Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: JcC4IX4ibFYjA/uYhPIyj/4mmZd6p/mi40G++Y5nr/U=
Subject key identifier: C5:CA:50:1C:50:63:AE:80:96:43:34:7D:9F:E6:A5:34:65:64:E0:04
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019FA93E8103979AC1077CBE0E9B52A0AEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 07E1
Signing time: Tue 28 Jul 2026 15:01:13 +0000
Manifest this update: Tue 28 Jul 2026 15:01:13 +0000
Manifest next update: Wed 29 Jul 2026 15:01:13 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: vuSoN+XquzMnWPEcFTZfkv52SDNsWykPBnPKOOhWGWk=)
2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:81:03:97:9a:c1:07:7c:be:0e:9b:52:a0:ae:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jul 28 15:01:13 2026 GMT
Not After : Jul 29 15:01:13 2026 GMT
Subject: CN=c5ca501c5063ae809643347d9fe6a5346564e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:a0:ee:1f:9c:ba:77:2d:67:c0:66:19:a0:
33:91:e7:0b:87:ad:79:94:7c:65:de:2c:bc:d9:8a:
3f:ad:c9:a0:34:0b:80:95:54:39:19:58:8f:0a:ff:
a5:31:9b:37:24:93:0b:d2:f5:11:a8:4b:27:79:65:
ab:01:2c:0b:44:89:6a:85:e3:32:86:b0:3f:f6:1b:
6f:27:0c:1f:9f:7e:a5:53:0b:3e:7a:bc:a2:9b:1c:
ba:fd:97:e5:21:09:15:b9:a4:a0:fc:6f:22:68:51:
db:34:27:0f:89:28:08:15:3e:03:b6:ff:4c:a1:dd:
be:0b:6c:d3:80:77:e9:74:23:37:9d:3a:ba:91:82:
31:3a:a6:3b:3b:43:8b:62:10:ac:69:9d:d1:d5:65:
0d:4b:57:b8:e8:93:c7:a9:8a:72:38:c7:dc:98:1e:
5b:21:eb:19:9b:ac:05:12:60:33:e6:b9:0d:c1:c0:
c0:00:d9:9f:a4:99:36:30:1c:70:7f:5b:f6:fa:f0:
5f:7d:e0:fc:1d:27:8c:97:76:62:ef:23:18:bf:1c:
f0:86:a6:12:48:3b:2d:93:cf:b1:e0:ff:e8:a2:4f:
8d:40:06:55:6b:21:8c:92:db:fd:63:55:87:44:29:
f5:14:f1:1a:f7:12:42:da:2a:6a:52:d8:5f:3f:67:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:50:1C:50:63:AE:80:96:43:34:7D:9F:E6:A5:34:65:64:E0:04
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:b4:8e:11:a7:6c:f9:6a:cf:85:bb:d0:cd:14:08:64:79:
b6:58:60:3f:95:6e:4c:36:24:af:f1:8c:84:e3:49:e4:3e:27:
69:fc:01:b8:9c:4b:17:0e:90:29:07:f2:17:04:c8:6a:86:06:
69:a0:df:c6:a5:58:1d:f9:9c:06:2e:7d:5c:a0:03:b2:b4:48:
24:53:0b:88:0f:1d:4b:a6:d7:ba:48:b9:6b:a8:c2:87:c9:78:
66:86:83:2d:0b:a1:80:e3:e5:1a:92:60:61:41:6b:95:61:a8:
41:52:31:7b:cc:d8:6e:e7:96:ca:bf:ba:43:b9:da:83:6f:e7:
26:c2:99:72:11:6b:a2:43:5f:61:e4:b8:83:bb:77:79:fb:ed:
93:4a:0e:70:ee:7c:b6:06:f2:12:72:a5:36:9e:75:b0:38:f0:
35:88:fe:c0:55:26:e9:df:a3:78:ee:49:68:8a:37:62:27:6a:
a1:5d:94:5f:dd:cc:5e:d1:5e:51:32:68:f8:9d:5f:b7:ce:e0:
d5:8e:41:b7:50:17:28:87:c7:07:23:31:11:5d:10:17:20:7d:
1d:a6:7e:f7:cf:0d:5a:92:4c:72:32:6b:cd:dc:51:f5:5d:53:
43:4c:c5:85:87:5a:85:ca:ce:d1:25:c5:60:cb:f9:35:42:e1:
53:bf:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:35 2026 by rpki-client