
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 3K3sJwy3KrzilN99vxQqLtO7stSEDsTQjB6XV2in8Yc=
Subject key identifier: 05:6B:55:5F:AB:36:4F:BA:F2:4A:C5:DD:99:33:DB:CC:37:5A:CF:21
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019FAC08466ECAD32C14F650C4D11C0648C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 08A4
Signing time: Wed 29 Jul 2026 04:00:51 +0000
Manifest this update: Wed 29 Jul 2026 04:00:51 +0000
Manifest next update: Thu 30 Jul 2026 04:00:51 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: VkCYYZ7wxBuTWVLJuDGj9HK5rIwXF7k4YLePPKdquME=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:46:6e:ca:d3:2c:14:f6:50:c4:d1:1c:06:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jul 29 04:00:51 2026 GMT
Not After : Jul 30 04:00:51 2026 GMT
Subject: CN=056b555fab364fbaf24ac5dd9933dbcc375acf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:40:13:46:e3:34:d2:ed:10:04:5d:72:ee:
c0:b7:63:83:9f:ed:52:ff:c2:da:de:13:69:86:2b:
64:a2:37:0c:b7:df:26:5b:22:9e:d4:f3:e3:2e:bd:
fd:bb:91:7b:e5:28:00:b7:8f:5c:a9:44:cf:46:12:
55:e6:2f:11:de:52:3f:cd:7e:6d:de:8f:61:c5:67:
cc:47:97:f3:4e:b7:1c:76:8f:e0:78:bb:8f:f0:34:
9b:59:ca:f7:b3:4e:86:01:7d:3e:19:a1:61:84:d4:
4a:0a:10:1b:db:b6:e4:b6:76:de:2e:df:6c:23:c8:
92:2b:93:f9:ff:7d:c1:50:e5:f7:3b:5b:f5:8b:86:
c4:e5:ed:64:a2:40:2b:e6:49:55:16:26:99:81:f5:
fa:c1:84:69:9f:18:1b:2a:ff:ce:08:4b:cf:33:20:
02:d7:83:08:3e:13:ce:6e:43:cc:9f:94:d4:69:52:
21:0a:0b:b4:fb:46:b3:ae:ba:68:6e:12:55:a9:85:
ad:17:4e:86:dd:24:96:10:d0:a4:3e:83:05:62:5d:
40:7e:61:ec:cb:81:ea:f3:2e:18:d3:1f:45:c9:a4:
2d:e3:9c:90:1b:dc:d4:6c:b4:3d:94:10:56:c5:2b:
46:1e:b6:a7:ae:3e:66:b3:be:3e:84:f5:c1:4d:3c:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:55:5F:AB:36:4F:BA:F2:4A:C5:DD:99:33:DB:CC:37:5A:CF:21
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:80:49:d1:78:b7:cb:a7:d1:30:44:c2:cd:0a:61:c9:09:
93:a7:7d:d7:40:6f:e2:49:6e:7f:1a:1f:a0:7c:16:74:f6:ea:
f8:c7:79:1c:8a:97:06:58:ba:ea:aa:70:86:1d:b4:36:10:e4:
be:71:05:f5:67:56:71:32:dc:27:a5:2b:d9:d4:97:de:b1:58:
94:f4:96:cb:31:d0:37:98:dd:8c:ef:d8:01:9d:8f:86:fb:f4:
86:15:b5:37:11:4a:a5:05:ac:12:6d:56:ec:6a:e9:82:50:65:
ec:e0:9b:98:4a:e1:91:d1:78:13:fb:9b:af:0a:ac:41:5a:fc:
cf:5a:8d:a8:81:e9:51:6c:9e:ed:f4:43:a8:22:69:e8:d4:ee:
b4:21:8d:0f:67:ea:42:13:6f:50:33:4c:91:dc:95:aa:50:06:
a4:8d:89:31:ed:29:a3:8c:2d:d6:a0:d3:87:76:70:47:ff:f2:
67:8a:93:be:47:d7:d9:0e:c7:84:ee:21:29:9c:fc:f6:d6:53:
8e:8c:85:c1:01:69:eb:53:b8:b1:95:b9:84:5e:6b:7a:7e:2c:
65:00:a4:b9:f9:de:dd:90:87:3f:88:08:a6:d5:98:54:32:61:
73:19:7c:ce:35:d4:20:a0:7b:a7:0f:22:9b:a4:4b:94:5d:f8:
6d:b5:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:34:58 2026 by rpki-client