Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: GW2yOCLKZKBb6JXNd+s8vMiKFBu2asm3QXkbKbphObg=
Subject key identifier: C8:C2:B3:17:86:DA:5F:CE:C9:0C:36:1D:80:13:ED:EE:C1:25:3B:30
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019EC2C97F9D9B852E004712AE2F85D95B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 01B8
Signing time: Sat 13 Jun 2026 21:00:45 +0000
Manifest this update: Sat 13 Jun 2026 21:00:45 +0000
Manifest next update: Sun 14 Jun 2026 21:00:45 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: t8oo3uUvumowjM1xPmMUkOZD6hpdKepeXv2QFsUHCP8=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:7f:9d:9b:85:2e:00:47:12:ae:2f:85:d9:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Jun 13 21:00:45 2026 GMT
Not After : Jun 14 21:00:45 2026 GMT
Subject: CN=c8c2b31786da5fcec90c361d8013edeec1253b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:1d:1a:f3:52:0f:63:02:ac:21:a6:16:8e:
e2:c9:ad:62:3e:17:14:9b:11:0e:64:14:75:60:b2:
a5:eb:5e:a4:49:39:00:7f:29:93:27:80:7a:8d:d5:
a1:58:c1:32:aa:1e:2d:9a:b9:bb:e7:1c:ba:b9:08:
24:da:dc:15:21:df:6c:11:1c:d3:24:fa:47:66:a7:
10:f6:e6:00:fb:20:9b:45:17:40:c4:b1:59:62:6b:
23:27:c6:ae:06:51:38:58:30:43:6a:9a:94:23:7e:
fa:15:ac:c3:ee:32:d6:84:64:79:56:8c:da:41:3a:
04:b0:ff:f4:a7:41:c1:ad:7a:74:12:60:7d:ce:cf:
ed:65:4b:71:0c:7c:8f:49:9d:59:33:b1:f1:2a:b1:
69:b9:b2:01:64:ce:c0:d7:66:80:13:66:a7:fb:4f:
b6:96:0f:8e:52:36:4c:36:0e:08:f8:e3:af:94:85:
1a:9e:ce:3c:f1:ce:d6:bf:24:67:31:e1:9a:6f:15:
58:30:0e:73:56:9d:c3:5e:27:05:ac:e8:f9:74:54:
27:f5:23:2c:47:12:88:44:c5:67:0f:22:87:d2:67:
19:6a:41:70:e4:bf:30:08:10:d8:b8:de:61:d6:07:
0b:6a:f1:4c:44:05:0a:96:c2:66:18:a3:68:d2:7e:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:B3:17:86:DA:5F:CE:C9:0C:36:1D:80:13:ED:EE:C1:25:3B:30
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:17:10:b5:41:92:bd:3b:f4:ff:32:89:09:36:c5:a2:c6:
3d:25:73:62:02:27:94:64:21:e7:75:64:6b:da:97:b2:2f:3c:
a2:b5:64:30:a6:b0:20:91:f0:5b:63:99:41:50:48:1d:fe:55:
a2:cb:53:c3:c3:f9:f8:a0:a3:20:a7:54:27:5f:4a:3f:e8:c8:
88:ea:7e:8a:b0:10:45:50:42:e1:c8:29:09:2f:34:0a:66:71:
97:23:59:12:cc:8c:fd:14:c6:38:ce:c9:14:98:80:06:58:3e:
77:3b:94:27:9e:69:bf:76:04:c7:8e:e0:8a:9e:c1:cc:ad:d0:
e0:99:ba:c8:db:7f:92:3b:6c:9c:5e:54:71:0f:c3:99:3f:5e:
a4:d2:40:11:a1:f5:40:fc:0b:77:b5:51:1d:29:61:fd:2a:42:
a8:ec:92:65:c5:b8:82:81:65:8a:a5:76:12:e7:8d:8d:a6:78:
7c:a7:1f:1a:3e:46:80:ea:29:6e:cb:33:68:d4:52:f7:72:0e:
d7:6c:c8:42:82:b2:e0:9d:26:66:5b:40:95:42:90:0d:01:b4:
38:3e:94:3b:62:16:a8:76:69:ee:32:55:d3:cc:98:58:c1:b3:
35:65:5d:25:14:cc:91:96:90:12:17:2a:e0:56:cb:a7:6a:3a:
ca:74:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:11 2026 by rpki-client