4c:29:27:a6:08:7d:ea:3d:84:8e:51:
2b:ad:6f:1b:05:57:1a:ce:e0:e3:df:6d:4c:9e:1e:34:28:ff:
a1:fd:c5:9e:41:78:b3:3e:39:5b:22:ac:54:31:91:06:21:7b:
8a:f4:04:2a:96:c4:39:e1:a9:a7:89:39:b8:e0:a0:46:9a:20:
81:4e:b6:d0:16:ea:5e:81:1e:64:8b:ae:7c:67:1f:f1:99:01:
a1:63:c6:58:93:9d:6c:12:0c:c6:35:c0:c9:1f:7b:c0:2c:40:
12:49:91:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:07 2026 by rpki-client