Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: Shl/dKD5ANBnf1Ap8jRpFNK/yeXFU9cAxbp8xM5Pn0A=
Subject key identifier: A6:29:B7:D8:67:D0:FE:D6:2E:EC:33:C3:0E:BF:31:BD:1B:45:91:D2
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019FA7BD4A2705A636638D9A9A5808E377EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 08:00:28 +0000
Manifest this update: Tue 28 Jul 2026 08:00:28 +0000
Manifest next update: Wed 29 Jul 2026 08:00:28 +0000
Files and hashes: 1: 1-lqZd_6V2ASpt34rjyjv_QUBzd0.asa (hash: 96dnzPaigHhRx2YGVn9I5ztW/D5IGEU3Qr1lWZpM0/0=)
2: 7F2Ex1XJYm3L0yL5pGpEfKLiopU.roa (hash: 97Psvm/KgB7i0n7mJmomBUafk4NIFwigHMo3F5EKRwQ=)
3: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: j5pqNHsev30plYbLMcABMuaSAH4UKjUd93AfsGl5JAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:4a:27:05:a6:36:63:8d:9a:9a:58:08:e3:77:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Jul 28 08:00:28 2026 GMT
Not After : Jul 29 08:00:28 2026 GMT
Subject: CN=a629b7d867d0fed62eec33c30ebf31bd1b4591d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:ec:d9:9b:96:6b:a5:54:30:5d:94:1c:40:
e8:6c:6a:c3:24:8a:f4:65:83:5c:c8:c7:0c:5d:67:
bb:4a:9c:6d:29:97:31:b3:f6:0e:ce:c8:60:fe:56:
b8:15:93:e2:d2:c0:a4:04:fd:fb:48:af:3e:54:47:
b8:c9:60:50:c3:d8:80:ba:b5:3c:87:a3:b0:f6:15:
d9:3b:09:d5:e9:58:27:bc:b5:2b:f4:87:bb:3b:af:
ef:ee:01:3b:36:db:58:94:d5:50:e7:ea:61:08:47:
4e:21:08:7f:1d:89:b0:f2:d9:b8:90:db:54:90:fd:
3b:f9:6b:ca:15:cd:fa:7e:27:f4:a6:0e:58:08:02:
89:a5:df:9b:5c:67:8f:91:7c:69:3f:dd:d6:5a:13:
ac:b5:7e:da:1c:4d:0e:4e:8e:08:09:88:40:ae:e0:
ea:33:77:fc:aa:b9:ba:59:59:93:c6:eb:42:6d:1b:
9c:64:7a:85:ed:1b:02:d3:fe:8c:3b:d3:be:0f:90:
f2:85:97:81:67:48:bd:d9:0d:db:a0:a7:c8:07:df:
37:5b:f3:15:80:6f:36:15:0a:cc:15:5e:57:02:20:
93:7d:e5:09:4d:77:f1:14:39:4e:b0:86:68:ac:8c:
9b:52:eb:c0:ea:7d:e8:11:53:62:ae:c9:95:07:a7:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:B7:D8:67:D0:FE:D6:2E:EC:33:C3:0E:BF:31:BD:1B:45:91:D2
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:ce:17:04:2a:13:8d:20:28:75:80:52:6f:28:35:bd:ba:
d0:58:a9:3d:32:da:cb:67:bd:ad:94:37:2d:9d:e3:7d:91:6e:
03:74:34:ae:0e:0b:ef:2d:ef:fd:ab:b5:b1:f8:20:45:18:74:
bf:cc:1a:b9:e7:61:b0:1b:39:90:fc:56:ea:05:6f:b7:e6:bf:
97:2f:33:44:73:8f:64:66:2d:7f:9c:0d:00:21:c0:f5:a6:1c:
0b:7e:fe:86:e7:a2:76:a6:55:6b:57:e9:c4:12:10:8e:9b:1f:
91:70:ca:f9:e0:ea:6c:79:62:90:66:ae:e2:3b:3a:0e:61:dc:
48:49:e6:bc:2e:66:74:53:d0:44:06:b7:d5:06:54:ee:67:76:
ed:78:91:b6:c7:5c:c0:69:da:20:17:75:d0:1a:d6:22:9d:a5:
03:7e:7e:d3:a1:74:07:f6:77:c8:91:02:24:84:9b:1f:88:ff:
e3:de:93:06:f1:7c:4b:56:3c:3a:df:ba:22:84:14:49:39:79:
6a:6e:1f:5e:f5:29:d8:88:45:16:14:d0:c1:b1:fd:e8:9b:03:
62:e0:e9:ae:c6:6f:7e:94:de:b1:94:ba:ed:91:36:ff:c8:4e:
25:bb:b1:3e:b6:5e:9a:a0:e7:4f:be:c4:33:64:e6:df:20:75:
db:45:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:57:48 2026 by rpki-client