Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: E1CybLf3Gm3+N/WsO+pZFu4A45PUJvikH560Av6WDDY=
Subject key identifier: 74:2C:FE:FC:50:AA:62:C0:6E:B2:76:91:15:E2:33:71:F4:9F:DD:5D
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019D9998D0D476B12E9420C5C6CFED295670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 1371
Signing time: Fri 17 Apr 2026 04:00:22 +0000
Manifest this update: Fri 17 Apr 2026 04:00:22 +0000
Manifest next update: Sat 18 Apr 2026 04:00:22 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: wZyw1CjDUJ+ApQKcbyKOfBOxv28r6nGYE1hiIJlDhdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:d0:d4:76:b1:2e:94:20:c5:c6:cf:ed:29:56:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Apr 17 04:00:22 2026 GMT
Not After : Apr 18 04:00:22 2026 GMT
Subject: CN=742cfefc50aa62c06eb2769115e23371f49fdd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:f6:d6:f3:b3:a2:10:ec:2c:de:2b:1d:32:
5c:ad:4d:2a:bd:0b:94:30:0b:a1:68:5f:12:8a:8c:
fd:7a:d1:7c:5b:d7:c4:de:dd:c0:69:b5:ba:f3:5c:
c3:42:7c:c9:c9:7d:70:9c:be:f0:e8:a1:98:6e:8d:
77:68:58:f9:63:bf:eb:c9:82:dc:f9:13:a7:f8:81:
10:79:31:26:a7:11:23:ac:e1:94:27:1f:d0:f2:31:
f7:a3:5f:c7:80:dc:a1:30:ab:76:b2:f7:34:c9:a2:
41:9d:5a:1b:ec:d5:64:12:1b:4e:70:fb:ca:1b:82:
97:89:29:ee:6e:48:c3:4f:c5:f5:57:8e:0a:10:96:
aa:a5:c3:16:40:34:79:52:59:71:7e:40:be:83:72:
cd:cf:7d:0c:cd:d2:13:0b:a3:a7:da:24:bd:94:e2:
ed:38:d1:63:98:6c:04:cd:34:77:a8:85:81:3b:d2:
9e:bc:43:8e:cd:19:f5:8b:5c:90:92:90:ae:f8:a5:
11:53:c9:e1:86:8e:b3:07:83:72:30:6e:e2:22:2f:
ae:f0:17:2b:e1:30:5f:1e:b2:48:d5:31:15:fc:92:
b2:96:4c:c3:8b:08:b9:3a:90:da:4b:cb:67:d5:6d:
db:23:b3:42:b9:b0:1b:d3:6b:f8:46:c1:6b:57:a4:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:FE:FC:50:AA:62:C0:6E:B2:76:91:15:E2:33:71:F4:9F:DD:5D
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:a3:47:9e:67:91:fa:07:da:a1:d2:d0:43:30:9c:c7:e2:
cf:df:0d:a5:af:11:1f:bd:46:b2:89:44:fc:12:2a:79:3c:06:
00:01:74:8f:43:c4:dd:ad:5d:bf:2a:df:23:72:f9:16:64:80:
39:5d:7b:24:0e:c1:31:2b:b1:eb:1e:de:70:a9:d8:83:36:42:
7f:50:81:e3:55:2b:6b:19:d1:58:24:7e:ad:f6:07:28:59:6d:
80:0f:d8:59:f1:95:ee:81:59:38:c5:96:70:4a:eb:db:7b:c5:
4e:cb:2a:ee:13:f8:dd:de:79:10:1e:3f:f6:23:f1:d7:53:53:
36:ad:7e:a7:52:84:67:95:18:96:2a:3f:47:2d:5b:8e:6f:eb:
ca:72:c1:a0:2c:6b:15:98:a7:e3:fe:81:fc:8b:a6:8d:04:90:
11:d4:1e:a6:da:5f:1f:32:9b:ea:d6:f7:ad:5b:c9:61:f3:ae:
60:25:b5:26:6f:d9:27:e2:5b:7f:01:9d:f7:d7:2e:a6:1c:c5:
c6:b9:10:9e:45:e4:27:a8:b5:cc:55:a3:8a:e3:9d:cb:65:bf:
57:2f:6a:32:06:80:59:0d:7e:b3:5a:46:f0:87:76:34:0c:5f:
d9:7f:ee:2c:74:1d:e2:7d:3a:e5:67:14:5d:b4:bc:1d:c8:c5:
00:f2:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:45 2026 by rpki-client