Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: Tra7HRY7/qkCyt+YO9pP6vac3ygksxgkfmepzqKMD7A=
Subject key identifier: E1:EC:E2:55:29:66:78:B4:7F:B6:A0:47:A7:21:80:F4:9D:09:35:5C
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 019CAB6BFC113C3D3EF188C972ED3AC03E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 07AF
Signing time: Sun 01 Mar 2026 22:01:46 +0000
Manifest this update: Sun 01 Mar 2026 22:01:46 +0000
Manifest next update: Mon 02 Mar 2026 22:01:46 +0000
Files and hashes: 1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: ORN9JqjhP3Lmen1GZhIENB9aNzLiI+aiqtRL54aZbZk=)
3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:fc:11:3c:3d:3e:f1:88:c9:72:ed:3a:c0:3e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Mar 1 22:01:46 2026 GMT
Not After : Mar 2 22:01:46 2026 GMT
Subject: CN=e1ece255296678b47fb6a047a72180f49d09355c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:84:1a:83:2e:e6:34:1f:d5:20:ba:83:65:
a3:05:a0:fa:37:c9:e2:cc:e8:c3:85:11:4a:1d:15:
28:44:c6:b3:bf:af:41:59:4f:2b:8e:a2:c3:9a:fb:
89:28:4c:22:f6:f6:73:93:2d:6c:c1:a1:2f:13:3c:
f1:5c:ca:b6:c0:62:4e:31:a8:f1:47:0a:d8:5d:c1:
74:0f:24:46:d4:6f:98:22:b0:1f:c9:26:66:49:a3:
f3:27:df:36:64:c9:3e:d0:30:5a:ec:26:64:fb:96:
66:58:f8:96:b4:5c:68:ae:23:60:cd:c1:98:40:58:
90:ae:61:58:89:d3:1a:67:bb:f2:8f:2e:41:4b:fb:
ab:24:f0:e3:bb:bb:26:c6:4a:2d:97:ae:03:3c:c0:
98:6c:83:02:23:68:81:cb:66:34:c4:a4:61:1b:37:
8d:2f:24:29:a5:cb:14:13:11:dc:55:53:1f:33:79:
1f:f7:61:43:7a:66:12:b5:3f:ee:ef:88:c9:db:3b:
98:6f:be:76:81:d5:3f:a1:f3:b4:ff:84:b9:a7:78:
bb:16:5c:6f:ba:15:e5:81:21:d6:a2:18:3b:af:87:
b0:9b:cf:9f:94:03:d8:db:02:4b:ca:d8:aa:ff:3f:
2b:f2:6c:5a:7d:ee:7c:f2:7b:8c:3a:ba:81:40:d5:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:E2:55:29:66:78:B4:7F:B6:A0:47:A7:21:80:F4:9D:09:35:5C
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:21:9a:79:94:6c:ec:f1:48:a2:50:74:7c:4f:d6:92:e9:
7d:d1:e9:4e:81:47:63:97:34:ff:80:4a:ed:e0:7f:05:80:da:
19:09:8c:6f:6b:29:f9:89:8e:50:6d:72:b0:c7:67:7c:b0:30:
86:58:fb:80:29:d9:0a:3b:60:cd:34:09:9c:1e:59:62:50:fb:
1a:5e:2a:7e:94:96:09:2f:65:db:8f:61:da:3e:1a:3d:21:32:
03:68:fe:17:94:cc:32:91:48:71:4a:67:f8:a8:35:92:c1:a6:
3e:49:33:80:38:0c:82:cb:89:59:23:84:73:56:97:b3:74:39:
3e:a1:f4:5a:16:f1:1f:df:7b:4e:b6:2d:ac:99:85:78:e0:0c:
17:f9:dc:8d:65:5a:d1:49:12:f4:72:a6:76:82:83:38:da:ae:
7d:b3:64:9d:a2:4c:31:d9:f8:d3:cd:bf:9b:6a:8d:36:aa:11:
be:2d:e7:1c:98:b3:d1:02:3b:c7:1e:db:36:b3:3f:cf:d8:4f:
c3:c9:29:77:af:ea:a0:f2:15:0a:b4:bf:bb:f0:22:8e:ff:bc:
f4:25:02:8c:4e:db:d4:2b:e8:19:d6:bc:08:7f:2e:4a:4a:64:
55:6b:cd:62:7c:05:ac:f7:a5:54:39:e1:53:f8:43:ef:55:ff:
22:29:92:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra/wRPD0+8YjJcu06wD6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2M2Y5MTcwNzdmOGYzZDBlMzM4Yzc0MmVhMjFkNjQzNThk
MTlkNTIwHhcNMjYwMzAxMjIwMTQ2WhcNMjYwMzAyMjIwMTQ2WjAzMTEwLwYDVQQD
EyhlMWVjZTI1NTI5NjY3OGI0N2ZiNmEwNDdhNzIxODBmNDlkMDkzNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVqEGoMu5jQf1SC6g2WjBaD6N8ni
zOjDhRFKHRUoRMazv69BWU8rjqLDmvuJKEwi9vZzky1swaEvEzzxXMq2wGJOMajx
RwrYXcF0DyRG1G+YIrAfySZmSaPzJ982ZMk+0DBa7CZk+5ZmWPiWtFxoriNgzcGY
QFiQrmFYidMaZ7vyjy5BS/urJPDju7smxkotl64DPMCYbIMCI2iBy2Y0xKRhGzeN
LyQppcsUExHcVVMfM3kf92FDemYStT/u74jJ2zuYb752gdU/ofO0/4S5p3i7Flxv
uhXlgSHWohg7r4ewm8+flAPY2wJLytiq/z8r8mxafe588nuMOrqBQNVZiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHs4lUpZni0f7agR6chgPSdCTVcMB8GA1UdIwQY
MBaAFEY/kXB3+PPQ4zjHQuoh1kNY0Z1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmIt
MjVhNDBjMDc1ZjEyLzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmItMjVhNDBjMDc1ZjEy
LzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyAhmnmU
bOzxSKJQdHxP1pLpfdHpToFHY5c0/4BK7eB/BYDaGQmMb2sp+YmOUG1ysMdnfLAw
hlj7gCnZCjtgzTQJnB5ZYlD7Gl4qfpSWCS9l249h2j4aPSEyA2j+F5TMMpFIcUpn
+Kg1ksGmPkkzgDgMgsuJWSOEc1aXs3Q5PqH0WhbxH997TrYtrJmFeOAMF/ncjWVa
0UkS9HKmdoKDONqufbNknaJMMdn4082/m2qNNqoRvi3nHJiz0QI7xx7bNrM/z9hP
w8kpd6/qoPIVCrS/u/Aijv+89CUCjE7b1CvoGda8CH8uSkpkVWvNYnwFrPelVDnh
U/hD71X/IimSzA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:04 2026 by rpki-client