Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: OKR8bt2G+VehGcQZR6pQNR2TjeC430fT0LrBq2iGDEE=
Subject key identifier: 50:3A:A7:F4:6F:D3:9F:C8:E1:EC:6E:8C:29:BC:CA:00:6F:A1:77:9A
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 019CAAC6F3C529073F2DFD6D1F716A6235B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 1820
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: bh18R3X1WrNhFA1m7INZmV+OQmnmd8jZjnqLaCrJQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f3:c5:29:07:3f:2d:fd:6d:1f:71:6a:62:35:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=503aa7f46fd39fc8e1ec6e8c29bcca006fa1779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:24:ef:b0:3a:43:b1:d9:a3:50:6e:bf:fa:
e9:90:d5:3b:96:d9:ad:b7:b6:78:13:e1:a1:90:29:
64:7c:b3:f9:7a:0a:23:60:a9:cc:2c:8f:7b:f5:89:
8a:6b:fc:75:3c:15:cf:09:15:2f:40:f3:ad:de:49:
11:08:1e:c8:e4:c7:39:03:0f:33:f8:a1:12:15:45:
e6:c6:91:cc:6d:d9:ed:47:e6:2e:ea:81:74:00:99:
d9:6d:ac:69:8b:42:20:97:10:fb:57:d1:0f:e4:8a:
90:e8:4d:1b:5a:b2:0e:75:d9:63:d8:03:6d:12:6b:
88:e9:89:61:da:f1:07:b8:c0:98:07:43:2b:35:00:
38:84:6f:83:a5:a8:b8:7d:d4:61:d2:42:ba:e2:87:
a4:be:b1:c0:9b:8b:1f:27:b4:de:c9:56:80:f0:04:
90:f1:2f:b8:39:01:00:87:99:08:37:bf:8a:6e:3f:
69:a1:6b:9a:2b:50:4d:61:12:32:6e:f7:a2:08:2e:
ea:c9:ee:e0:33:cc:6e:8f:16:ec:3b:48:8b:bf:3c:
8b:0a:6d:03:b2:40:a1:52:ef:f6:a6:30:a3:2c:73:
72:30:3d:70:bd:1c:ce:62:c6:90:95:c7:89:07:f0:
d3:ba:34:ba:78:4d:cf:d4:ad:d0:17:53:1f:98:68:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:A7:F4:6F:D3:9F:C8:E1:EC:6E:8C:29:BC:CA:00:6F:A1:77:9A
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7b:bd:d5:f6:fd:fb:aa:ab:5d:8b:d3:c5:2c:22:c9:6b:cd:
18:f7:24:87:9c:7e:74:39:63:83:34:a2:de:69:df:19:d0:dd:
a9:8e:44:47:e4:fe:0a:aa:79:25:98:c3:33:5a:a9:37:6f:ea:
b9:00:04:92:28:e2:c9:64:7a:a4:00:6e:57:ff:aa:17:79:6f:
9c:57:4f:6f:d2:d7:50:3a:97:51:0c:72:17:1e:1f:1e:02:40:
8e:6c:4d:4d:f1:58:60:79:9a:a5:ef:0c:30:94:23:1f:03:f7:
57:ea:ab:a8:0b:28:78:b3:d8:bd:25:9a:fd:3b:e1:eb:1f:c8:
31:05:d0:30:8d:42:2d:92:53:f7:ef:b6:d5:58:a5:4c:dc:20:
4f:72:0c:93:f8:b9:e8:0a:87:5c:6d:1e:06:fe:28:be:42:41:
6a:7e:e0:6d:34:e3:88:44:64:55:fc:4d:09:25:97:73:0e:ba:
2e:4f:19:15:a9:81:ce:5a:93:00:89:ee:fa:07:fc:93:ef:c3:
c2:da:3f:4e:16:5d:b2:d8:1b:38:44:c9:4d:b4:a0:bd:be:0d:
d4:28:88:f0:62:0e:6a:1b:7f:fd:da:d8:97:cc:49:d6:6e:22:
ed:b5:74:52:e3:03:e2:81:d2:61:03:c6:25:0e:81:0f:6f:01:
12:14:78:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvPFKQc/Lf1tH3FqYjWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjYwMzAxMTkwMTMxWhcNMjYwMzAyMTkwMTMxWjAzMTEwLwYDVQQD
Eyg1MDNhYTdmNDZmZDM5ZmM4ZTFlYzZlOGMyOWJjY2EwMDZmYTE3NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IIk77A6Q7HZo1Buv/rpkNU7ltmt
t7Z4E+GhkClkfLP5egojYKnMLI979YmKa/x1PBXPCRUvQPOt3kkRCB7I5Mc5Aw8z
+KESFUXmxpHMbdntR+Yu6oF0AJnZbaxpi0IglxD7V9EP5IqQ6E0bWrIOddlj2ANt
EmuI6Ylh2vEHuMCYB0MrNQA4hG+Dpai4fdRh0kK64oekvrHAm4sfJ7TeyVaA8ASQ
8S+4OQEAh5kIN7+Kbj9poWuaK1BNYRIybveiCC7qye7gM8xujxbsO0iLvzyLCm0D
skChUu/2pjCjLHNyMD1wvRzOYsaQlceJB/DTujS6eE3P1K3QF1MfmGiutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA6p/Rv05/I4exujCm8ygBvoXeaMB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXu91fb9
+6qrXYvTxSwiyWvNGPckh5x+dDljgzSi3mnfGdDdqY5ER+T+Cqp5JZjDM1qpN2/q
uQAEkijiyWR6pABuV/+qF3lvnFdPb9LXUDqXUQxyFx4fHgJAjmxNTfFYYHmape8M
MJQjHwP3V+qrqAsoeLPYvSWa/Tvh6x/IMQXQMI1CLZJT9++21VilTNwgT3IMk/i5
6AqHXG0eBv4ovkJBan7gbTTjiERkVfxNCSWXcw66Lk8ZFamBzlqTAInu+gf8k+/D
wto/ThZdstgbOETJTbSgvb4N1CiI8GIOaht//drYl8xJ1m4i7bV0UuMD4oHSYQPG
JQ6BD28BEhR4CA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:29 2026 by rpki-client