Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: 3CMY/PuvNanWOrlNVRLmY/gHrgmFiqMvVriDcgU7e2I=
Subject key identifier: 3C:70:EF:24:C2:CD:32:A2:7D:79:12:C9:A5:FC:20:FA:06:8B:3C:4D
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019CAC1041C53AC3861255109ACE6586CE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 12F6
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: pKgEb1YEfMoQA7f0j/U3LNuAEmNgISM3sCNVAmimjt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:41:c5:3a:c3:86:12:55:10:9a:ce:65:86:ce:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=3c70ef24c2cd32a27d7912c9a5fc20fa068b3c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:38:23:40:15:49:37:fe:6a:6c:9c:13:cf:
a4:74:3a:45:63:e2:97:4f:89:7b:28:b6:ef:ff:84:
b3:22:1d:b9:80:3e:03:16:14:3d:bf:c4:70:38:d2:
75:d6:f3:c5:48:5c:36:9b:c0:02:ed:29:64:fc:02:
f0:f3:95:87:0c:34:d2:be:80:1b:1a:a2:31:3c:4d:
d9:f1:ec:5f:16:45:2c:23:f9:d1:16:62:e2:18:6c:
16:d1:60:b7:13:57:85:85:34:8d:8b:6f:b8:9f:a1:
54:cc:35:8d:8e:91:9c:fa:d0:8b:f8:bf:3a:53:01:
aa:20:c6:6c:04:e5:18:f9:5a:95:f8:2e:e5:f6:3c:
33:b6:e4:34:08:dc:a6:cc:53:f0:24:6c:ab:01:3b:
a8:2e:f0:ca:9d:ee:ae:ee:69:2b:b8:da:9c:52:2c:
eb:d6:8f:51:cf:77:4c:c8:25:20:fc:8a:02:54:10:
e2:27:0d:ae:50:76:0d:95:cf:e8:ba:12:c3:af:b1:
95:3b:d9:c9:61:40:86:90:5e:44:92:39:e2:dc:05:
27:b8:14:c1:3f:ff:a3:c5:3d:56:e8:0c:a2:ae:92:
58:b9:4d:74:21:6a:ec:b8:ed:06:91:6f:1e:cc:c5:
b4:cc:65:8a:0c:74:d4:ee:08:7c:83:58:30:24:07:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:EF:24:C2:CD:32:A2:7D:79:12:C9:A5:FC:20:FA:06:8B:3C:4D
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:a9:3a:9b:27:25:f4:8a:46:0c:88:7b:45:0a:fd:47:d9:
1b:a8:a8:e5:f5:0c:de:e3:9d:71:69:ed:34:72:a4:8e:c7:16:
3d:c5:52:22:77:ad:94:c9:07:d5:cb:96:4b:7c:88:37:99:94:
5c:5a:7f:17:81:d9:c1:5d:2a:c7:10:ee:1d:be:77:84:9c:f8:
91:1a:0e:e2:f6:38:b3:80:b0:03:b1:eb:df:ab:0b:6a:58:43:
f1:8e:d9:50:f6:ee:6e:da:a3:d2:a2:fb:f4:b7:d4:8a:2b:51:
ee:ac:e7:51:cd:fd:17:c8:1d:86:98:70:67:af:ff:04:bf:7f:
7a:d3:32:68:b1:f8:23:9e:d9:a0:75:cc:f2:c5:c1:ca:e0:ab:
d1:bb:b6:80:fe:6f:91:f0:22:06:f9:a6:54:e8:b2:49:e7:2a:
fd:62:0a:8a:48:66:74:a1:c2:63:2b:59:28:fb:b3:6f:f4:4e:
55:2d:5a:52:9c:9b:1c:b6:2a:1c:b4:10:0c:05:ec:92:02:a6:
6a:df:94:4b:d8:e8:7a:04:f0:93:23:db:8e:58:9d:95:ca:fe:
ee:dd:5f:60:1f:76:a3:2e:94:09:4e:5b:c6:a4:c8:58:53:ab:
4c:30:a4:f7:cb:ab:91:5b:55:b4:01:92:30:f0:d0:11:29:5c:
88:ae:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:51 2026 by rpki-client