Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: Uc17stl1TqFX7ESIeLLhbFtULB3OVgpzjwEMt7D8Siw=
Subject key identifier: EC:4D:4F:8A:E5:DB:E9:EA:EC:87:55:87:BB:86:E2:72:1A:DE:DF:AD
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01A0C58E730C69A6D4578C4E8558171496D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1835
Signing time: Mon 21 Sep 2026 20:00:42 +0000
Manifest this update: Mon 21 Sep 2026 20:00:42 +0000
Manifest next update: Tue 22 Sep 2026 20:00:42 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: e0J6Yu3jMxL9Z4gyIlKEpmz/FlKBEcjsFPBF4l+F+Yg=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:73:0c:69:a6:d4:57:8c:4e:85:58:17:14:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Sep 21 20:00:42 2026 GMT
Not After : Sep 22 20:00:42 2026 GMT
Subject: CN=ec4d4f8ae5dbe9eaec875587bb86e2721adedfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:2f:49:dc:54:53:55:4b:aa:9b:31:44:bb:
05:59:cb:14:79:69:ab:09:83:a4:fa:cd:0b:85:30:
06:2c:1a:21:ff:91:87:42:51:90:e3:89:74:00:83:
7f:10:05:10:e8:b4:a0:5e:1a:96:22:e0:bb:9a:34:
77:09:64:b9:a1:ae:5d:00:f0:c9:b2:65:a8:7c:1d:
e3:c9:a8:d0:75:b1:ea:a3:fb:61:09:92:78:02:20:
0b:5b:08:6b:47:fb:ec:6e:77:fe:eb:9e:3b:ef:60:
41:bf:60:ce:42:9c:b9:cb:46:21:55:49:07:df:56:
04:bf:12:ed:6f:e1:d4:22:59:31:3f:c3:d1:a9:07:
99:2d:9d:fb:93:82:62:fe:43:56:75:89:55:ce:44:
cd:f2:6f:09:76:b3:d2:8e:23:93:82:6c:3d:ca:9c:
51:a8:a5:11:40:42:9e:d5:50:38:cf:9b:63:77:bb:
0e:56:a7:87:a0:23:a0:87:74:c2:29:bd:6c:94:69:
a5:a1:72:36:bf:84:55:ff:a5:63:46:76:f6:61:b1:
6e:15:cb:d0:e8:c9:30:f8:d8:77:de:a3:43:07:cc:
12:4f:c7:4c:1a:db:7d:1d:d2:56:ee:8a:74:f8:0f:
75:65:de:34:f9:62:cd:94:2d:b9:5c:29:60:79:82:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:4F:8A:E5:DB:E9:EA:EC:87:55:87:BB:86:E2:72:1A:DE:DF:AD
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:3b:23:c4:a4:38:7d:10:50:e7:cd:ce:30:b3:91:cf:2c:
c6:c9:21:aa:ae:8b:ce:ce:3a:c6:39:31:cb:33:bc:e2:27:80:
67:8e:00:4e:85:ea:f5:f1:75:04:ab:1f:07:1a:61:e0:cb:74:
d1:8f:ec:b9:f7:d7:c4:9d:83:5b:74:5b:d1:2e:fc:10:61:0a:
4c:29:11:35:94:11:cb:f2:97:c0:d6:a4:ac:34:6a:4f:39:e6:
72:3f:c6:bb:08:7a:d0:9e:5e:45:cf:bd:55:a3:b1:24:f1:ad:
f4:91:1d:9b:76:22:8d:c3:80:4f:bd:2e:61:a9:7c:4c:3e:45:
12:ca:1f:d3:27:ac:e8:ed:38:cf:9a:af:18:d4:29:0a:90:d4:
29:20:ff:00:9a:ec:46:63:85:60:42:0f:08:f8:e8:71:70:a9:
c7:0f:3e:09:3c:d3:64:dd:8f:d5:74:e5:4b:74:5f:7a:07:82:
a2:34:1f:c7:51:b2:19:7b:92:01:98:84:9c:3d:60:ff:65:d6:
c8:cb:fa:93:e8:2f:f1:10:c5:57:70:bc:c3:ce:8d:c0:f4:00:
c1:f7:43:36:64:67:11:2a:66:6d:cf:b1:77:5f:c0:33:9f:23:
72:07:24:ff:8e:f7:2a:d4:61:c3:f8:e8:67:a6:e2:61:64:5c:
e3:c1:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:27 2026 by rpki-client