Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: SHFYMHFRg1KDBU55Szw4rXIWdaWzLVcW3r7RPeh7MEk=
Subject key identifier: 6C:D1:C2:42:D1:5E:36:01:9B:C8:9C:C6:6D:14:62:D7:B9:15:18:C6
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 019D99625B8C75465207898A5979777C61F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa (hash: QRB4xsl/x8yZHcMu29po3RVY6KKKQr540pqKTN21RU0=)
2: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: fPTK6PmAcMx8T3ABGoTiF7uEau8pVPYl7rzcktvfMQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5b:8c:75:46:52:07:89:8a:59:79:77:7c:61:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=6cd1c242d15e36019bc89cc66d1462d7b91518c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:58:d0:fd:40:0b:31:0f:46:82:98:86:8e:
cb:6b:df:1e:fd:ba:4d:1b:69:79:f5:31:b0:c8:d6:
88:a9:99:4d:28:e6:86:ae:f0:58:1c:ca:43:75:a6:
fd:ab:5d:be:87:de:42:f6:84:3c:64:43:77:39:82:
78:eb:f3:e6:eb:85:80:49:15:96:d3:b9:64:7b:0b:
4a:af:11:79:f3:13:62:78:02:f1:c1:df:33:3b:dd:
f5:54:6f:dd:a8:58:23:5b:64:bd:e2:bf:9b:24:6f:
20:7e:79:14:c8:cf:3b:3a:86:ad:c7:84:0a:ec:45:
4d:ce:fb:64:f5:02:8e:c5:7f:7d:4b:d6:a6:a6:c8:
a0:f7:8f:1a:5c:ff:33:82:fb:e1:51:83:9a:27:58:
88:74:98:a5:20:09:42:66:2c:49:88:a6:67:f6:7f:
2a:71:b0:64:63:61:aa:a1:92:cf:86:f9:c2:2c:9f:
8c:a0:9f:83:c9:02:c8:1e:bc:a2:bd:cb:9d:f7:fe:
e3:41:df:f9:c7:56:5f:85:d5:af:8f:65:07:a6:dc:
11:16:f4:e4:8d:ae:8b:c6:49:c4:b8:9a:cc:65:65:
b7:00:96:97:dd:1f:36:da:c2:0b:9c:dc:d3:15:4b:
ab:ef:d9:c9:4a:9d:54:8c:ee:b2:4d:98:49:67:22:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:C2:42:D1:5E:36:01:9B:C8:9C:C6:6D:14:62:D7:B9:15:18:C6
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:c4:e8:ef:68:60:d6:54:a7:84:92:8c:13:77:5f:fd:93:
8b:d5:2c:0e:f2:6b:33:2a:bf:da:4e:08:0b:8c:8a:8d:c6:d2:
26:5a:66:81:0e:85:19:f3:6e:03:34:b9:d5:46:36:27:05:e5:
3b:28:85:ed:ce:e1:c5:da:fe:e5:d3:6e:1c:80:be:d6:8f:98:
7f:47:02:b4:ac:ab:17:e1:8a:7a:11:28:d0:80:b1:93:d0:ba:
20:67:5a:63:69:b2:ee:09:ba:f9:86:32:68:a7:8c:19:da:67:
e6:8a:4a:25:5e:10:b4:83:41:45:9e:32:4d:ae:14:c2:fd:01:
fa:4c:b4:8a:df:81:90:97:fa:11:4f:d7:dd:a3:26:1a:98:85:
f9:98:09:c6:de:4e:54:38:3e:bf:10:67:66:a1:5a:ac:9c:b3:
88:69:c9:de:1f:a4:8d:91:52:71:6a:88:ff:29:7d:88:6d:7b:
1e:c8:a7:c8:58:ed:77:3d:76:28:ae:a8:a3:4a:65:61:d1:62:
dd:98:6e:14:3f:2e:c9:fd:a7:0a:02:36:5e:3d:16:16:5c:48:
e1:94:60:47:c1:36:d4:b8:e2:7f:d6:6f:a6:f9:16:dc:8d:46:
ca:9a:76:19:61:27:d2:f4:7c:97:9e:e6:3f:f3:58:b5:bf:de:
6b:37:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:15 2026 by rpki-client