Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: VlqQZrzdqvwdSltRzVRavgkXdxSE6Eyt3BbE5l+n7ok=
Subject key identifier: 24:7C:8E:57:06:63:85:8E:CF:05:60:20:E1:FC:B1:24:E1:AE:E6:8E
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019CAA5856C3078253E144F78A2D2C45D327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 123E
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: 6i6ktqVxfMyBeyrlkS73upvx9Ho.roa (hash: BlC62l60c6T9hNk8muoKRRCAtq61HWPcoGQIb8d33sU=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: 4qW8RiJvu8ceYIlQCUU/0e5d8c2fyLy7QDQGqc6wDOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:56:c3:07:82:53:e1:44:f7:8a:2d:2c:45:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=247c8e570663858ecf056020e1fcb124e1aee68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:53:12:f0:15:ce:a8:51:64:40:65:54:67:
64:ab:ed:be:c1:29:9b:84:60:45:0f:16:8f:2c:0c:
a4:86:e9:08:e3:57:07:c7:92:50:79:8e:81:92:34:
2a:ba:d0:43:6b:80:2f:76:2a:fd:fe:10:c9:a6:82:
b0:5a:ae:5a:6d:83:57:04:39:30:c9:0a:74:b0:53:
20:4c:4b:08:f1:fc:2a:47:62:0f:cb:ce:f4:e8:c1:
8e:f4:b2:96:c6:aa:d3:74:29:5e:d3:88:85:9d:18:
c4:45:85:d7:da:a6:de:bd:f0:c1:42:cc:fa:84:21:
61:bc:c1:12:db:56:c5:6c:ba:8e:9c:89:99:00:d4:
2b:61:1c:8a:8a:46:a3:88:a2:bc:04:e3:9b:57:0a:
db:c4:97:67:a1:e4:eb:88:95:52:37:21:e2:84:87:
22:f4:10:6f:d0:94:0d:c2:58:b9:66:5e:ed:b9:68:
55:37:4a:9b:dc:71:bd:ef:f0:2f:40:f0:1c:97:dc:
ab:e9:59:32:4f:48:96:17:8a:5a:ea:4e:48:d5:a6:
ad:64:ea:b6:b5:21:32:15:97:ea:5f:44:a0:2b:05:
64:f0:11:48:66:c9:16:80:4a:41:3a:b1:00:28:4e:
12:49:c1:da:dd:2b:33:19:d0:fc:0b:fe:d3:d2:4a:
4b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7C:8E:57:06:63:85:8E:CF:05:60:20:E1:FC:B1:24:E1:AE:E6:8E
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5c:a2:e9:25:85:14:02:24:71:bd:42:0e:cb:b6:ae:20:e7:
cc:8c:a0:60:4b:3a:9c:21:38:29:5b:e3:9f:19:09:d7:fb:02:
5c:05:fa:be:31:94:24:65:28:16:e4:b7:db:98:83:14:f1:5a:
3f:36:9c:05:68:30:0d:79:12:ee:65:b2:cf:83:3e:3b:1a:7b:
10:71:14:bf:da:65:23:a3:b2:af:2a:c1:c0:b8:34:ab:8d:1a:
74:81:44:86:51:c3:44:42:0b:cd:97:d7:d7:40:9c:a4:19:67:
74:71:f7:cd:ee:96:80:da:7f:a5:5d:13:f6:a0:e0:ff:24:10:
0c:ec:ae:58:5b:f9:00:6f:51:7c:79:6b:1b:e0:ca:f1:00:6c:
4f:28:5b:0b:d6:1a:16:27:5e:3b:ff:cc:59:4e:63:1a:a7:f9:
31:15:2c:26:9c:e8:13:cd:93:c6:08:b6:e7:13:8c:1a:19:7a:
c2:7c:61:af:d7:dc:3c:55:f4:96:d8:db:ba:f1:f2:5e:c7:66:
72:0d:e1:c9:a4:04:c6:d3:41:e1:e1:16:45:0c:d0:ed:3d:be:
6d:21:95:b7:e5:81:f7:9c:1f:9a:6d:26:98:21:33:5b:f7:10:
bd:d7:33:66:0a:ba:6b:a1:c0:ae:83:90:e8:c4:80:af:c5:ca:
f5:a3:92:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFbDB4JT4UT3ii0sRdMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjQ1YWNiMDIxN2M3NGEwZmQzNGUxN2E1M2RiZGVlNTZm
MDExZTUwHhcNMjYwMzAxMTcwMDQxWhcNMjYwMzAyMTcwMDQxWjAzMTEwLwYDVQQD
EygyNDdjOGU1NzA2NjM4NThlY2YwNTYwMjBlMWZjYjEyNGUxYWVlNjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ZTEvAVzqhRZEBlVGdkq+2+wSmb
hGBFDxaPLAykhukI41cHx5JQeY6BkjQqutBDa4Avdir9/hDJpoKwWq5abYNXBDkw
yQp0sFMgTEsI8fwqR2IPy8706MGO9LKWxqrTdCle04iFnRjERYXX2qbevfDBQsz6
hCFhvMES21bFbLqOnImZANQrYRyKikajiKK8BOObVwrbxJdnoeTriJVSNyHihIci
9BBv0JQNwli5Zl7tuWhVN0qb3HG97/AvQPAcl9yr6VkyT0iWF4pa6k5I1aatZOq2
tSEyFZfqX0SgKwVk8BFIZskWgEpBOrEAKE4SScHa3SszGdD8C/7T0kpLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR8jlcGY4WOzwVgIOH8sSThruaOMB8GA1UdIwQY
MBaAFK5kWssCF8dKD9NOF6U9ve5W8BHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzkt
NDA4OTAxMzBkZDE4LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wZWQzM2EtMWYxZC00MjgxLWFiMzktNDA4OTAxMzBkZDE4
LzEvcm1SYXl3SVh4MG9QMDA0WHBUMjk3bGJ3RWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVyi6SWF
FAIkcb1CDsu2riDnzIygYEs6nCE4KVvjnxkJ1/sCXAX6vjGUJGUoFuS325iDFPFa
PzacBWgwDXkS7mWyz4M+Oxp7EHEUv9plI6OyryrBwLg0q40adIFEhlHDREILzZfX
10CcpBlndHH3ze6WgNp/pV0T9qDg/yQQDOyuWFv5AG9RfHlrG+DK8QBsTyhbC9Ya
FideO//MWU5jGqf5MRUsJpzoE82Txgi25xOMGhl6wnxhr9fcPFX0ltjbuvHyXsdm
cg3hyaQExtNB4eEWRQzQ7T2+bSGVt+WB95wfmm0mmCEzW/cQvdczZgq6a6HAroOQ
6MSAr8XK9aOS4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:00 2026 by rpki-client