Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: CF5Rw+6Op6IOrTtxBk21OJkKKJeVXVzdOvIPCp/D4S8=
Subject key identifier: 64:9D:DD:73:21:0A:B3:7A:37:92:4B:96:22:9A:8B:1E:B9:E0:4A:2E
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 019D9D3FC06AF06DA0D38653BBF1EE9BC21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 21:01:34 +0000
Manifest this update: Fri 17 Apr 2026 21:01:34 +0000
Manifest next update: Sat 18 Apr 2026 21:01:34 +0000
Files and hashes: 1: nQwNTcvcN16kGMcF9EkVK9LTmpA.roa (hash: fbtF0vzhJretPqTSidwr3SzDufK3auj33qZoaGUrKJc=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: NgVujt98eUAbBtWcHZ7/3wpGbMNmAHsofa5wVkKFQkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:c0:6a:f0:6d:a0:d3:86:53:bb:f1:ee:9b:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Apr 17 21:01:34 2026 GMT
Not After : Apr 18 21:01:34 2026 GMT
Subject: CN=649ddd73210ab37a37924b96229a8b1eb9e04a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:0f:91:51:f1:73:02:e2:93:a9:12:4d:aa:
e4:3d:18:60:d2:cc:b5:da:3f:fa:12:b7:e3:6d:12:
90:4a:04:84:95:51:60:b8:c2:0b:fc:3d:df:d8:d9:
9d:90:26:47:89:c3:ee:d3:61:51:26:48:6d:65:8c:
7b:9e:f3:dd:f7:2a:b1:c6:81:2c:6c:5a:68:83:bd:
cb:bf:6f:9b:a6:03:66:b3:8b:44:51:23:d7:42:78:
f1:4f:d1:b6:0e:8d:80:48:35:7e:1a:e8:6a:56:b4:
60:70:07:5d:af:82:94:59:95:74:48:af:89:2e:da:
2c:7e:29:88:18:9f:87:9c:29:e2:e6:86:b7:20:03:
b4:14:99:b6:fd:2f:04:a9:f7:51:c3:b5:71:38:ba:
73:ea:08:d3:8c:2e:7a:c7:20:ac:99:fc:e7:95:0b:
7e:22:e5:93:ab:a9:e3:c5:47:ee:ce:d6:32:07:f4:
1d:cf:a3:65:02:e9:36:e4:31:cf:63:88:c9:7b:a7:
21:ff:10:a7:12:ac:ba:e8:58:a7:8e:be:49:6b:c2:
a3:62:34:ee:82:af:b8:90:c8:69:bc:8b:f9:0c:37:
08:e0:a0:df:18:d2:7c:90:3f:85:ff:7d:f1:e1:d8:
33:ee:b4:be:e0:60:f3:49:12:0c:0c:50:db:9c:c7:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:DD:73:21:0A:B3:7A:37:92:4B:96:22:9A:8B:1E:B9:E0:4A:2E
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8b:3b:59:9c:4c:c4:fd:f7:76:f8:5d:e1:6f:61:d3:58:19:
0c:78:20:f0:31:df:e3:cc:50:3b:b8:0b:f8:ad:f1:17:52:8e:
08:ac:18:ab:77:26:a6:77:6a:d3:83:bb:80:d2:74:b0:98:eb:
90:da:b0:5c:c7:e6:28:95:94:7c:bc:cb:bc:ab:ec:5e:06:f0:
98:77:74:46:bf:59:30:95:91:a3:bc:6b:89:b9:4f:50:3c:5e:
7e:09:25:cc:7c:36:e0:8e:ac:9b:6f:1c:43:e4:95:c0:63:ff:
35:c9:91:b6:2e:04:6d:ac:eb:d3:64:1a:af:8d:56:a9:84:97:
29:60:69:8b:56:35:fa:07:f5:40:45:ad:65:aa:49:77:a8:33:
ab:b9:25:c0:bc:6d:b7:4f:c3:9b:fb:36:4c:29:83:78:96:ea:
de:0a:d3:2f:4a:0a:f2:b8:3c:83:40:9b:31:fb:a3:f8:61:a8:
fc:bd:7d:57:7d:63:62:80:eb:a3:6e:2b:0b:9a:38:7e:26:26:
ef:03:e9:6d:41:33:71:f3:21:67:1b:fb:0b:14:d2:ab:7b:11:
1f:89:71:d7:83:be:56:3b:8c:2a:4c:23:32:57:c6:ac:23:7e:
38:01:15:d3:e6:57:87:d7:38:7a:fa:72:08:4a:29:68:6c:09:
03:e6:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:07:22 2026 by rpki-client