Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: /jGIUeqJgNLTpcW9ibaKplrCK9ex2ocAbSSYVs23QAM=
Subject key identifier: CF:E7:5F:01:F4:05:57:C4:B4:50:00:02:1E:FF:E4:BF:18:02:8A:9C
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019FAA87D652956ECA2FB289B16B7A4F9D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 21:00:56 +0000
Manifest this update: Tue 28 Jul 2026 21:00:56 +0000
Manifest next update: Wed 29 Jul 2026 21:00:56 +0000
Files and hashes: 1: 7jEzRpfkM_lhZ7uAKRZvwSRQGNU.roa (hash: pz42e1Hyvu2YQLi28FAYwohQh8FXz6tczqllHjBA0EQ=)
2: XggtKq3xpWGXCHEG7oJDyVrafuA.roa (hash: Dw7wzvUkHqS4QhsFOClTO2lSejFZXMTyIw7n7pmXh3Q=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: bLmGSPmhzunxTG7THb9ipCnsvlAQc7S41QZ1TXBzijs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d6:52:95:6e:ca:2f:b2:89:b1:6b:7a:4f:9d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Jul 28 21:00:56 2026 GMT
Not After : Jul 29 21:00:56 2026 GMT
Subject: CN=cfe75f01f40557c4b45000021effe4bf18028a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:0c:b1:fd:db:c9:e6:85:36:af:da:d0:e2:
c8:91:84:e5:17:22:48:0c:13:99:82:b1:f8:77:78:
6b:7f:a1:ba:3b:ae:c0:22:06:ed:0c:88:da:c1:3b:
60:ec:6d:b0:0e:00:06:96:62:0d:42:32:66:35:61:
69:fe:f1:fd:b2:43:b7:19:fb:4b:9e:65:7a:7c:0e:
9b:5c:4a:fd:ad:45:d1:eb:bd:89:ca:18:41:f4:3a:
32:2b:dd:c2:5c:12:25:18:12:01:ca:ad:0b:b1:f3:
de:95:fd:df:fd:39:5d:73:cb:16:22:03:72:9a:63:
47:97:01:6c:63:86:33:43:bc:5c:5c:eb:d9:d7:21:
ad:9b:48:b3:e8:5e:6b:a7:bc:9c:f8:1a:96:ac:b0:
99:bb:1f:ef:bc:bd:ff:ee:0e:2a:dd:9b:41:87:12:
00:33:10:77:08:b9:46:f6:27:32:e1:13:c0:49:a5:
28:e2:86:1a:4a:36:95:cd:56:e0:db:fc:51:ba:91:
c9:fd:6d:90:e3:e0:da:dd:e4:dc:8b:d4:c5:7c:e4:
34:fd:25:ac:14:52:58:9c:a6:ee:a3:f8:2c:36:d9:
63:49:0b:26:de:79:b1:82:fa:be:65:47:d8:75:0f:
1e:7c:64:a2:98:db:0a:23:91:52:86:0d:3b:4d:d0:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:5F:01:F4:05:57:C4:B4:50:00:02:1E:FF:E4:BF:18:02:8A:9C
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:00:f1:d4:a7:27:2e:68:fc:2f:4c:3d:ab:38:b4:0d:2d:a2:
03:5a:e7:f4:5a:7c:6f:92:dd:96:41:2a:36:8f:11:e4:50:e4:
c1:b9:14:44:92:22:1d:bd:b8:f6:7b:79:a7:ef:e5:c4:b9:3b:
17:e2:f4:be:b8:31:70:b6:2a:bf:83:57:c9:31:ec:48:c6:51:
78:bc:67:45:f0:83:fa:6d:a5:65:73:91:c7:19:f3:6e:23:b6:
21:8f:11:0e:66:c8:c2:9d:04:aa:29:86:e3:14:ca:c1:15:38:
05:9b:57:27:83:f4:12:a4:34:98:fb:db:58:d4:4f:31:eb:fc:
ce:5a:05:e6:95:79:0b:55:1c:c8:6b:71:46:3a:bc:74:55:94:
8d:5b:56:56:bb:94:bb:2c:e3:ed:db:b0:6a:f6:12:fc:84:a0:
33:af:fb:4c:8a:fa:51:84:18:31:62:fb:2a:d3:97:56:53:e8:
57:98:42:1e:7c:dc:5a:1e:8c:48:19:e3:50:c9:5f:36:52:5e:
d7:fc:b5:dd:7d:cb:83:35:8f:23:6e:40:f6:9e:d1:a7:2f:9e:
e6:f6:ff:c3:82:a9:87:8a:9f:a7:07:37:89:ca:b6:52:11:55:
db:6d:72:00:ac:34:d8:16:ca:5d:9a:00:f2:b9:b4:70:10:c7:
f4:e0:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:25:30 2026 by rpki-client