Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: gt+FbSCrnqNLFzCiQ0zV9hoZ1wB/AFrB4O3pPU4eXnM=
Subject key identifier: FA:CC:A4:F1:97:C1:68:99:EE:0F:25:1B:FF:76:76:A2:34:C7:B2:6B
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 019D999904E5BAC2B1CA099399D362859ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: gPVzYi9aVv78iBplD7DETOLL6e3Q9nu5dBJdE5Wgdvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:04:e5:ba:c2:b1:ca:09:93:99:d3:62:85:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=facca4f197c16899ee0f251bff7676a234c7b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:e7:ed:aa:71:b9:80:68:4c:b0:7c:82:32:
0e:fc:07:0a:89:dd:0e:49:31:03:d3:fe:b5:71:54:
6b:ff:3d:1f:2e:20:09:af:d3:6c:aa:10:8a:38:8d:
e3:fd:e6:2b:b2:1f:80:4a:3d:87:ea:fc:c9:2e:03:
79:7d:4c:6d:87:d3:25:21:9a:56:dd:87:3a:df:77:
ba:95:9e:7d:98:e7:7c:59:70:ad:bd:c6:bf:6a:c2:
af:17:53:7a:8b:ca:a5:19:45:bb:fa:12:9b:d5:df:
5a:a9:d2:1a:99:60:c5:0c:0f:01:d2:36:ec:06:ad:
fa:fa:61:02:3b:87:4d:16:2e:ad:39:5c:cc:12:47:
66:48:7b:60:1f:8c:54:53:d5:81:35:bf:6b:41:60:
52:3e:36:44:25:ea:3c:09:92:0f:05:7e:71:6d:ed:
1c:d8:5b:f2:f0:b4:dd:b7:f9:4a:c0:c5:6f:64:a1:
f6:08:d3:4d:94:ab:78:53:9e:2f:a3:85:0e:14:c2:
d8:25:be:c5:0a:47:6b:c6:91:d9:60:49:e9:ea:a8:
0b:64:d9:62:58:e1:e1:fc:db:bd:96:da:83:a5:85:
e8:f1:72:3d:73:0a:5e:1c:5a:5b:04:59:1e:c7:d9:
0d:a9:42:ab:56:5c:b5:bf:88:6a:1f:9e:5e:d6:a7:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:A4:F1:97:C1:68:99:EE:0F:25:1B:FF:76:76:A2:34:C7:B2:6B
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:38:51:10:ef:78:f0:64:36:71:1d:9f:de:e3:ec:19:71:a2:
7b:5d:41:fe:1e:f6:65:4f:2e:85:e6:fc:08:58:4b:de:e0:af:
e0:2e:41:1a:6a:8b:df:f0:69:3b:79:27:98:dd:f2:7a:44:ac:
fa:79:e6:35:46:7c:a4:f9:5c:4a:6f:5c:1c:12:78:f2:a5:9b:
1c:cc:27:e0:b3:85:b1:a2:0f:ea:37:1d:e5:02:0c:18:4f:97:
3a:96:6e:f5:e9:b9:a1:b4:16:d8:c1:f4:fd:f8:1c:0a:36:48:
c3:d5:1d:aa:29:5e:f2:7e:60:77:44:dd:ad:f7:15:ba:ea:06:
d1:93:6f:6b:b5:42:30:d4:a1:75:c6:e5:63:e0:4a:4e:9e:09:
f3:54:99:97:f6:8a:c5:e7:01:09:11:79:25:cc:ed:0c:b2:ab:
70:b3:18:0c:3c:a1:1e:4d:41:a4:d6:6a:00:9c:82:48:2d:02:
29:4a:0f:f2:0d:b5:ed:12:f8:3d:3e:0b:23:be:19:db:fe:e1:
75:cd:28:81:41:6f:12:2c:d3:03:5c:20:c6:e1:87:e2:79:bc:
66:bd:80:19:9e:ba:1f:b8:35:78:70:37:70:f6:b2:03:7b:51:
5c:37:cd:a9:54:87:56:5c:55:45:d5:de:12:25:d0:89:b5:b8:
c0:0c:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:58:59 2026 by rpki-client