Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: QxK3Njrl8dr4H3Mbk+gyjUI0SMqSGl/ISXfue6NYHpg=
Subject key identifier: EA:9E:1D:CC:E6:3E:07:23:81:E9:23:4A:5D:F6:99:C7:85:79:E8:5C
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019CAD22464183FA339A431552C088CDE1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0D39
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (hash: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: J4LvUtIPBgd/PeqkKXWI7hlYVgkdREOLAoCZoHmiTuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:46:41:83:fa:33:9a:43:15:52:c0:88:cd:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=ea9e1dcce63e072381e9234a5df699c78579e85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:3e:9d:92:d5:db:22:13:d3:77:24:c0:d3:
00:72:6b:62:f2:d8:47:3f:d4:fe:94:e1:d1:54:2d:
39:59:0a:8a:31:98:d9:cc:9d:63:05:52:19:c4:93:
70:c5:65:41:54:99:d9:67:1f:c3:b7:d1:c0:d4:b2:
ca:0e:28:a0:cd:da:51:18:eb:c6:20:cd:b9:7d:f9:
e1:4f:b9:93:b0:53:54:10:ab:f0:a8:85:21:ce:f2:
44:b4:3f:08:c2:c9:99:21:71:4b:ed:2d:1d:fb:f2:
3a:d9:02:a1:01:6b:28:0d:63:d8:ac:38:ef:5b:6b:
41:0f:1a:72:d3:91:d4:8c:a6:63:9c:a8:73:d7:c0:
8f:bb:50:cd:87:26:d9:cd:6a:f2:d1:a7:6f:67:e9:
80:dc:63:e6:9e:cc:c8:1a:2c:83:c9:36:1b:12:03:
a5:f0:dd:96:09:3d:81:d5:70:bc:d2:4e:50:be:c3:
79:74:f3:64:b2:67:87:9b:46:22:79:c2:8e:c0:5a:
a8:61:1a:fd:86:81:c2:f2:40:9e:e7:d1:53:ea:ea:
4b:aa:71:96:0e:2f:51:51:51:ae:79:38:65:3c:50:
bf:07:cc:38:99:e9:b9:4e:12:a5:5c:f6:3a:15:a5:
8d:9c:f2:7f:8c:0d:57:8d:e4:3c:fc:42:8c:cc:a9:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9E:1D:CC:E6:3E:07:23:81:E9:23:4A:5D:F6:99:C7:85:79:E8:5C
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:54:b7:c7:70:08:f1:ba:a7:25:8c:81:49:14:24:b9:3b:9e:
40:18:d0:e1:10:75:95:16:69:bb:7a:1f:dc:b5:5b:ff:43:1c:
b0:d6:9e:52:b5:ed:cd:a2:82:18:53:40:bb:f2:14:38:d6:36:
81:26:b9:d4:51:c5:ee:dc:75:f2:ec:11:f7:c4:72:c8:54:9e:
6f:56:5b:b8:e6:0e:96:4b:ae:51:a0:97:a0:45:20:9d:ef:06:
0a:9c:13:1f:93:10:ec:2b:fd:0f:b8:a1:03:d3:08:97:94:d1:
85:af:41:4f:0c:78:bf:f0:b3:77:f3:54:f3:08:78:57:7e:93:
50:33:bf:98:dd:cd:11:d7:8c:dd:5e:79:41:ea:e8:4d:4c:48:
16:e9:78:cb:b8:1c:3c:f8:70:2d:50:33:52:0e:dd:c0:24:99:
d0:ea:bd:8e:6a:21:79:0f:4f:17:ca:b9:4e:52:aa:e2:3a:03:
02:1f:a0:e8:3b:9e:83:41:f5:03:44:92:ca:b4:1e:7f:a2:d3:
8f:2f:26:f6:41:9f:79:a3:c8:e6:5b:9c:56:39:fb:06:85:e4:
38:73:a4:a7:23:bb:ea:74:fc:a7:47:91:3e:96:fc:37:df:fe:
f9:ee:ee:c9:b4:04:bd:7c:46:9d:a0:9c:5d:2d:4c:82:2d:f4:
76:79:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:56 2026 by rpki-client