Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: 3CUzHssgmHRN8o5zWMByJV5DLjKqzsTqArXH7iAVj6A=
Subject key identifier: AF:F5:6A:10:D9:30:CB:35:87:C6:8C:E1:36:25:16:90:5D:38:FC:99
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019DA4F877C5EB911DDCBA7A004200ACD498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 0124
Signing time: Sun 19 Apr 2026 09:00:40 +0000
Manifest this update: Sun 19 Apr 2026 09:00:40 +0000
Manifest next update: Mon 20 Apr 2026 09:00:40 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: 20echM8S3kdFd0u8wLH76xS4AwvgoVhj9ubJCtLkLbM=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:77:c5:eb:91:1d:dc:ba:7a:00:42:00:ac:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Apr 19 09:00:40 2026 GMT
Not After : Apr 20 09:00:40 2026 GMT
Subject: CN=aff56a10d930cb3587c68ce1362516905d38fc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:8f:fd:32:84:aa:47:41:38:63:39:64:25:
0d:34:4c:1f:ef:52:93:40:e0:7f:a4:4b:78:52:20:
2b:26:63:a8:d4:04:e8:4c:03:e1:87:db:c7:e2:75:
e9:9d:52:01:13:f2:7c:aa:a5:01:b9:74:7a:36:00:
d3:cf:57:2f:4c:70:ec:7f:48:be:7c:25:70:d0:dd:
69:e4:45:27:90:3a:9e:ab:cf:49:2d:53:c0:e9:d3:
05:7b:24:9b:18:00:18:03:8b:a9:1a:cd:25:b4:80:
e7:52:29:e6:4f:8a:71:c4:db:13:03:90:b4:bc:03:
72:60:37:a9:e0:60:94:d1:0b:79:9d:ea:1d:4a:8a:
89:ed:4d:30:64:08:35:fc:92:a8:1e:a7:09:ce:d4:
7d:82:e6:db:8f:06:ed:87:74:d9:4f:7e:47:67:bb:
59:17:8e:de:f1:60:58:0f:f9:9d:a2:34:c7:d1:17:
5e:a3:d6:e6:f9:36:90:7f:6c:01:7f:8d:9c:dc:0c:
77:ba:c8:bd:25:88:b0:94:c9:58:07:d8:e6:a0:18:
5e:56:f5:9d:f5:0a:07:3c:67:47:20:56:c6:7f:57:
24:a6:a3:72:ce:5c:73:0e:89:ed:02:cb:39:85:d8:
97:51:af:c2:47:0d:c7:04:60:99:b4:80:e5:73:96:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F5:6A:10:D9:30:CB:35:87:C6:8C:E1:36:25:16:90:5D:38:FC:99
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:40:1e:c6:bb:18:1c:04:a3:cb:60:09:47:e8:9f:19:50:d4:
05:f6:7f:ba:58:4c:02:69:8e:1f:45:d8:30:00:88:f1:c7:94:
b7:d3:b9:b3:d9:9f:a2:45:9b:06:26:9e:71:47:fc:b9:95:83:
ae:1e:3a:80:38:d7:99:33:46:98:2d:26:be:16:c3:4a:d2:10:
37:7c:c9:c8:91:7a:35:c0:b2:19:4f:7c:2b:b5:a9:80:eb:bd:
5d:e0:18:6e:da:46:de:c1:c1:51:ff:9c:35:d9:43:78:e7:11:
d8:0e:1a:20:49:7a:78:03:6c:07:ef:b8:3f:11:2f:9b:13:33:
da:2d:15:d2:da:6d:16:f1:4d:7d:78:3d:a6:7a:62:4e:03:7d:
d8:bb:45:d0:45:e2:56:4b:86:54:2b:00:8a:f2:58:c1:02:17:
c9:33:2a:7c:b5:18:3d:96:17:d9:dc:5d:74:47:40:66:af:64:
c2:ee:ca:15:de:01:01:82:95:98:cc:18:9e:30:90:53:ff:1a:
d8:e1:c4:67:23:e7:dc:16:84:7b:f5:10:14:cf:a8:f9:fa:26:
71:8e:d3:70:83:c8:a2:3d:6b:10:b0:bb:28:c4:fb:1c:89:e8:
22:4d:0a:6b:db:83:d7:71:53:d1:ad:e8:d5:0e:3b:4b:22:39:
47:1a:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:42 2026 by rpki-client