Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: g6S15WvCulhDSVDjPBRMmN9SS7zUw3psoKOgzuHJ1Sc=
Subject key identifier: AB:12:92:D9:9E:3F:74:D4:E5:BE:86:36:4C:B1:29:DE:C9:72:4E:3C
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 019CA97D3ABD4CBCF8FBE2D5EF1F9CBB6E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0CD3
Signing time: Sun 01 Mar 2026 13:01:22 +0000
Manifest this update: Sun 01 Mar 2026 13:01:22 +0000
Manifest next update: Mon 02 Mar 2026 13:01:22 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: RDYw7E+zKkiWc4SLA0qgcfpcLyPyX5BTIplUJAPlOT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:3a:bd:4c:bc:f8:fb:e2:d5:ef:1f:9c:bb:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Mar 1 13:01:22 2026 GMT
Not After : Mar 2 13:01:22 2026 GMT
Subject: CN=ab1292d99e3f74d4e5be86364cb129dec9724e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:27:df:70:30:dd:02:5f:4f:66:e0:a5:ab:
74:4a:2e:cd:ec:1c:e9:6d:84:9e:58:9c:df:45:76:
ed:eb:af:f0:dd:98:ce:7a:54:9c:8e:42:cf:4d:e3:
d2:39:64:79:17:69:b3:ba:10:ec:64:8a:aa:88:66:
c8:a6:3a:26:17:4b:c3:2b:25:6b:56:5f:5e:4d:62:
a0:44:27:df:c1:fb:90:58:00:aa:2f:7c:8e:da:a5:
78:99:b4:d1:2b:09:93:d2:76:3f:aa:c2:a4:29:15:
95:1d:ec:2b:32:76:e8:06:5b:6d:b9:a2:e6:4b:9c:
dd:3c:a6:ad:c1:9a:29:86:dd:1b:96:a5:81:f4:83:
20:fc:b0:fc:dd:2f:21:ac:75:09:cb:7d:b6:55:7b:
08:b4:f3:18:93:4b:13:29:fe:18:2b:a3:46:e9:d6:
92:b9:1b:b4:27:cb:71:ee:e1:fa:8b:f0:40:84:ec:
a7:97:70:1c:29:74:02:8f:92:1d:44:96:f0:63:1b:
a5:af:c2:bc:d6:09:96:d8:7f:ca:fe:53:cf:af:57:
ae:09:fd:8f:26:c7:b9:82:f6:61:4b:12:04:14:82:
54:27:cd:37:3d:94:5a:e7:f6:e3:16:3a:80:a9:b2:
aa:a7:4d:1b:97:68:2f:3b:a5:84:d5:20:20:e5:cd:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:92:D9:9E:3F:74:D4:E5:BE:86:36:4C:B1:29:DE:C9:72:4E:3C
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:a1:1b:d9:88:4b:c8:ee:b2:c3:8b:48:8f:44:92:0c:74:
ed:1c:ad:58:eb:ca:60:11:e5:37:5a:45:95:d1:5f:f5:f4:5c:
9d:13:65:0f:45:e9:83:81:60:fe:dd:16:fb:e9:27:58:bc:b7:
b9:ad:35:bd:ac:b1:70:31:b9:74:7d:25:ef:de:05:b2:4e:fd:
e0:9e:49:58:49:f9:6f:f7:53:85:27:15:57:26:6f:ee:31:65:
7c:7a:c1:71:a4:bf:29:8c:e5:21:38:c7:7b:3f:57:53:08:5a:
0d:c1:89:45:6e:0f:cb:0a:57:0a:6c:4f:34:55:5a:e3:a5:93:
92:20:aa:4c:45:05:f5:77:fc:c0:e9:e2:0f:50:62:96:fa:6e:
3d:1b:9d:93:ec:17:e4:18:76:31:5a:21:ba:42:a7:c6:26:12:
97:a7:f7:e2:37:4b:48:f3:04:1e:78:28:da:88:4a:eb:51:05:
1b:24:48:77:b8:0a:90:42:3d:90:1f:05:25:bf:37:05:7b:ba:
94:81:bd:03:4f:19:e5:5e:43:75:88:63:f0:c4:09:0e:3f:ad:
99:27:a3:d6:7a:78:a0:aa:11:fa:0b:38:2b:47:86:e7:28:49:
b1:c1:ea:1b:35:00:5f:a5:12:01:b6:25:b9:f8:17:28:2a:e5:
f6:f4:1f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfTq9TLz4++LV7x+cu25SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NjMwNWE5YTFkZmEwNmRiYTg1N2I0M2YwZGU5ZTYyMmY0
OTUxYTMwHhcNMjYwMzAxMTMwMTIyWhcNMjYwMzAyMTMwMTIyWjAzMTEwLwYDVQQD
EyhhYjEyOTJkOTllM2Y3NGQ0ZTViZTg2MzY0Y2IxMjlkZWM5NzI0ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWUn33Aw3QJfT2bgpat0Si7N7Bzp
bYSeWJzfRXbt66/w3ZjOelScjkLPTePSOWR5F2mzuhDsZIqqiGbIpjomF0vDKyVr
Vl9eTWKgRCffwfuQWACqL3yO2qV4mbTRKwmT0nY/qsKkKRWVHewrMnboBlttuaLm
S5zdPKatwZopht0blqWB9IMg/LD83S8hrHUJy322VXsItPMYk0sTKf4YK6NG6daS
uRu0J8tx7uH6i/BAhOynl3AcKXQCj5IdRJbwYxulr8K81gmW2H/K/lPPr1euCf2P
Jse5gvZhSxIEFIJUJ803PZRa5/bjFjqAqbKqp00bl2gvO6WE1SAg5c2T+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsSktmeP3TU5b6GNkyxKd7Jck48MB8GA1UdIwQY
MBaAFERjBamh36BtuoV7Q/DenmIvSVGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMt
MGM4Njc0NTc2OTJiLzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZDQ4NTgtZGJjZi00NmQxLTg2ZDMtMGM4Njc0NTc2OTJi
LzEvUkdNRnFhSGZvRzI2aFh0RDhONmVZaTlKVWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1KhG9mI
S8jussOLSI9Ekgx07RytWOvKYBHlN1pFldFf9fRcnRNlD0Xpg4Fg/t0W++knWLy3
ua01vayxcDG5dH0l794Fsk794J5JWEn5b/dThScVVyZv7jFlfHrBcaS/KYzlITjH
ez9XUwhaDcGJRW4PywpXCmxPNFVa46WTkiCqTEUF9Xf8wOniD1BilvpuPRudk+wX
5Bh2MVohukKnxiYSl6f34jdLSPMEHngo2ohK61EFGyRId7gKkEI9kB8FJb83BXu6
lIG9A08Z5V5DdYhj8MQJDj+tmSej1np4oKoR+gs4K0eG5yhJscHqGzUAX6USAbYl
ufgXKCrl9vQfAw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:41 2026 by rpki-client