Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: JJswSDCImPtGGeX/LX421ETDHc4yDdFqkuFv/tJe2WA=
Subject key identifier: 53:BF:42:B1:60:0C:28:41:55:F7:A7:B7:0C:A2:F2:74:92:0E:95:8D
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019D9962222503B90475A1B17AE4DD69C43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:38 +0000
Manifest this update: Fri 17 Apr 2026 03:00:38 +0000
Manifest next update: Sat 18 Apr 2026 03:00:38 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: kn12g1fKTqcp5s7d4yWlmIlG07PokxwrQT/O5OqRroI=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:22:25:03:b9:04:75:a1:b1:7a:e4:dd:69:c4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Apr 17 03:00:38 2026 GMT
Not After : Apr 18 03:00:38 2026 GMT
Subject: CN=53bf42b1600c284155f7a7b70ca2f274920e958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:ee:d5:d7:12:2f:c1:fa:dc:a1:7e:36:34:
b4:cf:6e:cc:f1:98:b6:8a:c4:ff:0d:71:d5:1c:c5:
f0:6e:7e:1b:6a:22:ca:01:a1:d9:10:e3:ec:a6:3b:
2e:08:f6:bf:79:f2:ae:81:33:bf:93:47:19:99:95:
e0:40:6b:1e:81:1b:6a:5f:8e:3b:c2:8e:08:e2:85:
da:da:a0:1a:64:fc:c2:1f:15:4b:6b:41:ef:18:02:
aa:1b:24:8c:4c:53:ac:eb:58:84:1a:71:54:b1:03:
bb:69:c8:04:66:93:1e:89:57:ef:02:48:d3:ae:80:
f1:c8:b1:68:f7:fa:74:d5:16:a8:b9:d3:b7:5a:95:
de:9b:69:9f:7c:af:aa:6d:bf:31:21:93:43:da:f0:
7a:e9:b0:b8:45:8e:f7:3c:4e:c5:10:c3:57:81:c0:
9a:55:97:25:22:cd:e1:35:55:8f:af:f1:0e:43:26:
70:e0:2c:9d:f4:15:10:bb:5e:8c:67:c2:f4:26:0d:
0a:81:2e:20:67:b5:c1:a4:13:75:a4:cf:bb:2f:f6:
f1:2c:90:ef:1b:0a:17:30:6f:b9:32:23:89:3a:cd:
8b:95:9e:32:01:de:a2:18:61:d7:6a:81:0b:26:74:
3a:8c:8e:d1:35:37:36:7c:31:12:b4:a2:f6:e1:b5:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:42:B1:60:0C:28:41:55:F7:A7:B7:0C:A2:F2:74:92:0E:95:8D
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:5a:10:14:66:81:18:3f:12:f9:82:cc:f5:66:b7:fb:0c:
50:04:8b:2a:95:1b:68:67:53:be:14:9a:73:f8:58:3d:75:19:
81:9a:74:3c:6c:9c:f6:a1:31:2f:f2:7d:b1:b9:d4:4f:d9:35:
60:b6:1e:89:de:01:19:65:5f:72:e0:51:19:bc:e1:3e:80:65:
6d:77:a8:f4:45:d8:09:76:ca:6c:46:56:5d:da:35:ad:7e:b5:
be:ae:28:e9:c9:aa:28:43:e3:7f:e3:93:5d:46:5f:0d:50:d7:
98:93:d4:11:d1:12:54:a9:0d:73:d2:53:93:fc:17:d2:35:06:
c9:11:bd:93:5c:0c:8a:07:c2:69:6d:60:b6:69:e0:85:df:98:
b2:c2:80:42:91:4d:8e:a4:51:f8:c0:74:54:07:60:19:e6:9e:
61:8b:70:79:a4:ff:9a:93:10:60:40:2c:97:7c:1f:ba:8e:15:
a7:04:28:e0:e1:c3:2c:e1:28:39:24:6e:46:b9:7e:a6:b9:46:
ad:12:a4:ca:9a:63:6f:c1:5d:9b:b8:fc:be:b4:cf:13:68:72:
fb:f3:d8:bb:22:32:fc:ac:a1:3c:3a:5a:1f:77:4b:f1:ea:60:
3f:f2:c5:d0:9d:80:1e:d1:c0:1b:ef:d5:58:cd:82:83:bd:4d:
6b:f2:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:54 2026 by rpki-client