Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: Y/7soCJHQITVsgXhOybbIx8y+bKtYkaRz60kihruRDo=
Subject key identifier: 9E:74:35:F1:B9:49:33:ED:9D:C5:28:4B:70:80:1E:0E:59:31:69:BF
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019F8EA2A7E292607B8490181F643D4BCC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 11:00:52 +0000
Manifest this update: Thu 23 Jul 2026 11:00:52 +0000
Manifest next update: Fri 24 Jul 2026 11:00:52 +0000
Files and hashes: 1: 1-lqZd_6V2ASpt34rjyjv_QUBzd0.asa (hash: 96dnzPaigHhRx2YGVn9I5ztW/D5IGEU3Qr1lWZpM0/0=)
2: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
3: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: ju/6RiY40mlAPtbScHQoAz5/SfGBCrikslBXjHb8zeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a7:e2:92:60:7b:84:90:18:1f:64:3d:4b:cc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jul 23 11:00:52 2026 GMT
Not After : Jul 24 11:00:52 2026 GMT
Subject: CN=9e7435f1b94933ed9dc5284b70801e0e593169bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:3b:95:76:c5:f5:f4:bf:04:07:0f:7e:1b:
4c:0c:07:40:35:0f:42:c3:e1:d2:e6:b3:bb:dd:c1:
b1:f5:ea:11:6a:df:26:eb:c1:f0:4b:8e:8a:25:26:
28:a3:2d:53:2f:d6:8f:3f:5b:19:96:52:5d:33:df:
1d:53:a7:ca:7f:cb:15:2f:80:9c:59:52:c7:4c:31:
9e:80:6f:15:16:d2:27:cd:e2:1d:24:90:d3:56:3c:
96:3b:1e:a4:fa:b1:5d:6d:28:57:63:e9:c8:b7:55:
89:30:c5:02:89:ab:49:7d:36:0e:77:96:b3:2b:33:
8d:0f:7f:2b:ca:8b:47:fc:02:1f:79:d6:4a:e3:e2:
1b:96:f6:31:5d:8a:32:33:a3:ee:cc:c3:03:bb:3b:
e3:a6:17:7b:79:75:20:e5:21:bd:c9:b9:10:42:16:
72:3b:20:53:cc:a5:57:79:57:ba:94:92:21:a5:33:
a8:67:ce:8f:b3:a1:d4:64:52:ab:9a:5e:48:51:13:
b3:5f:5e:7c:51:69:4d:a0:e5:78:79:3a:0e:a8:7c:
d6:d9:d8:7b:80:fa:aa:78:bc:5e:ea:c0:0b:ce:e6:
15:b3:4c:c1:21:db:db:89:dd:bc:1e:57:94:d6:71:
81:76:3d:64:c1:87:70:dd:7f:6c:5d:34:fa:3b:ad:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:35:F1:B9:49:33:ED:9D:C5:28:4B:70:80:1E:0E:59:31:69:BF
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:9b:77:5b:d9:f4:45:74:6c:56:dc:18:5a:77:53:e4:56:
fe:e9:1f:dd:f5:67:df:78:56:11:60:f9:04:5c:28:40:a0:11:
b3:04:99:c7:e3:df:e4:7b:0b:c6:35:3b:47:9c:f4:2d:2c:cc:
45:50:69:46:f1:df:16:23:1e:16:c4:3b:b7:66:09:92:7e:66:
92:25:6e:2e:7c:4b:2b:88:c0:c9:0c:16:08:77:7a:d8:5f:08:
ae:28:dc:10:3b:e8:65:d9:00:8c:b2:a8:5f:6f:53:57:c6:f0:
0c:ac:7b:54:05:7a:26:3e:18:8e:f3:7d:88:cc:86:63:07:a8:
02:e5:9c:5a:7b:c9:9c:e1:3b:33:a4:f6:ce:f3:46:46:ca:dd:
49:85:c7:6d:59:a5:a8:d0:8e:c5:b2:50:b7:9b:6c:1b:eb:46:
56:e8:8d:e8:b9:7a:5e:f8:69:ce:71:25:9b:b8:ff:0d:94:d1:
23:d1:4e:b3:cc:3d:23:89:4a:87:21:a0:49:99:c5:d7:93:f6:
b8:5e:7e:cb:3b:bd:8c:35:25:c5:6b:f0:af:d7:4e:0e:3d:7a:
bc:68:0c:33:5d:47:e1:95:8f:b2:48:15:34:c7:18:23:8f:f4:
a8:a0:ac:f0:81:d0:ed:cc:ce:78:74:aa:1e:86:06:b0:3b:86:
be:32:3a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OoqfikmB7hJAYH2Q9S8yCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl
MWFlMjEwHhcNMjYwNzIzMTEwMDUyWhcNMjYwNzI0MTEwMDUyWjAzMTEwLwYDVQQD
Eyg5ZTc0MzVmMWI5NDkzM2VkOWRjNTI4NGI3MDgwMWUwZTU5MzE2OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSs7lXbF9fS/BAcPfhtMDAdANQ9C
w+HS5rO73cGx9eoRat8m68HwS46KJSYooy1TL9aPP1sZllJdM98dU6fKf8sVL4Cc
WVLHTDGegG8VFtInzeIdJJDTVjyWOx6k+rFdbShXY+nIt1WJMMUCiatJfTYOd5az
KzOND38ryotH/AIfedZK4+IblvYxXYoyM6PuzMMDuzvjphd7eXUg5SG9ybkQQhZy
OyBTzKVXeVe6lJIhpTOoZ86Ps6HUZFKrml5IUROzX158UWlNoOV4eToOqHzW2dh7
gPqqeLxe6sALzuYVs0zBIdvbid28HleU1nGBdj1kwYdw3X9sXTT6O625NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ50NfG5STPtncUoS3CAHg5ZMWm/MB8GA1UdIwQY
MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt
YzMyZGU5MGUzZmMzLzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz
LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo86bd1vZ
9EV0bFbcGFp3U+RW/ukf3fVn33hWEWD5BFwoQKARswSZx+Pf5HsLxjU7R5z0LSzM
RVBpRvHfFiMeFsQ7t2YJkn5mkiVuLnxLK4jAyQwWCHd62F8IrijcEDvoZdkAjLKo
X29TV8bwDKx7VAV6Jj4YjvN9iMyGYweoAuWcWnvJnOE7M6T2zvNGRsrdSYXHbVml
qNCOxbJQt5tsG+tGVuiN6Ll6XvhpznElm7j/DZTRI9FOs8w9I4lKhyGgSZnF15P2
uF5+yzu9jDUlxWvwr9dODj16vGgMM11H4ZWPskgVNMcYI4/0qKCs8IHQ7czOeHSq
HoYGsDuGvjI6mQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:06 2026 by rpki-client