Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: H+R0McaNJl+skp9WfnODoEiGg/zeqPQXr8Kc5q0SfH8=
Subject key identifier: 1F:26:E3:41:1D:9D:28:C1:5D:45:86:21:E1:A5:F7:E6:B4:92:00:92
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019D9886DE9328F42E9E1C172E155927C16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1690
Signing time: Thu 16 Apr 2026 23:01:08 +0000
Manifest this update: Thu 16 Apr 2026 23:01:08 +0000
Manifest next update: Fri 17 Apr 2026 23:01:08 +0000
Files and hashes: 1: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (hash: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: cG31+/nqdnMc3BvqrY8IB7at9zqiJt1FkTOqSfEIpvs=)
3: rbleZbDw4gebdk07yrvF8SzeP6w.roa (hash: VrTcEnN0AeIhbsoOuLAPeO02+ay5MYr1fedY2RRIQx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:de:93:28:f4:2e:9e:1c:17:2e:15:59:27:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Apr 16 23:01:08 2026 GMT
Not After : Apr 17 23:01:08 2026 GMT
Subject: CN=1f26e3411d9d28c15d458621e1a5f7e6b4920092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:16:a2:45:7b:b9:dd:c8:bf:d2:df:bb:93:
6e:65:a3:5a:ec:1a:4d:b6:42:10:ca:2e:9f:e7:ed:
b6:07:7c:cf:bb:35:3e:93:e6:cb:9b:ac:38:28:54:
91:43:20:c5:e0:e2:e9:6d:94:43:e4:1f:cb:ea:fd:
42:ac:c5:6a:3b:f1:c1:c6:26:8c:ab:d3:06:0b:b8:
92:46:41:d3:25:d5:1b:4c:79:34:1c:bf:29:61:55:
34:c1:1d:7a:36:72:6f:be:de:bb:86:51:a8:82:a8:
e6:5e:e8:43:30:c4:09:da:04:75:f2:c5:c8:75:23:
e2:d9:c7:07:8e:67:f1:b9:33:42:df:d4:d0:08:9c:
b5:a6:0c:af:5f:ad:ab:90:b6:60:48:ef:5b:0f:2a:
b0:70:99:3d:ac:0c:fa:31:1c:1c:55:9c:1e:cb:e5:
ad:a3:66:e8:1f:c2:a7:f8:0c:39:fe:4a:c7:9d:86:
ab:54:cb:5b:2a:a6:66:2a:ef:aa:fb:f1:f2:e5:7d:
6d:fa:75:2b:ba:95:8e:2b:96:81:73:76:95:0c:e9:
87:d4:6c:77:18:5e:c4:c6:ee:27:26:83:c9:03:66:
71:03:3c:00:a4:d7:0a:4d:70:32:50:a6:03:ea:ed:
1f:e4:44:ca:f7:c3:ea:40:71:28:7e:e2:01:d2:83:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:E3:41:1D:9D:28:C1:5D:45:86:21:E1:A5:F7:E6:B4:92:00:92
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4d:b0:00:ed:c7:47:b8:2f:ff:55:33:01:e0:72:ba:bf:f3:
7b:58:7b:8b:93:f3:a9:1c:26:82:6b:6b:ae:19:d7:08:78:b7:
0f:b1:11:33:f1:bf:ae:e3:71:06:f7:d5:2a:2c:b9:f7:13:ed:
da:55:a8:fb:ae:9e:23:1d:a2:de:4c:e2:a5:13:09:26:2d:32:
09:f2:6b:60:f8:0e:6f:8c:dc:ed:07:bd:e0:ff:81:bc:63:76:
df:c4:f8:23:38:61:89:bb:f8:cf:75:af:57:b1:62:6d:f4:ca:
2d:34:a5:33:10:90:5b:80:45:29:46:53:e5:f0:f6:44:7d:ed:
8e:60:f5:97:d1:ca:9f:29:c4:05:0a:27:5c:d8:d1:49:c8:1f:
d6:4a:72:e0:45:97:f6:b7:b8:85:5c:e1:ce:23:dc:5c:86:1b:
61:d7:93:01:a8:de:c9:df:a4:d1:de:4f:10:d8:56:cd:d5:bb:
06:a9:81:fd:0f:02:a2:e2:19:bd:95:26:74:b3:4a:41:60:d4:
e1:5f:14:f4:52:df:8a:80:fe:01:05:05:cc:76:35:59:56:9e:
90:bd:c8:f0:d0:4a:51:c0:1c:25:c0:56:13:63:73:0a:d1:3f:
ae:a3:a1:df:9b:5b:70:92:76:13:3c:d1:7e:84:db:cd:14:1b:
24:ed:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:49 2026 by rpki-client