Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: w5fHbE1UJLwkrk3X8rEnNXVTmoj70Yknpy3dEF9QnmU=
Subject key identifier: 18:19:AA:AE:36:1D:2C:7C:76:BB:A3:51:38:AB:B2:CA:1D:9C:41:8D
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019CA7FC618B51E5F5F6326E8660724F2AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 06:01:00 +0000
Manifest this update: Sun 01 Mar 2026 06:01:00 +0000
Manifest next update: Mon 02 Mar 2026 06:01:00 +0000
Files and hashes: 1: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
2: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: a5tafW9utoRfD65wZfiWN4SlKQDEOA1CkEk08UsLvCc=)
3: W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (hash: UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:61:8b:51:e5:f5:f6:32:6e:86:60:72:4f:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Mar 1 06:01:00 2026 GMT
Not After : Mar 2 06:01:00 2026 GMT
Subject: CN=1819aaae361d2c7c76bba35138abb2ca1d9c418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:3c:f4:87:a8:5b:cb:e2:cc:2a:a8:41:d5:
a8:0f:98:39:0a:44:6c:3d:1d:cf:5e:7a:45:7a:06:
e9:cf:80:72:0c:05:28:9d:87:f2:b9:75:c5:09:55:
9a:76:39:be:51:e9:45:84:31:2b:b4:7e:41:8f:bd:
9e:3c:d8:90:69:1b:ec:a1:b1:c5:a8:3f:ac:ff:80:
24:eb:2c:bc:53:af:75:1d:20:95:b3:5a:30:ec:06:
4f:9a:3e:11:b5:f4:37:50:e2:3d:80:f8:28:ab:29:
cc:f3:cf:8b:0a:7d:9c:70:af:95:d4:7e:ec:39:c4:
17:f9:7f:2c:80:30:76:e5:a3:fc:52:10:47:b1:27:
a7:06:d7:0a:48:de:2a:cb:5f:71:21:40:e8:8e:49:
75:00:a9:9c:b0:0b:ba:46:a6:27:db:15:84:14:d6:
b5:c9:98:2a:0a:e8:82:88:73:d2:d1:bb:f3:7c:af:
07:97:c3:16:64:f3:c2:8a:b3:43:13:3e:91:e0:8c:
87:ad:35:48:ac:ee:b4:f7:6e:2f:ee:b1:b5:60:e7:
19:15:b4:e0:f1:e4:cc:6c:4e:a1:ab:39:c1:e1:ca:
e3:2d:0b:3d:99:41:f3:ee:85:b3:99:66:ea:46:76:
45:16:ea:53:17:09:60:05:0f:ef:a8:29:cd:07:a0:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:AA:AE:36:1D:2C:7C:76:BB:A3:51:38:AB:B2:CA:1D:9C:41:8D
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:c5:56:46:e3:bb:65:14:73:e4:2f:44:73:2c:23:d5:d4:
9e:bf:2c:23:37:03:ce:cb:ce:8b:67:67:46:80:70:9a:00:b5:
82:be:c9:5e:ff:41:3d:b4:65:00:53:6f:3f:d6:6d:fa:53:8f:
0d:fb:51:ea:a8:9e:f9:bc:51:8d:e2:10:75:24:e8:58:86:26:
69:94:15:a0:70:db:dd:a7:f8:f2:11:56:dd:ca:ed:8d:22:4d:
8a:33:79:fe:c7:da:75:1d:df:43:00:6e:ad:0e:44:94:de:b1:
63:e2:3b:7e:55:ad:0d:83:38:b6:30:eb:e0:e5:49:00:e3:4e:
34:1b:f7:f4:ee:ca:a1:a9:73:98:55:2b:55:73:a7:5b:10:42:
7f:01:27:b2:28:b4:e4:59:fd:d0:02:90:94:72:04:2c:92:17:
1c:5c:84:c9:ff:ec:08:b7:94:f6:2d:08:4c:54:65:b6:e8:be:
14:e0:02:4e:6e:7e:df:27:3d:8e:7f:3e:83:c5:8b:7c:24:c7:
97:1f:e8:0b:bf:b5:f3:d4:5d:82:a7:79:a4:f9:08:60:ab:64:
53:4f:2a:97:56:eb:95:94:15:2b:72:59:16:96:13:f5:b1:37:
87:4c:ad:f8:6a:71:7d:30:b5:14:80:f1:22:16:50:36:83:a8:
2f:7e:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:24 2026 by rpki-client