Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: Mx2tkR47ZAgARvcvYEy1WrmY4VeImf62KHUDqwafsL0=
Subject key identifier: 46:29:B8:6C:A3:32:1D:35:B4:70:0C:BB:71:F6:DE:E2:6C:18:89:99
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019D277238EED77F71C2FB7B3A34118D4787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:30 +0000
Manifest this update: Thu 26 Mar 2026 00:01:30 +0000
Manifest next update: Fri 27 Mar 2026 00:01:30 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: xFT3SEIP6lNfdan2quQYGN40x/580nvt35nnBkggCS4=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:38:ee:d7:7f:71:c2:fb:7b:3a:34:11:8d:47:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Mar 26 00:01:30 2026 GMT
Not After : Mar 27 00:01:30 2026 GMT
Subject: CN=4629b86ca3321d35b4700cbb71f6dee26c188999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:4d:f8:72:36:0b:70:97:3b:c9:28:44:94:
e0:dc:c3:fb:2b:7c:28:d3:3d:ff:fe:35:c4:4b:88:
08:57:b8:de:5c:f2:8e:29:b4:97:37:e7:30:f1:59:
05:da:98:15:71:6b:4a:e9:8c:ca:82:83:53:ac:45:
9d:1f:68:3b:46:9f:c6:02:2b:65:5a:13:29:85:97:
19:99:08:db:65:6f:40:36:e2:ee:9c:83:27:a9:fb:
dd:f2:10:89:6c:53:6e:35:73:e0:cf:81:65:4e:41:
80:2c:9c:ae:fd:4e:90:4a:1a:ed:c2:a7:b6:c6:d5:
04:25:d0:d9:23:44:f3:c8:f7:7c:93:ea:75:ee:76:
19:0a:b9:53:9c:42:d3:0f:3a:bc:88:71:14:03:99:
7f:1c:77:d1:04:14:e9:f6:49:33:5e:d6:4b:67:83:
0f:d0:a4:9e:dd:03:d3:92:b8:59:af:ba:ea:c5:d5:
77:ee:b7:6b:1d:55:36:4b:87:1f:ad:6d:ef:d5:0e:
28:58:a2:4e:bd:a2:3a:27:f9:22:db:f2:b7:b5:e3:
4c:d0:34:8c:27:bf:97:0f:c1:12:12:8b:93:dc:32:
4f:d0:0f:87:a9:7e:6c:00:b6:74:0c:2a:14:da:bc:
7c:ba:f0:bf:6f:86:02:44:a1:d2:42:6e:e7:e6:0b:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:29:B8:6C:A3:32:1D:35:B4:70:0C:BB:71:F6:DE:E2:6C:18:89:99
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:02:cc:ae:e8:d0:89:7d:e3:10:a6:3b:c9:c1:58:11:50:84:
d7:ee:ab:4c:da:b9:f4:4c:0e:34:42:40:98:cc:af:a9:74:41:
66:0a:4b:75:8d:b1:e2:41:c7:58:26:5f:f0:1b:43:63:e1:69:
be:80:61:8a:5c:d4:98:8e:cb:ef:b5:b3:95:d8:48:5b:af:7d:
2e:40:78:f8:97:96:b7:d1:65:00:9d:6e:c3:3e:aa:be:74:9f:
79:23:9b:b4:72:74:aa:bf:36:32:33:64:36:f9:9a:11:96:c8:
8f:85:f6:b9:5a:2d:10:dd:f8:c9:96:74:01:2a:42:01:3a:15:
d8:9d:53:88:07:da:3a:bf:69:c6:c9:62:42:a9:98:16:48:0e:
18:07:0d:70:73:ba:e9:38:fc:b8:4b:f0:c4:8c:a7:e1:32:d1:
15:a1:aa:da:9f:92:34:fc:a8:11:fa:1b:90:cb:d0:54:9f:aa:
07:48:b3:03:8c:a2:fa:b0:ad:a5:e7:92:84:01:2b:e7:10:df:
d5:d8:24:e9:d7:83:c0:45:2e:17:4b:b7:7b:d0:c3:bb:4f:5d:
f0:42:80:14:55:f9:bf:ab:68:7e:f6:e3:bc:ac:6c:4e:ef:25:
a5:3a:7d:ad:55:fe:2c:9e:a8:72:a6:08:44:06:6b:3d:c2:c6:
fb:07:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:19 2026 by rpki-client