Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: m6WQ5jCpAM8QaNErrQK83nW9lC5F0Sm2eEluVF/P+98=
Subject key identifier: 49:90:B6:5C:9A:23:03:B1:53:73:49:CC:94:64:57:37:F3:91:FD:26
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 019D9AE37DEE7982FA38AAEE0D225D4E6D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0D50
Signing time: Fri 17 Apr 2026 10:01:33 +0000
Manifest this update: Fri 17 Apr 2026 10:01:33 +0000
Manifest next update: Sat 18 Apr 2026 10:01:33 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: jJe3FtF96WgO4p7/VJY26qXwfgDF5FmIy7KW6xoA4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:7d:ee:79:82:fa:38:aa:ee:0d:22:5d:4e:6d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Apr 17 10:01:33 2026 GMT
Not After : Apr 18 10:01:33 2026 GMT
Subject: CN=4990b65c9a2303b1537349cc94645737f391fd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:80:c6:4a:8d:45:6f:bf:a0:cd:41:1d:85:
90:ed:e9:e4:4a:43:11:6e:bc:43:c2:f4:2e:53:c4:
52:50:70:20:11:fd:e7:d5:f9:4c:87:57:67:7d:86:
d8:c2:09:82:b9:8d:70:62:04:19:5e:2b:6b:14:cb:
05:a2:4e:f9:d9:32:b5:1c:2c:84:32:a8:b1:3f:24:
d6:c8:2b:d8:a5:ac:85:43:09:d5:42:0e:6d:99:b4:
54:38:80:53:d8:ea:9e:b0:26:84:c4:59:f3:94:10:
92:eb:fd:a0:cb:a8:1f:09:97:35:14:26:af:85:bc:
77:f9:37:2e:4d:0a:cf:e0:51:b2:1b:0d:c0:00:54:
99:3c:87:77:4e:4e:aa:4a:f5:ee:ef:2a:bd:be:f6:
8a:09:17:a2:26:60:da:e1:c6:57:d9:c6:cd:f9:04:
51:32:28:3b:a9:66:87:36:57:07:a8:26:b2:14:dc:
48:11:61:06:66:6d:07:72:09:eb:90:0a:49:5c:e5:
17:9a:83:07:d1:2e:60:4d:7b:04:ff:28:10:48:7b:
fb:74:83:26:60:08:60:63:33:cf:aa:71:b4:9d:ae:
9d:72:18:4f:44:90:49:6d:f1:5e:d0:a0:bd:3d:03:
a8:d1:c4:d2:1f:e7:54:5e:4f:c5:64:05:1e:f2:71:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:B6:5C:9A:23:03:B1:53:73:49:CC:94:64:57:37:F3:91:FD:26
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:59:35:eb:ca:c4:99:88:14:5a:b5:a7:29:dc:bb:b0:59:
a9:bb:2a:3f:8c:a4:55:a1:49:c9:cf:a8:24:ea:64:ef:8f:0f:
de:49:88:cd:07:ed:63:87:e9:cd:10:37:24:11:3c:19:32:58:
86:81:f0:29:7d:fe:70:cd:cc:98:b7:5e:96:ba:d4:ff:a2:87:
ee:58:18:35:12:5a:2b:fb:af:78:11:c9:02:12:83:8e:8f:59:
85:22:6b:1c:f7:3f:55:bb:5c:99:fd:16:a1:30:d4:6c:a5:03:
34:b9:12:63:67:f6:ea:6f:3a:e1:f5:7b:21:85:f6:26:2d:ac:
c8:5b:de:60:53:4d:7b:93:c8:78:13:5d:96:34:3f:f8:3f:be:
5f:28:be:65:50:62:49:03:76:d5:c7:7b:3b:dc:69:61:7d:99:
fd:c4:17:2d:c5:9a:2f:36:bc:9a:89:fd:bc:2b:2d:62:20:f4:
8a:e9:11:79:aa:59:fc:9a:e3:46:88:26:55:89:01:b0:55:48:
d2:a9:74:fb:f9:8a:52:c2:01:09:87:83:83:d0:e0:a4:c5:ee:
09:58:85:b4:e5:ff:27:87:46:ab:94:6c:72:67:b8:4c:af:83:
c0:17:55:aa:b2:d0:8a:2b:4c:46:57:d7:f6:67:b1:91:b9:90:
8b:cb:d8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:03 2026 by rpki-client