Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: QqJZarXyMA0dprH8BpkS2mO32wVz1Ce7wQcXxSyc8G8=
Subject key identifier: 88:05:16:56:85:B3:9C:45:C1:3F:BE:1B:13:B0:2D:98:5C:A3:76:FB
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019D99D096396D80689A7ADB3B0D25F8609B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 12BA
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: 6i6ktqVxfMyBeyrlkS73upvx9Ho.roa (hash: BlC62l60c6T9hNk8muoKRRCAtq61HWPcoGQIb8d33sU=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: HDqFsv++3oai5yL6Jj2J8FAG8uSmbzNGQtXaXnxQPZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:96:39:6d:80:68:9a:7a:db:3b:0d:25:f8:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=8805165685b39c45c13fbe1b13b02d985ca376fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:d0:1b:a2:8b:6e:9c:d6:9c:69:49:22:23:
e5:d2:9e:71:23:50:4f:77:1c:ac:fa:40:70:00:01:
dd:8c:c0:86:cc:42:bb:d9:0c:9f:c6:bc:63:ff:2c:
55:55:f0:d2:e6:cf:bf:fd:8d:b6:ec:d4:e2:93:55:
71:87:6d:54:ed:c2:dc:df:4f:51:11:bd:96:38:b8:
12:f7:ab:07:e8:1d:fa:ff:85:3d:f4:21:4d:70:97:
aa:c3:d3:66:93:81:67:7d:05:01:b6:0e:4d:6f:2d:
d7:e3:83:4c:61:c3:97:f5:86:52:2a:71:e5:bb:02:
ce:e7:db:29:a8:48:8d:c2:fa:b1:23:e6:1c:00:34:
00:71:43:29:fd:67:53:dd:20:a1:a5:c4:4e:76:a1:
24:ab:e5:fa:76:39:59:00:5c:c0:fb:c7:f1:b1:38:
34:28:ac:42:2f:ca:7a:df:75:86:87:37:2f:d6:42:
b7:b0:d1:80:40:6f:22:a2:58:47:54:e7:8c:69:34:
df:b9:79:46:77:08:3b:5c:f4:27:e6:cb:86:bc:8e:
39:2a:17:18:ca:7f:0e:84:5d:90:65:b7:9d:75:17:
9f:da:44:6c:ec:cb:26:62:9b:23:bf:79:89:63:7b:
21:35:df:63:fd:8c:5a:3e:c4:80:40:8c:fe:a2:09:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:16:56:85:B3:9C:45:C1:3F:BE:1B:13:B0:2D:98:5C:A3:76:FB
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:3e:0d:e1:90:54:48:d9:1e:d6:98:cf:31:51:df:92:34:
b9:75:17:3a:16:96:55:77:21:ce:01:29:81:32:67:13:d7:8b:
10:8e:2d:d4:c2:70:36:89:41:87:86:32:c9:58:d4:fb:dd:e6:
8a:48:6c:0f:d3:bb:68:bb:e5:af:8e:6a:14:0d:a0:6c:ba:85:
fd:b4:90:db:e9:c6:fa:38:2d:33:0e:f4:b6:82:5d:7e:07:d9:
38:3b:97:61:11:d7:76:20:03:de:b2:91:cb:b4:eb:8b:52:35:
48:71:41:cd:09:14:94:20:70:7c:9c:cf:5a:56:61:91:1f:22:
ed:15:e2:08:d4:25:d5:93:f1:3b:55:4a:8e:0e:ab:fc:e9:f2:
4d:b2:73:81:40:74:37:51:d9:7e:b1:78:52:18:02:11:62:ff:
11:95:5b:55:7d:4e:97:d7:14:27:5a:b7:c3:5e:ef:63:76:fc:
af:3d:99:27:ed:36:1c:b6:65:6b:08:c0:73:3b:80:f8:1b:e1:
a7:c7:42:bd:b1:11:80:05:1e:76:83:3e:2c:4e:7f:54:b5:a2:
8d:3b:bf:08:0a:57:fd:34:0b:dd:04:b0:a6:96:a1:dc:bd:ae:
2b:f0:7c:e4:86:0f:f4:7b:46:90:de:07:22:f3:b2:86:9d:78:
3c:58:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:42 2026 by rpki-client