Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: gvIsyWnCYTS9k25aZK0Wmsq7ZnwgHtWhoSgs8qBmq0I=
Subject key identifier: 0E:53:F2:40:81:62:6D:CC:1B:42:28:8E:6B:DB:46:EE:65:C8:65:CF
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019CAAFD7E6493384F5155BC9B1ABC5A0A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1615
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: zdaIkQLyL7n5oM2qVcamlOXIa+ZOeeA2WwTXXAEWcCo=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7e:64:93:38:4f:51:55:bc:9b:1a:bc:5a:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=0e53f24081626dcc1b42288e6bdb46ee65c865cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:8d:19:31:ca:f2:2e:c0:08:d2:8e:ca:46:
33:cf:91:82:1d:58:8b:19:ed:1a:7c:79:eb:e9:cb:
11:73:92:89:93:31:8e:47:a6:d6:7a:6f:7e:20:df:
c5:ac:96:8d:bf:b0:76:7a:dc:04:6f:19:8e:fe:b3:
91:f3:1b:8a:90:34:d4:22:74:af:a0:d9:c1:bf:03:
f8:72:9f:5b:e9:4b:d6:13:bd:da:96:a0:7b:99:92:
0d:a7:6f:76:dd:21:e3:82:4d:be:a0:79:64:3f:1d:
e0:db:1f:df:5d:3e:56:81:7a:bc:87:89:bb:5c:a4:
35:cd:ef:71:6b:a4:67:75:93:7b:7d:05:ac:b4:ac:
74:af:b8:23:95:22:f6:96:d4:1a:19:19:89:d1:3b:
77:c0:39:a8:14:36:0c:04:b8:da:dd:62:ee:15:ce:
ba:53:fc:13:43:dd:9f:cc:ab:e5:f6:b1:0a:47:34:
c0:84:ec:5a:71:e4:b4:e1:a1:17:db:d0:f3:62:22:
9e:2f:8d:00:05:40:5c:dc:f2:31:51:39:55:50:60:
e8:46:26:af:72:85:94:82:2d:b2:07:22:1f:9b:98:
20:c5:be:3f:6a:10:60:bd:3c:c2:e5:4b:58:c8:d5:
f5:ba:f0:d8:32:cb:7c:08:89:5d:98:30:83:f8:25:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:F2:40:81:62:6D:CC:1B:42:28:8E:6B:DB:46:EE:65:C8:65:CF
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7e:3e:8f:ec:69:47:1d:75:6f:33:d1:81:fb:f9:11:4c:33:
28:2f:1d:a9:28:91:c7:46:b7:98:6b:05:aa:f8:0a:75:96:69:
bc:6d:f1:3b:30:aa:f8:00:ee:e4:91:43:85:b6:10:f0:7e:76:
06:1c:55:3d:b4:f9:82:d6:a3:cf:b5:c7:ff:9a:96:21:74:d7:
3c:b6:7f:53:af:3f:4e:19:1c:b2:89:60:61:69:cb:a9:c8:ce:
96:f2:9d:ce:0f:ad:12:33:93:aa:50:88:29:9d:d7:84:3a:73:
69:db:d0:79:96:b8:ea:cc:9f:c2:c5:41:7d:2a:ea:c4:11:33:
2e:d4:61:df:25:6b:e4:33:bf:ed:95:b4:8d:73:15:99:54:0a:
a5:36:8f:43:8b:71:83:0c:0c:82:ed:78:9c:e3:7b:24:a6:10:
fa:98:a7:c3:09:15:18:f6:1d:35:ae:d5:0e:c9:0a:f9:22:75:
1c:40:25:b1:9c:45:1b:0c:ad:33:57:8a:c2:0c:76:42:1c:a1:
53:3a:c8:9c:68:69:b7:b1:ad:9e:e9:6c:de:af:60:68:f7:b5:
e2:3b:ad:41:70:28:cf:b3:29:f9:de:f1:a5:93:45:94:a2:f7:
a7:c6:75:bd:bf:af:81:ca:b5:9c:ef:1d:32:55:de:c5:4a:0f:
80:39:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:15 2026 by rpki-client