Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: i/RS6+sln8+D5tv79kgsDA7RemmDLWvo/HetzPNRnzk=
Subject key identifier: 64:CD:20:26:42:09:0F:E8:6B:77:5B:B1:94:AE:5C:D9:4D:95:29:C3
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019CAE6BF7292C7B2B0A27FC3DAC8E98CEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 06A0
Signing time: Mon 02 Mar 2026 12:00:37 +0000
Manifest this update: Mon 02 Mar 2026 12:00:37 +0000
Manifest next update: Tue 03 Mar 2026 12:00:37 +0000
Files and hashes: 1: Apg6THL6nNSCI_zX9N0HioO5_FI.roa (hash: xOzp8DMGrF7dA8wIkMVpYr0krnXQI+toAtngHnKO/CA=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: FSJ98Stx026XnjaK9quMuzg8FWWKjK78MH9oPqOnsgg=)
3: xYoe99GmkL23ZMa2Tozkl_bKIqU.roa (hash: 405SceDsf9th40a7ckeVXHxvuDkWg8V20/2TYadqbnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:f7:29:2c:7b:2b:0a:27:fc:3d:ac:8e:98:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Mar 2 12:00:37 2026 GMT
Not After : Mar 3 12:00:37 2026 GMT
Subject: CN=64cd202642090fe86b775bb194ae5cd94d9529c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:b4:d1:84:eb:e2:70:ff:3e:af:27:08:88:
89:4f:79:ee:05:92:6e:77:49:d5:31:8f:de:a3:61:
f1:b0:fa:3b:74:4c:ff:4c:b4:81:4a:30:20:97:73:
03:ee:10:3c:63:18:76:4e:ae:de:46:62:e5:4f:c5:
cc:8a:98:3b:c7:14:aa:2e:3d:db:5f:6a:8d:c6:51:
9f:98:c1:d1:8a:de:0f:67:ad:ab:5d:cd:5d:ad:c3:
a9:cd:54:6c:b8:60:24:6b:aa:c1:cb:6c:50:e4:e1:
d0:80:7d:9a:6e:b9:ac:2a:43:6a:5c:84:87:3b:79:
59:19:67:ed:01:9c:84:35:22:40:a3:6b:d6:cf:4b:
26:37:e9:e4:08:3d:d3:69:59:fc:d0:fd:44:ce:9e:
f9:b4:d0:3e:2a:1c:61:00:bd:66:62:40:7c:1a:a5:
4c:ab:ce:f5:a2:ef:ef:a9:0b:28:73:2a:23:93:47:
ea:48:9b:2e:fc:eb:ae:c5:87:16:49:0f:e4:50:46:
f4:8e:07:ce:34:64:45:c6:d5:4e:60:60:2d:4c:be:
3b:fd:3e:e1:10:f6:f4:9f:8f:74:ed:3b:23:1d:a4:
44:da:23:e5:66:1a:6e:d3:fe:7c:5c:b7:57:e8:8c:
3c:8a:5b:34:dd:ce:94:4f:bb:e3:a8:6f:d9:03:08:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CD:20:26:42:09:0F:E8:6B:77:5B:B1:94:AE:5C:D9:4D:95:29:C3
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bb:78:a8:55:c0:aa:db:38:65:c6:ae:19:80:d6:9e:d1:c7:
b6:5e:a5:29:4d:29:43:b3:5f:c9:78:5d:65:11:a4:bd:23:aa:
c7:18:2a:25:a8:cc:3d:b7:d0:e7:03:e3:e3:f0:89:21:3b:d7:
02:e3:08:1c:a1:67:5f:77:53:ea:68:ac:53:df:6f:3a:aa:c7:
c9:24:0d:c6:e1:75:e5:d2:ab:01:99:ab:99:e1:b4:1f:d3:bf:
be:00:74:36:26:21:ad:49:9c:1d:cb:c3:87:9e:9f:0a:65:e0:
e1:c0:17:4a:32:54:70:d5:36:74:a2:99:a7:e2:77:c0:03:93:
b2:82:96:c7:84:16:ff:d7:be:81:ec:7f:7a:8c:f0:b9:02:bb:
c9:18:71:cd:cf:78:52:ac:79:ca:20:bb:2d:2f:24:a8:bb:6d:
be:b6:4d:e9:ec:99:d2:f4:60:ae:a2:37:df:93:b3:4d:9e:78:
e2:bd:5d:9c:89:a1:61:3f:55:fc:39:39:94:a2:fb:7a:be:53:
bb:49:cb:fb:a9:8c:d6:3b:49:33:11:9e:98:7c:9c:49:0a:96:
9a:26:1a:e3:86:a2:3c:b6:72:09:07:11:a0:41:64:56:f0:23:
3b:60:4b:bf:82:b9:4d:80:7c:8f:5e:da:8e:97:12:7c:c8:a1:
72:2e:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:27 2026 by rpki-client