Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: 1TIy2whN07z6zcq29oq9yLJL8aePrwlVZuB0nrl4/eI=
Subject key identifier: 2C:3E:75:DD:CF:18:9D:ED:1E:CA:BE:C1:4F:E5:25:F4:15:57:0C:D3
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019D99622B1134913560E0338CB11266DA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: hAhxinbPspKLMBLbPWP/e6yis9S440lb2jaPYQ3ZlKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2b:11:34:91:35:60:e0:33:8c:b1:12:66:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=2c3e75ddcf189ded1ecabec14fe525f415570cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:6b:03:05:c0:f5:49:ec:dd:f5:23:29:c9:
ee:12:fd:70:64:a9:0d:66:bb:2b:9f:90:37:13:09:
b6:83:cd:7f:d0:ed:1d:16:83:69:a1:ed:54:4e:4f:
77:a0:d4:06:a7:e3:5c:bf:ba:3a:10:ae:b2:cc:66:
f0:88:cf:4c:ff:c7:aa:47:af:fe:35:a5:ae:80:1d:
30:73:a6:8e:8b:f9:2d:1c:f5:7d:57:8b:42:1c:c7:
b0:5b:1b:4f:b0:6f:a3:3a:aa:ef:f8:8b:02:2f:e0:
60:20:f6:b7:95:a6:6b:30:d8:85:d3:2a:fe:70:67:
ed:8a:b6:d2:9d:48:e7:ad:77:58:cc:3a:bd:c0:d9:
2f:6b:46:9e:a2:30:35:51:4a:6b:d2:d9:7a:a0:53:
55:31:75:ba:d6:79:38:2f:32:11:9e:6c:ae:5a:ad:
b2:1d:8b:e6:30:20:fe:73:44:96:70:82:46:d5:18:
fb:70:98:70:0a:5b:63:28:0e:ce:0b:7b:d3:cc:25:
d5:42:04:33:be:94:98:2a:72:ef:3e:10:d8:17:65:
b2:81:35:2b:1d:ee:5f:36:84:33:2c:6f:bc:e4:c2:
80:d1:ea:28:1b:34:d9:dc:14:23:9d:63:d9:ba:e9:
56:18:b2:1a:4b:14:9f:0c:a8:39:b3:49:dd:f7:5d:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:75:DD:CF:18:9D:ED:1E:CA:BE:C1:4F:E5:25:F4:15:57:0C:D3
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:f3:64:4e:4d:7f:b2:1b:f9:71:a1:e0:af:a8:6d:a7:1c:
ea:0d:cf:04:87:f4:8d:c6:f4:a6:30:7b:02:2a:dc:3e:d8:77:
c3:34:ab:00:72:0f:17:37:38:2c:4d:95:fc:e9:76:98:d9:61:
e8:a8:d7:75:77:3f:05:11:7e:a6:eb:96:8c:75:47:a1:aa:d4:
39:a2:86:c8:4c:ae:84:ed:a2:b8:f3:45:bf:9f:8f:c8:59:ae:
8b:aa:31:8e:11:15:e6:d6:31:15:93:08:a8:32:23:72:60:fd:
ea:46:e8:71:02:b9:85:5a:29:69:fc:3c:75:f3:bf:9d:f3:74:
19:17:8d:4b:87:d5:cc:d6:3e:33:3e:fd:06:85:fd:b3:c5:42:
4a:5e:31:13:1c:b4:d2:a1:fe:de:9b:96:c2:7e:43:8e:ac:0b:
d7:b9:3c:67:e3:ba:22:a9:52:d4:05:05:7c:6c:aa:21:fb:e5:
da:14:28:4c:5f:31:ba:59:c0:48:69:4c:87:9a:ad:46:87:c6:
05:70:0e:85:47:b1:1c:c1:25:a0:74:a1:03:fe:d4:e8:b8:65:
7b:b4:36:be:c0:a0:7c:99:e4:e1:1f:37:39:0c:67:62:ba:88:
c6:46:cd:59:97:b7:10:44:87:83:e3:e8:6a:f0:91:e2:97:f7:
f9:e2:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:24 2026 by rpki-client