Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: p/XkgyGhMcrT36c7MFYMXX8RWlzrj8ItziRKgJaG7Mg=
Subject key identifier: BB:6A:1A:09:53:C9:16:8E:00:C5:A9:02:4D:24:52:B3:F5:35:83:3C
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 019CAFECB892BD01910F0C8F3BCDDEB46E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 19:00:52 +0000
Manifest this update: Mon 02 Mar 2026 19:00:52 +0000
Manifest next update: Tue 03 Mar 2026 19:00:52 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: nxJ8t4RePcGgg6+rYJxbYM1LVHUgFtmzGW3PwSeRkJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:b8:92:bd:01:91:0f:0c:8f:3b:cd:de:b4:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Mar 2 19:00:52 2026 GMT
Not After : Mar 3 19:00:52 2026 GMT
Subject: CN=bb6a1a0953c9168e00c5a9024d2452b3f535833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:c9:f0:ae:3d:e7:b5:4e:03:a7:d6:cf:fe:
c5:1e:f6:9c:a5:8c:19:98:05:fc:d6:5b:b2:78:2c:
5e:27:22:3b:56:0d:fd:52:f9:30:2c:0c:17:82:08:
63:3a:20:4f:26:f9:61:ed:ee:d9:ff:ae:15:74:c5:
4c:5e:e6:9c:4f:f4:24:e9:44:e5:01:99:35:55:85:
5b:b5:2f:28:5c:f9:de:a8:7e:d4:4e:c3:d5:57:72:
2b:d9:e7:5c:28:63:13:c2:4f:a8:c3:c0:95:2d:bc:
d5:aa:b0:87:43:3f:42:3e:23:8e:cb:02:43:da:ca:
d5:d4:fb:6c:a2:12:08:a0:bb:61:eb:ef:93:c0:a1:
ef:d3:e5:9a:f6:b0:a6:36:ea:29:38:93:03:de:46:
28:ce:74:a3:ce:37:27:26:09:f5:db:51:75:41:ea:
1c:fa:64:85:dc:f3:80:c1:a1:3a:f7:fa:8b:fe:d3:
2c:0a:1a:f8:07:23:ef:99:7c:dc:0d:69:75:77:fa:
cf:cf:7d:bb:ef:b4:f9:28:fd:b7:73:d4:9c:42:ae:
23:bf:58:4d:81:bd:a4:88:05:63:3e:0a:39:f9:d3:
fb:b8:e0:3f:c3:66:7e:55:c1:5f:ed:ab:99:30:66:
ae:27:7c:81:5b:14:d6:19:fc:5c:6c:72:14:f2:3a:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:1A:09:53:C9:16:8E:00:C5:A9:02:4D:24:52:B3:F5:35:83:3C
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:bb:3e:a5:5e:e4:d5:f2:86:b3:45:28:94:c7:a8:93:74:
5e:f5:a5:ad:0e:06:bb:c1:d5:e0:69:9b:43:ef:3e:a2:5c:50:
c4:41:7e:06:61:ec:1d:cc:0a:51:d8:09:6b:74:ad:66:47:3b:
12:b1:0b:01:36:97:b2:e9:b3:48:2e:72:58:35:a9:b9:2c:c6:
75:3b:99:97:a9:c4:e7:3e:f3:e9:62:db:d9:de:5d:a9:1f:c6:
e7:43:78:48:fa:98:3c:e3:f5:63:1a:c7:fe:53:4e:80:d8:9c:
a1:ee:ce:3d:4d:be:92:ce:57:7d:e3:85:b9:e5:00:20:e0:27:
dc:2b:0f:f5:56:9e:b0:11:2a:94:e2:02:68:d8:ed:c4:06:ab:
b8:26:57:df:d9:73:91:ea:52:1a:33:08:1e:b8:f0:69:21:97:
89:7a:79:db:81:70:b5:e7:74:60:fd:3d:38:70:6f:c1:b9:0e:
59:a7:6a:4c:da:91:cb:9b:f5:04:79:57:e9:82:8b:3b:15:13:
1c:4f:19:89:45:89:a0:af:af:e5:a3:c8:88:92:e4:5a:6f:6c:
29:5b:92:f6:00:62:45:cb:f1:3f:dc:a3:1d:22:94:f3:87:76:
19:fb:ec:de:ff:c9:99:d0:85:d2:76:cc:f6:b0:77:9a:0f:b4:
e8:d1:e6:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7LiSvQGRDwyPO83etG5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzhjMzlmMWUyMTRjN2VjZGYyZjBlYzk1Nzg0NzAxZjJk
MTI4OGYwHhcNMjYwMzAyMTkwMDUyWhcNMjYwMzAzMTkwMDUyWjAzMTEwLwYDVQQD
EyhiYjZhMWEwOTUzYzkxNjhlMDBjNWE5MDI0ZDI0NTJiM2Y1MzU4MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0rJ8K4957VOA6fWz/7FHvacpYwZ
mAX81luyeCxeJyI7Vg39UvkwLAwXgghjOiBPJvlh7e7Z/64VdMVMXuacT/Qk6UTl
AZk1VYVbtS8oXPneqH7UTsPVV3Ir2edcKGMTwk+ow8CVLbzVqrCHQz9CPiOOywJD
2srV1PtsohIIoLth6++TwKHv0+Wa9rCmNuopOJMD3kYoznSjzjcnJgn121F1Qeoc
+mSF3POAwaE69/qL/tMsChr4ByPvmXzcDWl1d/rPz32777T5KP23c9ScQq4jv1hN
gb2kiAVjPgo5+dP7uOA/w2Z+VcFf7auZMGauJ3yBWxTWGfxcbHIU8jqG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtqGglTyRaOAMWpAk0kUrP1NYM8MB8GA1UdIwQY
MBaAFK44w58eIUx+zfLw7JV4RwHy0SiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjIt
MTAxYmFiMGRmMmRmLzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjItMTAxYmFiMGRmMmRm
LzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnG7PqVe
5NXyhrNFKJTHqJN0XvWlrQ4Gu8HV4GmbQ+8+olxQxEF+BmHsHcwKUdgJa3StZkc7
ErELATaXsumzSC5yWDWpuSzGdTuZl6nE5z7z6WLb2d5dqR/G50N4SPqYPOP1YxrH
/lNOgNicoe7OPU2+ks5XfeOFueUAIOAn3CsP9VaesBEqlOICaNjtxAaruCZX39lz
kepSGjMIHrjwaSGXiXp524Fwted0YP09OHBvwbkOWadqTNqRy5v1BHlX6YKLOxUT
HE8ZiUWJoK+v5aPIiJLkWm9sKVuS9gBiRcvxP9yjHSKU84d2Gfvs3v/JmdCF0nbM
9rB3mg+06NHmuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:14 2026 by rpki-client