Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: jS/4Mk5+XeV4uwqpL8Zbcl+vkFuXvLypv1QZbsAGUag=
Subject key identifier: 63:8C:B6:B2:F0:42:73:37:B8:84:E8:41:B6:40:2B:0E:ED:C6:AE:63
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 01A137115B5BA8335C027F6D25891F954589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 08F9
Signing time: Tue 13 Oct 2026 21:00:46 +0000
Manifest this update: Tue 13 Oct 2026 21:00:46 +0000
Manifest next update: Wed 14 Oct 2026 21:00:46 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: g8rt1OiqlYiSsivOpg8BNPZ13nG3ZN0xemXiePkgQDY=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:5b:5b:a8:33:5c:02:7f:6d:25:89:1f:95:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Oct 13 21:00:46 2026 GMT
Not After : Oct 14 21:00:46 2026 GMT
Subject: CN=638cb6b2f0427337b884e841b6402b0eedc6ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:2a:8f:66:0a:7d:55:73:5c:e0:78:0e:0c:
d8:82:b2:96:f1:7d:09:83:49:ce:00:c3:dc:52:29:
cf:87:60:b1:9a:5d:f9:db:55:f0:af:f5:db:7a:8b:
45:72:59:25:a6:82:2c:82:8d:cf:20:90:0d:38:07:
07:05:c6:41:87:52:ee:bb:69:2f:fc:cb:94:a1:6b:
59:0b:10:57:fc:97:32:47:26:10:75:18:d9:a7:6c:
21:2a:c1:6d:60:fe:15:ee:c4:19:37:e8:21:8a:e0:
16:f3:b4:71:3b:22:1e:88:c0:20:49:3c:54:ee:2d:
49:65:7b:d3:da:ff:e4:f2:13:8f:6f:23:81:35:da:
fa:b9:41:45:71:b6:2a:2a:7f:54:73:4a:b9:db:1b:
f0:37:f9:0e:14:d8:66:08:64:3b:fe:fd:3b:23:75:
ac:cd:81:7e:66:bc:18:0c:59:8d:60:8f:2c:f3:b2:
f1:8c:b1:45:a0:8d:0a:8c:2d:ab:53:49:47:1d:9a:
12:14:e7:f6:d0:1a:4f:8b:80:fd:c7:31:5f:b7:3f:
49:01:c2:43:fe:56:da:87:48:9c:88:ea:43:90:49:
36:dd:77:1d:2d:17:92:3e:ee:48:e7:e4:1f:8a:75:
d1:13:c0:48:a4:04:f8:fe:2a:20:4e:f9:52:0d:a7:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:B6:B2:F0:42:73:37:B8:84:E8:41:B6:40:2B:0E:ED:C6:AE:63
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:dd:04:89:2a:53:03:22:7f:a5:29:e0:61:44:a4:c6:06:
08:f7:02:c4:39:33:6a:42:23:37:80:83:67:79:19:a5:b2:5b:
97:45:ea:6a:4c:a6:6b:66:8d:e2:58:31:83:22:9c:ad:fb:ca:
fa:13:a7:b0:3f:fe:50:fe:17:22:f8:40:57:f0:42:92:37:c1:
21:25:19:bb:25:ba:eb:34:0a:42:b3:03:bb:68:e4:02:6a:ee:
03:a0:ea:49:23:f4:ce:74:1a:ac:65:f9:7b:78:0b:80:4e:bc:
f9:14:c7:4a:ef:47:7d:d9:4a:7a:04:c3:40:5f:77:5e:88:83:
72:77:02:29:53:81:25:1b:b4:f5:f2:05:a9:4d:4b:04:fe:c3:
ab:bc:1c:5f:f8:48:88:45:8b:1e:42:2f:0f:29:33:43:98:b3:
4a:1c:8e:0c:c9:d3:9a:09:7c:83:3e:89:d6:c1:53:57:18:e5:
92:43:23:c3:92:8d:ca:c5:0a:e1:d8:aa:94:d2:93:d5:64:71:
c9:dc:65:15:b7:17:5a:3a:5f:5f:8b:4b:cc:66:a8:7e:3f:bc:
44:c2:63:e3:99:a0:06:cd:77:6e:e7:23:a3:d2:ca:29:56:1a:
0f:33:59:7b:81:a8:21:8b:43:25:50:c1:a9:55:cc:0c:a1:38:
93:c1:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:59:02 2026 by rpki-client