Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
File: RJEWZsI21ozTG82FLhwbifzO8wA.mft (raw, json)
Hash identifier: 5t8mbuBScWseXLerz1nbnkZmAqjAfT+qJyY60IyQ9oQ=
Subject key identifier: 1D:EB:8B:80:79:48:FA:4B:BE:33:0D:09:00:6E:F7:F0:51:72:D7:F3
Authority key identifier: 44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
Certificate issuer: /CN=44911666c236d68cd31bcd852e1c1b89fccef300
Certificate serial: 01A0D8723AB05D4FA00D267313E00B4FA0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
Manifest number: 78
Signing time: Fri 25 Sep 2026 12:02:39 +0000
Manifest this update: Fri 25 Sep 2026 12:02:39 +0000
Manifest next update: Sat 26 Sep 2026 12:02:39 +0000
Files and hashes: 1: RJEWZsI21ozTG82FLhwbifzO8wA.crl (hash: AAQmfr3LVe6RtyAjX7flkJwGqn/4+U54kCrFDF6kwjg=)
2: gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa (hash: I05foFhPwtjC41vNTBYky0OTidLIWUCpRGSlsMhk3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:3a:b0:5d:4f:a0:0d:26:73:13:e0:0b:4f:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44911666c236d68cd31bcd852e1c1b89fccef300
Validity
Not Before: Sep 25 12:02:39 2026 GMT
Not After : Sep 26 12:02:39 2026 GMT
Subject: CN=1deb8b807948fa4bbe330d09006ef7f05172d7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:fa:cc:2c:6b:ce:91:4f:a6:62:c0:74:78:
b0:b7:10:86:3a:9d:f3:03:14:28:c3:bd:e4:64:6e:
2e:62:91:10:7c:bb:2a:e5:81:a3:3f:57:24:e9:0a:
14:26:04:c1:b9:c2:33:9c:ea:37:cb:66:e6:e2:77:
60:5d:e3:a7:6b:d2:a7:a5:fa:00:6a:22:18:7c:e9:
64:4e:11:58:6e:13:4a:9d:19:f0:56:bd:66:36:d4:
b7:30:f4:f0:fa:16:46:09:1d:59:3c:6a:39:37:aa:
d7:28:0a:ab:6c:b5:08:2b:2d:bb:5b:b7:08:6b:ed:
64:87:82:e1:e9:39:08:56:a9:33:ba:25:48:5e:11:
62:f2:6e:21:16:72:9f:4c:8a:a8:3f:df:b9:97:57:
fb:f1:47:ff:11:9d:0c:cf:6b:e6:13:a0:70:89:c4:
02:17:30:e6:36:fe:0c:78:14:bb:c3:1f:d3:f8:66:
41:18:15:3b:14:30:22:2a:24:15:7e:e8:f9:50:c0:
0c:89:f7:9b:a5:74:6f:83:88:cb:d4:70:a0:34:61:
cb:47:6c:c2:97:3c:aa:16:ab:9f:f0:7d:0e:c0:64:
fc:95:8e:9b:2b:14:69:16:ae:cc:8c:e0:88:95:81:
17:42:7e:26:27:bf:e5:3b:40:95:e8:40:20:1b:01:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:8B:80:79:48:FA:4B:BE:33:0D:09:00:6E:F7:F0:51:72:D7:F3
X509v3 Authority Key Identifier:
keyid:44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:af:7d:a7:1f:12:b9:4f:80:a8:28:63:91:92:d9:41:03:
5a:1e:d8:75:07:96:e8:ae:fb:b2:a9:93:da:6c:fb:72:cf:ad:
24:73:25:18:f4:b6:03:96:87:25:35:fe:3e:c1:72:71:d9:83:
a2:24:03:09:30:d0:8e:77:d6:bf:2c:ce:31:84:62:b4:05:7e:
ab:11:d3:6f:5f:91:07:bb:6c:dd:ff:19:2b:e2:86:01:95:03:
d4:70:b1:b9:e8:91:2c:4e:e0:8d:13:1f:3c:e1:1f:69:97:62:
f9:fa:f8:52:49:12:73:8c:53:96:6e:4e:cd:c7:76:d6:e2:0f:
cf:00:a1:8c:dd:e1:c0:e7:f0:dc:8f:bb:da:e8:47:0d:7d:52:
c4:26:36:c6:bb:5c:2b:98:8b:dc:c0:38:03:01:50:2c:66:90:
8f:f7:a7:b1:ed:56:9b:25:06:7b:46:ac:d1:63:07:45:51:a2:
f2:b3:00:4b:90:41:cc:ad:4f:66:d0:ec:34:07:01:5d:10:20:
91:1a:41:e3:d1:9c:16:b9:4a:69:da:57:f0:b9:39:f8:01:e7:
e8:3d:9a:d0:70:f0:29:f6:df:7a:47:1d:32:c7:e3:c2:cb:1e:
df:52:92:54:86:46:46:32:42:b6:77:b5:4e:c4:17:ad:9d:8b:
b5:2d:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:12:28 2026 by rpki-client