Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: Pi3Ik5Ps6Dv0o20ypXiE5p89GnR5NjwAuZW8OkpuBZE=
Subject key identifier: A2:A4:EA:DC:71:C0:D8:D1:BC:BC:75:80:10:C9:83:FA:4A:7D:28:B3
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019D9A7504091380D34DE7C8BCE7AE0F0FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0791
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: nr2IIta1MBnnxkLqrK6n2xgwsVn4yk2eGAe5S8atgAk=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:04:09:13:80:d3:4d:e7:c8:bc:e7:ae:0f:0f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=a2a4eadc71c0d8d1bcbc758010c983fa4a7d28b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:13:c8:3d:27:a5:ab:07:67:b6:53:df:21:
bb:36:f3:d8:64:97:00:34:56:52:47:46:dd:67:ad:
0c:10:15:c3:eb:6d:2d:6a:90:c1:06:9e:72:ea:f8:
de:23:71:b0:49:87:3a:41:11:f7:9e:1a:fa:11:f0:
89:8b:f0:ab:cc:f5:3c:5b:bf:d4:fb:b3:3e:12:74:
05:03:53:6e:8e:6e:ec:76:42:af:1b:1e:2d:91:e0:
0f:92:88:41:50:75:ce:94:4f:a4:36:25:3b:7b:48:
a0:ec:d9:a8:4e:17:6b:b9:db:39:3e:ad:e7:8a:e6:
ca:12:86:da:5f:e9:c3:b5:c8:a3:7d:47:46:d0:1d:
11:c7:e3:9c:4b:3c:f7:d0:20:d3:bf:81:d9:96:2d:
1f:5c:22:d6:93:3a:7b:f8:9c:a9:e0:fa:38:67:b8:
68:45:81:7b:ef:ee:cf:df:68:e1:f7:ee:12:a4:ed:
28:7e:5a:cd:72:1a:ec:92:be:98:71:da:9d:33:b1:
b3:99:b3:7d:a2:31:86:89:de:78:29:29:28:cf:18:
05:01:24:91:81:94:af:b3:da:d2:bb:46:c5:bc:3c:
0e:37:05:7f:e7:52:7d:d1:ac:79:d0:60:ef:db:4d:
b5:26:6f:23:40:8a:c0:fb:c7:76:97:8d:e9:6d:e7:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:EA:DC:71:C0:D8:D1:BC:BC:75:80:10:C9:83:FA:4A:7D:28:B3
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0f:78:ae:86:c0:b1:12:4a:ef:30:53:fc:5c:07:07:e7:1a:
31:df:2a:00:29:62:d2:7a:62:cb:2d:29:4b:65:6e:5a:b8:21:
ee:0f:2b:78:2f:66:c2:bf:2d:db:f4:35:7a:f2:93:8e:43:b7:
61:dd:dd:e5:69:61:5e:52:3d:3d:68:e4:f7:2a:fb:48:5a:8a:
45:7a:b0:10:71:ed:87:ad:fd:c0:0f:2d:92:e3:f3:ef:ea:5b:
af:37:9f:2b:43:70:8b:6d:b0:24:97:52:41:c1:00:0b:c2:d2:
ec:0e:67:2d:32:d0:0d:e6:d6:9b:85:c5:9d:51:1b:13:7a:09:
ec:5d:cc:e2:73:8f:f4:12:e7:aa:b3:fb:27:8c:dc:af:d3:9b:
13:4f:83:9c:f1:98:fb:e3:3a:21:d1:11:56:f5:f6:42:0c:d5:
33:97:e5:56:9b:51:5c:b8:6b:ec:0d:67:92:1c:16:cc:dd:34:
9f:6d:f3:07:30:68:13:00:bd:d2:17:41:13:c0:37:6e:3e:90:
c1:2f:27:bf:72:04:08:b5:f0:5d:e0:fe:96:9c:25:2e:4a:88:
66:2e:b9:68:be:e6:47:eb:24:a6:42:3f:a3:b6:36:c9:86:18:
40:03:3e:eb:dc:eb:22:72:de:bf:cf:01:24:10:e0:9d:9c:2b:
6d:7c:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:16 2026 by rpki-client