Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: YmLGAwz8QFoNztKM7dsDYZ+bujl4ZwjWSesld2srQ/M=
Subject key identifier: A1:27:38:50:E9:D2:AC:90:02:9E:1D:39:55:8D:45:8C:BC:0A:3B:11
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019E1EA3C5B8DA27B03BEA86AC14D7EF8266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:49 +0000
Manifest this update: Wed 13 May 2026 00:01:49 +0000
Manifest next update: Thu 14 May 2026 00:01:49 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: E9EUSpYwIqExRjVGoyH5GlTHqU3dnwU9NGuvesJk0i0=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c5:b8:da:27:b0:3b:ea:86:ac:14:d7:ef:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: May 13 00:01:49 2026 GMT
Not After : May 14 00:01:49 2026 GMT
Subject: CN=a1273850e9d2ac90029e1d39558d458cbc0a3b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:bd:3f:b4:93:5f:83:f3:6a:27:4b:fd:07:
a2:e6:ed:5a:95:70:b0:ce:25:7c:fe:2e:05:46:e1:
18:56:3c:b3:74:22:53:71:ba:c3:ed:aa:2b:e1:a6:
fd:03:e5:19:05:06:79:56:85:62:42:90:4b:44:18:
03:a7:ef:c1:0f:8b:85:40:8a:13:87:8e:b0:69:ba:
58:fd:59:87:aa:22:1e:cd:09:c5:fc:07:5b:f7:c8:
83:a6:15:2f:0f:48:f4:c6:37:94:d4:a9:7c:cf:22:
c7:f4:31:c5:59:f0:8a:da:08:85:93:4f:90:f5:d0:
98:1a:7a:2c:25:78:56:15:d1:8d:ae:71:7a:dd:e5:
d1:c8:79:1b:44:25:4b:4f:fe:e0:1f:bf:e6:3f:d0:
3e:14:c6:c1:fa:51:9f:6c:3e:d5:b6:c4:36:0b:1f:
c2:7c:4a:8f:ee:a9:df:40:d1:01:51:72:65:98:45:
f9:1a:28:d4:3e:6f:b1:e1:4a:02:68:28:fc:13:47:
6b:fa:54:c3:d7:79:4e:ec:62:85:5e:d3:59:84:0a:
25:f1:f4:57:eb:91:2e:fd:75:89:6d:28:b9:76:0e:
3f:58:61:4a:19:04:40:d2:9f:95:5e:04:a1:8a:23:
af:7d:7d:08:49:dc:db:c7:14:90:cc:31:6c:74:78:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:38:50:E9:D2:AC:90:02:9E:1D:39:55:8D:45:8C:BC:0A:3B:11
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:de:79:4e:55:9b:98:3e:f3:0b:a5:d4:c5:bc:4d:f1:9f:
ff:d6:0f:5c:c4:73:55:85:d8:9a:d4:08:af:44:d3:f0:5a:2e:
6a:05:c6:c9:80:8b:5e:cd:64:a1:7b:77:3e:d5:87:38:90:b8:
bc:37:f8:69:da:b8:66:9a:d7:e6:fd:1a:4e:15:e2:67:4e:f5:
71:f9:00:e3:a3:9e:36:00:cb:e9:97:6c:49:3e:80:cf:a7:b1:
a8:3d:89:5d:34:e7:c1:c6:45:70:45:16:82:7f:4f:65:67:4c:
6b:44:a1:da:17:41:bc:0c:e2:08:a4:02:1a:bc:e0:ef:05:8b:
1c:72:35:78:5a:d6:70:be:b0:bf:e6:bd:e1:62:58:39:1d:b3:
6c:3b:c6:7f:17:bb:ab:74:f8:23:ed:db:b6:c4:0d:91:74:ba:
46:43:e9:7a:cf:d6:7c:f7:3e:ad:68:24:b7:64:d8:59:68:1d:
80:f0:31:fb:aa:28:c0:40:8c:9f:40:fe:a6:cc:94:cc:1e:e3:
48:b4:0c:d3:3e:c5:04:4b:b9:d5:45:d4:95:67:ee:ba:b2:b8:
52:3e:6f:e1:1e:ee:63:c4:70:4f:cc:48:bf:d1:d4:4f:1a:5a:
66:8a:a3:a4:4c:49:5e:50:a5:64:74:87:39:6a:44:71:50:46:
ca:84:c3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo8W42iewO+qGrBTX74JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl
MWFlMjEwHhcNMjYwNTEzMDAwMTQ5WhcNMjYwNTE0MDAwMTQ5WjAzMTEwLwYDVQQD
EyhhMTI3Mzg1MGU5ZDJhYzkwMDI5ZTFkMzk1NThkNDU4Y2JjMGEzYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRa9P7STX4PzaidL/Qei5u1alXCw
ziV8/i4FRuEYVjyzdCJTcbrD7aor4ab9A+UZBQZ5VoViQpBLRBgDp+/BD4uFQIoT
h46wabpY/VmHqiIezQnF/Adb98iDphUvD0j0xjeU1Kl8zyLH9DHFWfCK2giFk0+Q
9dCYGnosJXhWFdGNrnF63eXRyHkbRCVLT/7gH7/mP9A+FMbB+lGfbD7VtsQ2Cx/C
fEqP7qnfQNEBUXJlmEX5GijUPm+x4UoCaCj8E0dr+lTD13lO7GKFXtNZhAol8fRX
65Eu/XWJbSi5dg4/WGFKGQRA0p+VXgShiiOvfX0ISdzbxxSQzDFsdHhRnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEnOFDp0qyQAp4dOVWNRYy8CjsRMB8GA1UdIwQY
MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt
YzMyZGU5MGUzZmMzLzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz
LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmLeeU5V
m5g+8wul1MW8TfGf/9YPXMRzVYXYmtQIr0TT8FouagXGyYCLXs1koXt3PtWHOJC4
vDf4adq4ZprX5v0aThXiZ071cfkA46OeNgDL6ZdsST6Az6exqD2JXTTnwcZFcEUW
gn9PZWdMa0Sh2hdBvAziCKQCGrzg7wWLHHI1eFrWcL6wv+a94WJYOR2zbDvGfxe7
q3T4I+3btsQNkXS6RkPpes/WfPc+rWgkt2TYWWgdgPAx+6oowECMn0D+psyUzB7j
SLQM0z7FBEu51UXUlWfuurK4Uj5v4R7uY8RwT8xIv9HUTxpaZoqjpExJXlClZHSH
OWpEcVBGyoTD+w==
-----END CERTIFICATE-----
Generated at Wed May 13 09:19:19 2026 by rpki-client