Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: 5kgaJaSUiLJlA+0s7HOCuu5nS+s3ML0UlWM7J2qVx8o=
Subject key identifier: 39:8B:A9:91:61:9A:B2:FC:34:B7:DE:82:9C:B8:A6:48:46:89:AF:C5
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 01A0C7EAE792258ECFEDEEBC24E88DFEE00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 02DB
Signing time: Tue 22 Sep 2026 07:00:55 +0000
Manifest this update: Tue 22 Sep 2026 07:00:55 +0000
Manifest next update: Wed 23 Sep 2026 07:00:55 +0000
Files and hashes: 1: 7FxLncSDYVoZ6Iufw5pur3BUHiE.roa (hash: YgYsqBmeiNBHe4niuDgW9xPkD23Iui2p8MLylcQcAk4=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: ISquQzuQkp8ligzYWv0L0wJKaMD7x02oMbaVeLT+FqY=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:e7:92:25:8e:cf:ed:ee:bc:24:e8:8d:fe:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Sep 22 07:00:55 2026 GMT
Not After : Sep 23 07:00:55 2026 GMT
Subject: CN=398ba991619ab2fc34b7de829cb8a6484689afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:99:dc:a2:96:00:07:97:20:d3:9a:30:51:
6b:87:05:c4:07:41:2c:ff:33:a5:7d:f3:4a:e1:65:
42:76:86:df:45:b8:bf:b7:45:3b:47:6e:61:de:45:
05:d0:d8:8c:3c:a1:01:90:e7:66:d7:70:34:9c:b7:
a0:a6:77:10:99:26:c1:4a:bf:98:66:9c:c8:44:39:
54:cd:09:94:e8:13:c3:c5:4c:63:a4:74:20:a6:a7:
90:dc:a3:5f:77:fe:18:5f:5c:a0:2b:d2:bd:0a:db:
e7:30:77:28:32:7a:5c:5e:88:34:c5:91:4b:81:fd:
28:65:f9:f5:28:fd:a6:4c:f4:70:8b:3a:4d:b4:00:
49:76:65:97:a4:48:f0:cd:8a:f8:a5:fa:43:44:43:
8d:2b:f7:5a:b1:22:a7:91:c7:d6:ff:4a:be:05:7e:
e7:df:5c:8a:db:ed:8c:36:33:b7:a4:f7:40:25:3d:
4f:8f:7d:e5:9d:3a:9c:c3:c6:63:92:51:6a:44:75:
99:cf:2a:b9:86:f8:90:73:f0:2d:a7:04:1d:04:6a:
f0:b0:46:2e:1b:1a:0a:d7:6d:41:53:59:4a:40:a7:
90:ae:25:70:23:58:ec:7d:df:70:4b:55:e1:b3:6b:
03:93:ed:c4:00:ab:67:ab:7f:19:bc:1b:5b:d5:a3:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:A9:91:61:9A:B2:FC:34:B7:DE:82:9C:B8:A6:48:46:89:AF:C5
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a5:8b:ca:40:34:54:4f:48:57:e7:40:a1:42:30:5e:58:3e:
d3:a7:ea:9b:20:f4:0b:e9:b5:16:a2:80:92:a6:e0:67:8f:4e:
8d:51:cc:55:c2:29:bf:79:c5:19:47:05:0b:e9:ae:2d:3c:a7:
32:8c:01:84:19:7e:68:c5:70:7d:14:11:59:9a:59:f1:15:cb:
67:ed:09:1e:58:fa:d8:9d:c1:4f:41:22:a3:5c:bd:98:41:dc:
bb:c9:f0:c8:c2:a6:31:f2:7d:a3:11:c7:65:9e:3a:f7:70:d2:
60:dd:d7:ee:08:f5:2c:e6:33:dd:e4:eb:9d:4d:6c:ee:19:15:
80:9a:2a:1a:29:4d:0a:59:63:56:a3:17:ec:8c:4c:dc:a3:4c:
5d:d4:5a:54:f3:2c:58:97:64:52:06:b6:a7:9f:2f:cd:c3:0a:
2f:a5:58:fa:b5:c1:f7:c6:69:0c:04:ee:73:05:cf:3f:e8:cb:
7e:1d:b3:13:c4:2e:c7:25:57:c4:d1:3d:21:32:46:55:01:53:
5e:f4:7f:f0:64:c6:50:f4:fb:25:58:57:27:5e:3a:42:d0:27:
d7:86:33:ba:63:57:fd:4b:89:c7:70:4a:33:c4:a9:41:c7:58:
37:b9:54:84:85:b2:81:82:20:ce:2f:3d:c4:18:9a:ca:7e:c7:
55:2c:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:04 2026 by rpki-client