Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: KJRs+/LRZOkYteNvEUsiyjML09O/clJ0R+AV8Nwuoqw=
Subject key identifier: 4C:01:B2:42:3D:7E:4E:C8:A8:8B:9E:B2:4A:0A:21:2C:8A:A0:BF:A1
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 019D98502151413F31DEE7BFA7CB8522A5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0FA7
Signing time: Thu 16 Apr 2026 22:01:21 +0000
Manifest this update: Thu 16 Apr 2026 22:01:21 +0000
Manifest next update: Fri 17 Apr 2026 22:01:21 +0000
Files and hashes: 1: 4FbUQPbInKsJV6tUxAOCJ09zMtA.roa (hash: XDmbXmDYXHXEEVlnrPjHgOg48u89KTGeW87AL4CNgDM=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: E4UCNcLmTwespMpqnGkuFtf41Up8nJkm+QKXHj5vaqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:21:51:41:3f:31:de:e7:bf:a7:cb:85:22:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Apr 16 22:01:21 2026 GMT
Not After : Apr 17 22:01:21 2026 GMT
Subject: CN=4c01b2423d7e4ec8a88b9eb24a0a212c8aa0bfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:c2:30:7b:02:a9:fa:1a:04:f9:4e:09:58:
ff:64:c5:85:bc:c8:5b:90:6d:b9:41:f7:6f:f7:72:
0b:be:15:27:79:39:51:4d:02:79:2a:83:cd:00:8e:
df:fc:2b:e8:ef:25:15:4d:9c:d7:24:25:ff:cf:72:
0b:62:60:e8:ab:eb:cf:34:3b:5d:d3:25:66:67:a7:
a0:8c:ad:9c:ed:32:74:50:92:f4:4f:c9:da:d0:37:
73:3d:58:7f:b0:5a:e0:ff:70:63:7e:22:de:ae:a9:
e8:15:c4:79:ec:99:9f:af:c0:23:5f:fd:e4:b7:df:
35:8e:cd:de:49:f8:fe:0f:b1:bb:81:7c:e7:94:01:
fe:90:0a:94:55:0e:3c:97:5c:1a:1c:9d:5b:a7:0e:
33:1b:03:6f:ec:ad:6e:a8:64:a5:f9:0a:e0:43:c9:
c9:b9:f0:0b:43:56:99:7a:29:66:4e:b9:61:c6:26:
aa:6d:bc:96:96:c1:74:d3:ab:39:1c:e8:da:5d:78:
04:32:4f:70:89:88:31:51:3c:12:a3:90:4d:40:f9:
da:a7:79:e9:cf:80:f5:eb:ff:7a:4f:59:77:b8:32:
dc:9c:cb:d4:ad:62:f6:5d:ad:d4:44:25:7c:71:b0:
a8:e2:8c:38:44:56:1a:cc:58:b8:c8:ae:35:1a:c7:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:B2:42:3D:7E:4E:C8:A8:8B:9E:B2:4A:0A:21:2C:8A:A0:BF:A1
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:95:97:da:a1:fb:2d:da:fa:c2:32:6a:b1:13:a1:3e:65:f3:
b3:e3:3a:da:8e:93:3c:c7:90:b8:29:83:01:1d:12:39:69:09:
90:d3:cd:ba:4f:79:3f:45:db:58:97:10:79:47:0c:e6:c6:df:
ad:c4:3d:fa:d8:65:c0:71:73:97:ad:74:ab:7b:a0:a5:77:a6:
92:1f:07:2f:6d:f7:05:80:23:c9:ec:f4:e9:18:5a:6c:f7:4c:
4e:b1:c7:14:6a:ce:af:55:63:ec:94:fb:47:94:7c:ed:f4:24:
76:da:b1:91:b3:26:e2:11:19:91:16:53:e0:13:16:66:a6:94:
c8:5b:46:fa:4d:75:e3:14:09:a7:4f:c0:7c:a5:54:1a:21:6f:
71:d9:1c:88:73:42:d2:4c:28:41:d6:2c:08:6a:3e:b9:7d:5e:
64:74:b5:03:55:70:d9:50:46:26:cc:ff:03:c8:06:2e:c7:5a:
3b:9b:3b:50:7e:d1:ec:88:56:fb:92:ff:d6:9c:0c:fc:3a:ab:
b4:ae:2c:bd:fd:77:eb:9c:f5:a0:14:a3:c1:a5:68:ac:1f:2b:
1c:1e:f7:fe:6b:6c:fd:33:54:7d:34:bd:62:3b:b1:e8:62:90:
d8:2f:31:d5:29:db:63:15:8a:7c:04:ca:84:59:e3:07:1f:c4:
d8:b4:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:47 2026 by rpki-client