Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: TnM56m8SpdgP9UHiBIcApibRztxb+MdzOWKwy/29SV0=
Subject key identifier: 53:F2:2C:A3:A4:B8:FE:0A:C7:B8:68:0D:3B:D4:CE:3E:C1:8C:D4:DC
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019CAC7E6343AA284894E4237846AD7EC149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0C4D
Signing time: Mon 02 Mar 2026 03:01:29 +0000
Manifest this update: Mon 02 Mar 2026 03:01:29 +0000
Manifest next update: Tue 03 Mar 2026 03:01:29 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: nVRsCNLgSdx8djsIn/GiaQ0Yy4+Bddc5L59MfILMa9E=)
2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:63:43:aa:28:48:94:e4:23:78:46:ad:7e:c1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Mar 2 03:01:29 2026 GMT
Not After : Mar 3 03:01:29 2026 GMT
Subject: CN=53f22ca3a4b8fe0ac7b8680d3bd4ce3ec18cd4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:6f:4e:06:c0:b0:15:3b:6e:9d:a5:5d:26:
3c:9e:12:72:8a:d2:66:17:23:7f:96:8e:c9:e0:68:
e7:d4:14:8f:ca:a8:aa:28:cb:79:99:de:7e:65:72:
21:75:a9:57:98:bb:ca:7b:43:73:2e:11:fa:d4:23:
1f:8d:71:74:b7:2e:42:7c:60:32:65:79:e2:6e:b6:
9e:26:f2:c7:13:e8:62:93:29:51:c2:a1:01:03:8b:
a8:97:87:91:70:97:c4:45:ca:f4:36:04:64:04:9e:
b4:f4:fe:b4:6e:85:32:fd:70:14:5d:e9:d3:8b:0c:
79:66:7a:cd:c6:b6:23:0b:c4:0f:75:5a:15:bc:24:
5b:8d:c0:77:bc:3d:15:bd:c9:b1:89:d3:c9:8c:24:
02:15:f7:b1:69:46:76:1b:44:93:81:1e:47:96:53:
4d:3a:23:a6:73:a3:23:d0:51:cc:8a:9e:7f:5b:1a:
6b:29:03:21:31:ae:d1:66:11:65:d8:59:ab:71:c7:
1a:0d:a9:07:0c:fd:ad:f3:bd:c6:64:2f:6e:c8:72:
96:eb:f3:a5:93:b2:c6:69:91:d7:f5:7d:0e:ad:59:
d5:74:fc:35:07:a2:81:96:b5:5a:f3:fc:52:20:0b:
aa:45:6c:dc:39:ca:03:a6:9a:1a:cc:d5:20:3d:50:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:2C:A3:A4:B8:FE:0A:C7:B8:68:0D:3B:D4:CE:3E:C1:8C:D4:DC
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:94:f1:83:d5:19:50:41:fb:e3:32:de:ea:33:be:d3:f5:
b6:1a:bc:67:59:b1:19:2c:0c:6b:80:38:95:4a:62:1d:34:5e:
50:89:a3:3e:17:85:dd:51:1d:13:25:ea:7b:79:d2:69:71:f7:
fd:ea:dc:2b:07:49:e3:d4:59:58:ab:9d:9b:63:a6:c6:ec:3d:
6b:b8:56:c2:a8:e4:0e:81:ae:80:32:b7:93:ab:b2:58:f2:8e:
11:03:06:60:2c:bb:f3:45:0a:fb:e0:36:98:0c:58:cc:0c:8f:
c1:78:ef:4b:e9:5d:9b:49:ac:8e:ca:ac:a0:85:14:7e:be:ce:
26:dd:b2:7d:8e:1d:cc:56:04:ec:54:91:79:34:30:01:65:b4:
2d:20:59:a6:a9:cb:17:87:fa:54:46:64:39:da:a8:01:eb:d7:
29:7e:40:c8:f2:e5:4e:47:5d:df:51:30:b2:ec:1e:cc:54:d0:
07:1c:b5:92:d6:d7:f7:d2:4e:37:9f:8c:3c:22:f0:bd:b0:ef:
23:b8:58:2b:03:53:59:12:db:5f:cf:97:56:97:d5:b3:32:02:
4c:82:ab:3d:e4:65:85:85:0f:eb:00:69:c3:9b:aa:f4:ae:17:
b6:33:66:19:80:c0:00:7a:aa:2c:85:d2:f3:20:e8:5f:f4:6c:
17:b8:e2:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfmNDqihIlOQjeEatfsFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz
ODZlOGIwHhcNMjYwMzAyMDMwMTI5WhcNMjYwMzAzMDMwMTI5WjAzMTEwLwYDVQQD
Eyg1M2YyMmNhM2E0YjhmZTBhYzdiODY4MGQzYmQ0Y2UzZWMxOGNkNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvtvTgbAsBU7bp2lXSY8nhJyitJm
FyN/lo7J4Gjn1BSPyqiqKMt5md5+ZXIhdalXmLvKe0NzLhH61CMfjXF0ty5CfGAy
ZXnibraeJvLHE+hikylRwqEBA4uol4eRcJfERcr0NgRkBJ609P60boUy/XAUXenT
iwx5ZnrNxrYjC8QPdVoVvCRbjcB3vD0VvcmxidPJjCQCFfexaUZ2G0STgR5HllNN
OiOmc6Mj0FHMip5/WxprKQMhMa7RZhFl2FmrcccaDakHDP2t873GZC9uyHKW6/Ol
k7LGaZHX9X0OrVnVdPw1B6KBlrVa8/xSIAuqRWzcOcoDppoazNUgPVD4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPyLKOkuP4Kx7hoDTvUzj7BjNTcMB8GA1UdIwQY
MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt
YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2
LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbyU8YPV
GVBB++My3uozvtP1thq8Z1mxGSwMa4A4lUpiHTReUImjPheF3VEdEyXqe3nSaXH3
/ercKwdJ49RZWKudm2Omxuw9a7hWwqjkDoGugDK3k6uyWPKOEQMGYCy780UK++A2
mAxYzAyPwXjvS+ldm0msjsqsoIUUfr7OJt2yfY4dzFYE7FSReTQwAWW0LSBZpqnL
F4f6VEZkOdqoAevXKX5AyPLlTkdd31EwsuwezFTQBxy1ktbX99JON5+MPCLwvbDv
I7hYKwNTWRLbX8+XVpfVszICTIKrPeRlhYUP6wBpw5uq9K4XtjNmGYDAAHqqLIXS
8yDoX/RsF7ji8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:21 2026 by rpki-client