Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: Vnr5kgsdatrWpZM0fRulxKCzsnQGGRmjoCuO95ZwYg8=
Subject key identifier: 04:66:2F:A1:FB:2A:7F:40:D0:77:01:6D:D8:AC:06:51:0E:8E:E0:D7
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019D9A073379C26A49E3BC0BCD49044521D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0CC8
Signing time: Fri 17 Apr 2026 06:00:56 +0000
Manifest this update: Fri 17 Apr 2026 06:00:56 +0000
Manifest next update: Sat 18 Apr 2026 06:00:56 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: 72tBV4NC2tha+raQgrBPfmagQCXOMClbzEaVM579sMs=)
2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:33:79:c2:6a:49:e3:bc:0b:cd:49:04:45:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Apr 17 06:00:56 2026 GMT
Not After : Apr 18 06:00:56 2026 GMT
Subject: CN=04662fa1fb2a7f40d077016dd8ac06510e8ee0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:bc:68:25:ef:8e:22:c5:ac:ca:d0:dc:93:
3d:a3:f8:a3:64:26:a8:2f:1b:b5:2b:16:4d:6b:55:
71:b9:b6:c7:03:4f:20:99:1c:58:78:82:01:93:18:
54:99:6e:e0:4e:be:cc:ae:08:e3:f0:16:6f:3a:21:
d1:7e:95:eb:42:62:44:e1:7d:50:27:07:ed:12:a2:
95:4d:0e:06:09:34:32:ed:82:46:16:bb:08:b0:51:
10:b8:fd:70:c5:d6:39:de:e3:39:65:50:2c:66:fe:
ef:70:65:79:8c:c9:a5:31:28:b9:d0:d2:89:cd:e8:
4f:84:76:14:30:04:df:b9:f1:27:c1:0b:91:80:cb:
70:af:f4:d8:71:bb:7f:e4:78:35:0d:c5:8c:bf:c1:
fe:41:6f:e9:66:77:6c:36:5f:0a:fc:11:9d:68:ec:
99:f9:71:a3:24:50:65:1e:5d:64:5a:71:95:7a:96:
8a:09:0e:17:f4:d8:2c:83:0a:2d:00:9a:51:92:8b:
69:a3:4a:c4:28:ef:0e:49:ff:4e:71:a4:b2:7b:fa:
5c:16:1b:29:fc:60:47:cc:a9:2b:d2:60:f1:64:91:
08:f9:aa:cd:b8:88:d2:70:ff:1a:71:51:22:a9:d0:
8d:0a:17:f3:09:19:92:f2:4e:ce:ed:31:07:c1:79:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:2F:A1:FB:2A:7F:40:D0:77:01:6D:D8:AC:06:51:0E:8E:E0:D7
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ca:12:20:67:43:d8:7c:46:ed:6d:fb:3e:74:cb:8f:c5:61:
16:f9:3b:40:07:a8:9e:84:7f:59:0d:6d:48:79:5f:bb:f4:be:
63:18:82:52:53:44:f7:d0:5a:11:ae:2d:68:0f:bb:61:4d:48:
ba:e6:87:3f:4b:a6:18:87:f3:6b:67:d1:00:a0:5b:1e:52:4a:
b5:f6:a5:b5:6a:27:54:7b:66:18:dd:30:e4:cc:98:69:c9:ad:
d3:0c:b8:0f:83:82:60:0a:4e:59:e7:ec:da:9e:b9:0d:6a:82:
67:84:e2:ab:06:81:5a:20:ad:58:87:2b:83:25:9f:1d:0a:77:
7d:ea:c1:69:5c:3a:d4:6a:bb:4e:47:2b:e0:3a:96:d5:a0:78:
77:2a:97:44:20:53:db:93:3a:e7:5a:ff:cb:6e:da:b4:f9:59:
e6:ca:05:a5:2e:01:57:59:9c:80:78:cf:83:f3:18:1c:fa:c9:
4d:fd:04:9c:ad:ef:d1:3e:d8:8f:13:cf:3e:21:ba:2d:d5:43:
b1:34:b2:61:18:36:9c:00:30:34:42:45:f8:19:9d:05:d6:33:
c4:80:e7:bb:5f:e8:7f:6a:48:3e:ae:39:85:54:70:44:16:1a:
0d:7f:09:73:55:ee:0b:86:b5:f3:3f:30:9e:13:5f:a7:0a:46:
54:47:01:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:00 2026 by rpki-client