Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: bUqHZadtO3IrKwEkQDQETn877b9Viod9u2u6srVcQIU=
Subject key identifier: 19:28:BE:BB:C5:57:3F:DA:54:A0:28:B6:44:8C:38:49:E2:D3:6E:23
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019CB0C8817A1D601EBC5E74F87C57B0A7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0718
Signing time: Mon 02 Mar 2026 23:00:56 +0000
Manifest this update: Mon 02 Mar 2026 23:00:56 +0000
Manifest next update: Tue 03 Mar 2026 23:00:56 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: iNgnZcPjtwD40gxWwckiJ9tvdVyWElZP0FAlcPYzj4c=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:81:7a:1d:60:1e:bc:5e:74:f8:7c:57:b0:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Mar 2 23:00:56 2026 GMT
Not After : Mar 3 23:00:56 2026 GMT
Subject: CN=1928bebbc5573fda54a028b6448c3849e2d36e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:e8:fe:32:b3:6c:ae:c8:b6:53:56:e2:a9:
37:08:0e:9a:42:02:7d:48:bf:b6:bf:3a:39:3d:4d:
ab:45:31:fb:34:b4:8d:8a:0c:f0:b5:80:67:f9:f2:
c8:a2:bb:32:cb:80:b8:5d:5b:f3:7b:f3:86:24:d9:
dc:28:61:14:7d:0f:b7:ab:b8:ca:ac:4c:5f:83:69:
88:22:85:75:81:f8:ac:8e:2a:2c:94:fa:fa:db:ab:
13:db:a5:01:75:98:a1:6e:99:b2:c0:f6:a3:4a:d4:
22:9a:40:aa:32:06:a7:b5:f8:03:c6:f4:d5:50:1c:
c5:9b:b1:62:5a:47:7a:7e:36:a4:8b:52:68:00:4d:
f4:80:d7:a2:f0:c2:2b:60:e5:c8:41:20:95:57:1e:
38:5d:a7:71:2a:ad:0d:09:58:36:cf:e8:18:2c:34:
92:98:a9:99:27:a8:6a:0c:29:32:e9:60:e0:8e:8c:
5e:dd:fe:99:8c:28:78:45:3e:62:3e:37:6b:80:75:
7a:2d:b9:73:2d:5a:62:98:71:ac:3f:3d:70:f4:c9:
fa:82:6a:4b:d1:b1:06:79:f4:43:44:54:ac:7b:d7:
87:41:a2:40:72:28:22:2f:e9:17:2c:96:0d:29:91:
f7:f9:76:d5:99:af:c5:87:c9:bc:0e:90:93:c8:a6:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:BE:BB:C5:57:3F:DA:54:A0:28:B6:44:8C:38:49:E2:D3:6E:23
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d9:ad:bc:49:99:38:d1:ce:9d:7a:15:bf:54:9f:5c:59:ab:
3d:d6:d2:89:3a:6a:c7:2e:c8:38:e7:00:a2:8b:2e:65:ad:a3:
14:1a:8d:9f:a6:b3:a1:ed:af:16:47:ca:3d:19:dc:82:93:a2:
7a:a1:3e:f5:74:2b:25:e8:8c:df:36:c2:2b:7e:86:08:bc:96:
2f:c9:23:1c:6b:e6:79:e7:db:9d:d1:6d:80:0c:b8:5a:a7:1b:
14:24:6f:5c:57:75:1b:74:1a:09:fa:7b:a9:57:49:09:8f:04:
41:2b:0b:6f:59:09:1c:0f:05:1e:ed:09:b3:66:23:33:03:2b:
62:3e:fa:f8:a5:05:da:19:57:01:5d:c5:b2:f8:c7:f1:ce:cd:
da:a2:37:9a:c9:e7:fa:db:bc:97:a9:5e:9c:a3:b7:6e:1a:83:
c9:84:cf:45:18:10:08:2a:fe:15:56:e8:33:58:d4:e5:35:f0:
26:d2:e8:3e:54:5e:6c:f2:0d:c7:29:f7:04:6b:19:aa:c1:b6:
69:d0:16:c9:5e:01:bd:dc:1b:dd:e9:f8:b0:ac:7d:47:7f:d4:
e9:c1:79:59:e8:dc:f1:38:d6:15:8f:7d:c7:12:af:32:ef:32:
6c:1a:65:b6:ae:88:2a:ea:f3:0e:11:fd:2d:fe:65:8f:0d:1b:
bb:9d:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:26:06 2026 by rpki-client