Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: CFg6k37i4BTS0K7Usovf5nso1o+yR3c4eu6EC7JZVac=
Subject key identifier: D4:43:D7:90:ED:DB:17:7B:83:0B:E7:02:81:E4:07:89:E5:ED:44:9C
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019FAB99F0A02ECD0AD8327C56BF4671F6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 17A3
Signing time: Wed 29 Jul 2026 02:00:20 +0000
Manifest this update: Wed 29 Jul 2026 02:00:20 +0000
Manifest next update: Thu 30 Jul 2026 02:00:20 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: 5MzBfwXpUwo7gQiFEQ8Z4EcBD9TLYFzqYzUNPNPd/V4=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f0:a0:2e:cd:0a:d8:32:7c:56:bf:46:71:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jul 29 02:00:20 2026 GMT
Not After : Jul 30 02:00:20 2026 GMT
Subject: CN=d443d790eddb177b830be70281e40789e5ed449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:b4:e1:bb:3a:18:e6:30:94:3b:2c:17:e7:
5b:aa:46:af:15:1b:1e:09:a3:35:87:b2:e8:ea:05:
71:fc:41:3b:98:21:df:85:c6:f5:b6:7a:3c:e5:d8:
5e:39:25:41:bc:33:f1:98:65:47:c1:76:88:06:90:
4e:76:85:b8:78:c9:22:c1:55:eb:89:f2:11:7b:f9:
77:35:f1:39:a6:68:88:f2:f8:68:d3:94:93:d2:c0:
2f:97:6c:31:24:54:a4:e0:f3:4f:24:c0:8b:63:e7:
8a:5a:0a:95:da:19:c8:3f:e7:f1:4d:8d:de:6a:9a:
7c:23:9e:61:c6:d9:0f:e4:26:21:e8:f7:a8:ed:b8:
3c:38:85:86:c2:a9:0d:68:0f:44:0b:27:ba:f3:ea:
87:ed:ea:6f:a4:20:9e:21:b3:81:e2:22:a1:b9:e5:
40:a0:93:82:2b:7e:54:e1:4c:d1:40:84:de:63:dd:
5f:70:dd:97:db:d0:d2:d5:f3:01:50:bc:9c:60:5c:
d1:4e:42:eb:8c:e4:45:8a:f9:80:44:c8:a3:c0:ea:
63:82:97:d1:03:3e:89:9a:be:08:5d:db:55:0a:3a:
0f:88:e5:43:df:62:51:80:29:09:6e:56:57:5c:95:
66:5b:5b:ae:6f:0f:36:62:3e:59:49:77:55:d9:d8:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:D7:90:ED:DB:17:7B:83:0B:E7:02:81:E4:07:89:E5:ED:44:9C
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:0b:69:cf:03:f2:d6:17:bd:41:b5:50:76:21:11:5f:41:
2c:d0:eb:18:aa:9e:81:9d:ef:64:91:f7:c3:5b:22:7d:ba:5e:
98:1a:a4:73:4a:34:c7:9b:0f:c4:d5:1b:fb:39:47:60:12:1a:
44:9f:3e:8d:31:b8:16:77:cb:77:d8:69:1a:c1:9a:69:15:bd:
ba:b2:6e:e3:b5:25:5c:65:84:b6:d5:16:e2:e1:3b:a6:bc:d1:
30:b8:1c:e7:63:67:dd:f0:7d:a2:60:ca:f7:e2:11:e1:72:42:
63:fc:01:86:66:b1:bd:b6:7b:7e:0d:90:54:7f:3f:d7:74:25:
9b:f2:f4:13:c4:35:5b:6c:65:d9:91:73:55:7b:f9:5d:fc:4e:
b5:28:ea:d4:96:e2:aa:b8:94:2e:d0:70:65:ea:1b:08:e0:3a:
3b:4b:9c:f9:a0:86:14:ad:df:3e:20:83:33:b1:d1:f9:af:80:
f6:12:00:65:8a:21:77:a4:8d:1e:3e:0a:fa:2e:1f:bf:67:ae:
fb:57:2c:ed:76:3b:4f:04:2d:e0:b6:bb:2a:f0:71:fd:c1:9e:
d2:89:e2:8d:fe:9f:c4:4b:91:b5:d7:d0:f8:ac:8e:e0:f0:67:
55:ae:5d:21:77:86:49:8a:e0:45:c2:26:dd:ee:f4:04:24:ca:
85:7a:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:19 2026 by rpki-client