Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: AZkkFVWpIoT7LfdB18DUPa+D4HzfW4MdgA04ofHwBEw=
Subject key identifier: BF:7F:5D:3D:DF:8B:96:0D:08:02:53:BE:87:49:C3:49:8B:4A:D4:AA
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019CAB3442231E98231CBEE9B2DAB33999FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0654
Signing time: Sun 01 Mar 2026 21:00:54 +0000
Manifest this update: Sun 01 Mar 2026 21:00:54 +0000
Manifest next update: Mon 02 Mar 2026 21:00:54 +0000
Files and hashes: 1: FyBdBnnCpKvwLLKFiribJRB37w4.roa (hash: 5DLx1xDcX045/FKz8VI0Qh7oVFbB+uzkeft+z/1uHvI=)
2: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: brBtF/+xh4L3fneUwlqFtViUBDaiPEDWXMzVfbV8kEg=)
3: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
4: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:42:23:1e:98:23:1c:be:e9:b2:da:b3:39:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Mar 1 21:00:54 2026 GMT
Not After : Mar 2 21:00:54 2026 GMT
Subject: CN=bf7f5d3ddf8b960d080253be8749c3498b4ad4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:6b:6b:fe:69:d5:71:43:ca:27:8f:5f:4a:
53:08:a9:2f:62:63:9f:ff:ba:01:e6:cd:41:6a:bc:
94:0b:88:89:3d:46:0b:15:ca:ad:72:4d:ff:a2:28:
e9:6b:88:3c:31:c7:5c:24:b6:f3:92:87:a2:3a:59:
83:94:48:e7:cd:28:f7:67:33:08:82:63:da:4a:b9:
41:cd:2e:02:e7:35:bb:09:15:1d:d8:15:4b:c7:6c:
6a:0a:1a:6b:2f:03:04:b7:63:1a:74:d6:b2:58:8b:
38:13:e9:59:c5:67:e8:a0:a5:5e:3d:53:24:4e:c3:
de:19:7b:d8:14:68:39:a3:71:53:e7:aa:eb:f4:3c:
67:eb:1c:81:f3:72:b8:66:e8:ae:f0:54:fb:2f:af:
fd:e8:ec:34:64:f7:40:5e:20:d5:54:ca:01:db:d6:
82:62:d3:d9:85:7b:63:e6:d2:9c:74:0f:dd:9e:6c:
cf:25:6c:c7:78:46:50:66:0d:ec:52:98:b5:b2:3c:
e3:bb:5d:b3:0c:f1:d0:df:a0:3d:10:81:cd:ac:5d:
c2:24:c0:3e:b9:d4:a0:7a:06:65:7a:d0:63:d6:f9:
a0:f1:50:74:e5:5d:27:00:6a:f4:e6:c4:10:51:0d:
49:78:cb:c2:08:61:ec:04:56:a4:8d:24:d6:82:d4:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:5D:3D:DF:8B:96:0D:08:02:53:BE:87:49:C3:49:8B:4A:D4:AA
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:1f:87:6a:4f:89:2f:66:59:e5:0a:94:cd:91:7e:84:a4:
4b:17:f6:67:41:5d:84:7a:2e:fd:72:51:c1:fb:88:4d:93:66:
e7:c9:a6:9a:90:33:1e:a6:d1:31:6a:38:8c:2d:b0:14:16:ea:
00:32:45:f9:93:e1:76:fd:08:3b:5f:67:2c:8f:2d:8d:5f:15:
bb:1f:49:e4:a9:e9:b9:f1:00:ed:94:47:f0:94:f2:a5:a7:c4:
c8:af:62:70:4b:78:46:53:d0:45:11:e2:6c:5d:28:24:bb:c7:
0c:ee:32:23:8f:4e:0d:b7:a9:98:a5:5c:ed:e8:67:de:11:71:
5b:2d:80:e5:cb:9f:e2:25:25:c5:e2:5d:5b:11:72:61:da:91:
3a:ec:6d:1e:39:23:f9:b6:03:b3:1a:d7:5c:75:45:bd:ca:3e:
8a:c6:8d:82:44:f3:e3:67:9d:8e:bf:03:9e:28:1c:b0:72:b4:
48:f3:5b:02:e8:4f:c3:d1:18:f8:96:70:ed:74:d7:5b:98:73:
a6:33:d1:33:09:36:2f:7a:26:94:94:d8:7d:c3:0f:34:23:8e:
92:ca:4e:06:79:0e:28:7f:93:30:70:a9:95:8c:14:66:e6:99:
94:e0:f6:e1:a3:84:27:e0:fa:2c:19:24:e9:07:51:a9:bd:d3:
58:95:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:03 2026 by rpki-client