Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: 9givYdxQ8jMGVetcqnbbqM4PlYVuGns4qjDOHGEpKcc=
Subject key identifier: 08:0C:EB:86:9C:33:89:EE:F1:68:FD:77:8D:35:8D:7E:C3:14:4F:5C
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019D984FDB06DCD5BF6A8974947F664C6A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0BF6
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: OapL7HyFK0X9wx4mL1edhbz25m0.roa (hash: f3Ysa7cBGNsoNSQJdM2JIeAtt87DP7/+oUJ9JxWPJ4k=)
2: WkUE5TtDSY0qUMHRVPnjHcODIrA.roa (hash: 7KfXEZ987lAvPil502fNFkfEV1D1Y8iJROoMhWkSDa8=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: g0l4FbE6CNoPF9QQb1av/YVKPQ5PDBlfcOyBjWnJs/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:db:06:dc:d5:bf:6a:89:74:94:7f:66:4c:6a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=080ceb869c3389eef168fd778d358d7ec3144f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:38:a5:bf:9a:92:e9:49:0f:a5:2e:30:83:
02:15:26:7b:89:38:b1:00:11:2c:50:18:9a:44:69:
ea:3a:d2:c4:ae:45:aa:2b:41:92:a6:95:f8:67:41:
21:40:4f:3b:dd:36:1a:92:6d:01:07:cd:44:41:ee:
ab:fb:47:c9:26:8c:1e:e3:87:a1:da:a2:09:ea:2a:
e5:f8:9b:7c:30:1f:75:f7:1f:11:a3:49:c9:8a:92:
27:38:4e:e0:83:de:cf:27:e6:1e:12:5d:6e:0e:ff:
ef:69:4f:99:bb:8f:ee:52:3f:1c:00:d3:f3:f4:a2:
1a:31:a1:25:bf:97:1b:d1:83:52:b5:1e:7b:60:a8:
73:4b:34:0d:2c:af:be:0a:94:3d:86:8d:b5:2b:b5:
de:db:89:9e:d9:13:8e:1a:91:2f:2e:c1:53:44:9c:
05:2a:c9:e1:a9:52:e8:5f:91:5e:ae:91:09:05:bf:
8d:89:ad:72:e1:15:98:18:ba:d9:13:2c:dd:d6:cc:
db:ac:49:4d:fc:a2:9f:4e:42:15:d2:70:3b:5b:ce:
3d:14:da:73:9c:fd:f3:04:fa:51:1a:b2:1a:18:48:
a2:6e:4b:d3:65:b0:c5:33:c9:b5:96:a1:ff:52:98:
93:b8:36:f6:ee:fe:4d:53:51:4d:50:72:70:24:8c:
71:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:EB:86:9C:33:89:EE:F1:68:FD:77:8D:35:8D:7E:C3:14:4F:5C
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:22:4b:8c:de:93:16:e7:4c:14:13:0f:54:a4:e5:4d:6a:
0e:ae:3c:f6:8a:68:86:40:62:14:18:d4:ef:76:9a:33:14:c7:
4a:59:bf:dc:1f:53:29:21:7e:9c:f0:8b:1b:18:f1:42:4d:28:
1a:36:d1:e0:07:f2:b7:f1:4a:c9:0d:c5:be:28:be:59:f1:b5:
5b:87:7b:75:39:e5:1c:4b:a3:45:65:57:b6:f0:df:ab:ea:b0:
f1:10:a1:d8:c0:9e:76:58:3d:fc:e4:e5:85:10:98:ff:4c:6c:
fc:9b:bc:50:ae:72:68:6b:5f:0c:b6:8f:7f:d2:4f:96:1e:72:
95:51:f0:69:7c:05:ff:2b:07:75:7d:c4:a6:05:74:21:28:ee:
e7:27:52:69:01:e9:3c:c5:98:42:8c:9c:7d:48:4f:80:b6:3c:
15:3f:9a:e7:64:65:13:9e:27:33:98:43:e6:3d:f7:92:6d:33:
bd:a2:40:c3:68:0a:33:96:8d:c6:fb:8c:e5:0a:50:3d:08:92:
c1:02:1a:0e:5d:96:f4:c3:14:00:54:fa:09:93:30:4d:ba:26:
c8:f7:21:ce:a4:99:db:53:7f:f2:4b:fa:38:10:09:fc:8a:e6:
a6:fa:d0:14:01:a9:68:a3:07:42:be:71:0b:29:3f:07:44:83:
23:31:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:50 2026 by rpki-client