Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: MMb9g7brH5VUXw+L0Oy1olouGpRf0JlNzd5kkxahdbU=
Subject key identifier: 84:A5:C3:3B:9D:1C:D8:17:F7:17:07:A3:6E:C1:73:C2:8C:69:04:16
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019D98BDB69011018BE1CA87A58D6A371B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 06CF
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: FyBdBnnCpKvwLLKFiribJRB37w4.roa (hash: 5DLx1xDcX045/FKz8VI0Qh7oVFbB+uzkeft+z/1uHvI=)
2: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: 0LnwC1ykoXF35onDFz0LtwOZfoAEMlMi1UNNJkydicQ=)
3: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
4: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b6:90:11:01:8b:e1:ca:87:a5:8d:6a:37:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=84a5c33b9d1cd817f71707a36ec173c28c690416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:0f:bd:a3:c3:08:c5:af:cb:0c:f6:00:cd:
d6:7b:6e:94:3a:f7:e3:51:52:2b:cc:3a:34:81:52:
20:7d:df:85:41:2e:cc:88:4f:f8:6a:cf:ed:58:e9:
2e:1b:6c:d9:9a:cd:7a:25:66:1c:48:a7:24:26:67:
a2:b8:aa:a8:ec:96:4b:97:c0:4a:1d:9d:37:a6:e7:
3c:29:e0:4b:77:cd:a0:c8:92:3c:ff:dd:21:ec:aa:
11:8f:59:71:44:93:da:cc:0d:ed:f8:57:d3:1e:ba:
82:ab:d1:73:4f:c7:df:ab:c2:bf:a0:ce:92:fc:ae:
e4:de:bb:b6:85:4e:7e:f4:94:40:ca:74:67:96:d0:
96:f3:d6:9f:79:38:15:c1:c8:43:fd:99:20:29:11:
f8:61:eb:fd:14:1e:9b:25:1b:05:de:ad:9e:16:1d:
e7:4f:34:d5:69:5c:5d:56:e7:b5:31:89:4b:85:d8:
4f:c0:6f:bf:00:cf:39:2d:44:b2:42:c3:12:25:12:
5c:51:5e:bd:b2:2a:30:a6:63:96:1e:8b:b3:9b:2d:
01:34:a4:c1:4f:36:89:6c:c5:c2:50:29:b5:30:93:
dd:58:35:5b:b3:fe:94:03:5e:8c:24:c5:c8:22:7e:
83:c6:da:5e:39:7b:4b:52:15:1b:5b:ec:ca:18:f7:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:C3:3B:9D:1C:D8:17:F7:17:07:A3:6E:C1:73:C2:8C:69:04:16
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:50:8e:f1:e3:f8:6b:78:59:ad:d7:88:ef:10:db:0a:b4:
a3:6a:91:7a:2d:d1:3e:9a:82:31:fd:43:c4:01:5b:14:1a:47:
66:6e:20:4f:34:35:00:9d:00:25:38:2e:5c:d5:08:ec:0d:ff:
ac:25:b6:e6:96:24:9b:e9:9e:b5:b0:48:e3:9c:e7:9d:40:d9:
7d:7d:03:b8:db:a2:ee:c1:11:ac:3b:c8:8a:ae:99:c2:e6:25:
25:8d:6c:42:b8:d2:5d:1a:0f:bb:cd:52:b0:7a:13:60:bc:cc:
ad:94:f6:ab:63:38:93:53:7b:db:b2:3e:a4:e5:c2:50:ba:3e:
8d:da:6f:c8:69:24:d9:03:f9:07:b8:d4:37:33:b1:2d:a8:25:
cd:fe:94:0c:13:26:93:ef:a0:2a:be:32:4a:62:fc:fd:d3:1d:
ce:50:ba:1b:09:a1:04:f7:03:b2:89:4b:56:f7:e1:42:47:04:
50:82:f0:9a:e4:ee:15:85:fd:51:83:e8:b1:3f:60:ad:21:97:
e2:b4:db:d3:49:ae:c5:70:45:9e:fc:47:b2:bb:21:9c:14:e0:
a9:a6:7b:11:3d:c0:0b:dc:26:52:95:62:01:52:0f:41:a8:7f:
fe:62:99:be:3f:f7:68:bd:7f:ac:dd:e4:da:b7:6f:bc:f3:4b:
3b:c5:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:00 2026 by rpki-client