Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: u2zBvmoucOJaMXaZp1IwKq+mUzNW7tnmAh/F9hO3ftI=
Subject key identifier: CB:B3:65:08:D5:83:2B:E1:6A:1C:4D:0E:94:BB:20:39:81:AC:90:68
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019CAEDA1D0B9F8C04BEDBAE34BE7BF85C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0717
Signing time: Mon 02 Mar 2026 14:00:55 +0000
Manifest this update: Mon 02 Mar 2026 14:00:55 +0000
Manifest next update: Tue 03 Mar 2026 14:00:55 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: vNwMxkpn5W9dQ5sOaX0KEoYqFMS/py7nMIIdZaaahJY=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:1d:0b:9f:8c:04:be:db:ae:34:be:7b:f8:5c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Mar 2 14:00:55 2026 GMT
Not After : Mar 3 14:00:55 2026 GMT
Subject: CN=cbb36508d5832be16a1c4d0e94bb203981ac9068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:9f:44:78:6b:10:b5:d8:18:b7:99:7b:13:
72:ff:a3:a0:b4:41:0d:ef:1f:82:f4:1e:e8:f6:8d:
2b:09:39:b6:f6:a7:7c:42:2b:2d:9a:43:b5:96:5a:
c0:97:81:22:2b:21:e7:06:a9:fd:52:c3:5a:50:12:
c2:2d:fb:b8:17:aa:0b:63:2b:3a:f2:e0:b0:e0:ec:
a9:3a:b9:b4:3d:26:c7:2f:03:90:83:39:13:b3:2d:
17:a2:31:91:6a:d6:60:69:a2:3d:8b:96:f7:66:af:
28:38:13:9d:86:02:64:a3:d4:a9:ea:59:e5:92:92:
f6:5f:5e:92:89:63:4f:d4:87:fb:97:cc:34:06:5b:
3f:c7:20:f6:e8:62:40:d6:e4:9b:af:cb:87:a7:30:
96:d4:e5:b6:9a:ac:12:bd:70:de:f8:58:40:8b:05:
2e:1a:57:65:dd:b6:cc:21:03:76:c8:e3:64:98:83:
ad:5a:0a:7d:f9:c8:93:e4:9e:ed:19:ab:90:f8:34:
c0:db:7b:f6:24:e9:cb:51:72:f1:67:bd:7f:ad:94:
89:9c:a7:2d:a5:d4:a9:58:27:b6:72:ce:56:ec:22:
2b:01:f7:44:98:88:7f:77:2c:c0:1c:43:c0:3b:aa:
f2:e0:bd:8d:35:3d:9a:de:5e:ba:06:21:0b:a4:4c:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:65:08:D5:83:2B:E1:6A:1C:4D:0E:94:BB:20:39:81:AC:90:68
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:d2:24:97:ab:8b:c9:0a:27:d0:2f:d7:48:ae:ea:07:54:
eb:6c:28:7d:52:8c:d9:93:91:8d:72:73:0c:62:e1:91:cc:fa:
b3:e4:ac:13:7e:72:e0:65:f0:cb:38:79:46:32:7e:6a:40:f6:
d7:5c:28:05:1d:f4:83:97:42:a6:e0:13:0e:38:23:66:29:86:
fa:a0:93:ad:21:2c:cd:6c:e6:e0:85:cb:e0:5a:d2:e6:9a:29:
ca:19:67:b8:7b:8d:60:3d:5f:db:0d:2f:17:aa:01:99:84:35:
7a:76:94:5c:25:76:a9:25:77:8f:38:69:39:ba:ba:8d:4a:f0:
29:9f:0f:82:9d:a0:64:5e:fc:26:f7:bc:e8:53:23:3d:5a:f0:
ad:55:da:ed:fe:c7:ec:a7:4f:65:35:b7:4f:00:ce:fb:b9:c8:
ff:1f:dd:a0:da:b9:3b:20:d3:8e:ef:61:43:21:85:62:bf:54:
6a:7a:7b:ec:49:6c:a0:9a:61:80:75:41:56:51:fa:20:56:e9:
58:2c:07:dc:29:4e:50:d4:b6:d4:3b:a6:f0:c6:ff:9e:01:36:
2b:52:b4:44:d3:37:81:c9:f1:cc:48:92:2b:0f:4a:d0:74:dc:
e0:d3:b3:b5:7e:bc:55:26:82:92:d4:c9:3e:c6:17:8f:f5:ff:
7d:5c:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:42 2026 by rpki-client