Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: kdHj/it1dryW1DyDJj1PA+CE5y1rfHQPRBXKj0MJP10=
Subject key identifier: A7:FE:63:36:35:92:44:E4:A7:27:01:79:BE:F2:C3:10:28:1D:53:4C
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019DA453E6FCFEE390F51A04B325EDDD4A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0DB9
Signing time: Sun 19 Apr 2026 06:00:55 +0000
Manifest this update: Sun 19 Apr 2026 06:00:55 +0000
Manifest next update: Mon 20 Apr 2026 06:00:55 +0000
Files and hashes: 1: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (hash: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: bCAv62cIqcq2zZ3UUiu/Wiofsv8QY8K18BBL0f+JHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e6:fc:fe:e3:90:f5:1a:04:b3:25:ed:dd:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Apr 19 06:00:55 2026 GMT
Not After : Apr 20 06:00:55 2026 GMT
Subject: CN=a7fe6336359244e4a7270179bef2c310281d534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:50:bf:25:39:03:f5:59:86:85:6f:67:f5:
b0:eb:76:24:8d:9b:2c:c6:bd:b1:dc:17:43:2e:97:
e6:b6:09:03:d4:b5:7f:0e:85:58:79:20:e9:1f:dd:
73:5c:95:4d:ee:69:73:40:b5:51:73:9e:01:5a:b2:
67:a5:2f:39:2d:66:a9:b3:53:52:ba:33:8e:89:88:
f4:9c:e5:97:d7:74:66:d1:8d:ce:e1:c8:51:89:25:
97:e7:39:c3:77:bd:74:a8:64:f3:90:3e:f4:39:de:
e6:3a:f7:e1:4b:22:78:e9:93:77:72:55:cc:a6:6f:
2a:a2:77:f4:e8:68:75:e8:60:2c:34:57:4a:39:dc:
dc:da:8d:ef:89:00:df:7a:c3:15:9c:e1:73:be:f2:
20:55:31:ae:b5:47:16:75:6f:30:ad:38:b2:66:77:
2a:02:21:45:d7:47:c7:92:63:a4:98:66:29:1d:75:
f7:30:38:24:b2:0c:bc:18:23:c4:47:9e:4b:63:9e:
41:a3:a1:24:db:0a:84:e1:08:07:81:66:25:09:13:
f8:b9:64:38:99:71:5b:c2:00:6f:24:65:e3:d6:16:
b1:ff:30:e5:72:4e:f9:c7:6e:94:06:9b:01:45:81:
bf:41:eb:74:9b:24:3c:a4:db:a0:34:95:6b:93:7b:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:63:36:35:92:44:E4:A7:27:01:79:BE:F2:C3:10:28:1D:53:4C
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:c3:65:d0:b0:56:9a:eb:ee:49:73:35:35:ee:cc:84:c1:
ea:c8:28:31:5f:ba:fb:b5:4a:66:0c:76:5a:6a:e6:83:71:ae:
d2:8d:6b:32:c5:f1:8e:8e:70:7b:a7:45:1e:fa:b9:13:12:01:
99:89:c8:ee:fc:ff:e6:29:0b:ca:e7:07:49:64:c5:7b:e6:4c:
14:c6:12:8a:ec:70:9f:3b:4c:28:01:53:df:5e:ce:e0:ed:9a:
5f:f7:02:18:4c:13:d0:b2:cf:9a:fd:ee:4d:c4:0d:d6:f8:a5:
60:71:76:7f:5d:ac:e9:c2:70:3a:e5:0d:f5:17:f9:37:8b:59:
f6:bb:8f:13:00:7e:60:1f:77:72:6a:2a:71:10:3c:7a:43:78:
b2:2a:62:af:23:7e:e1:48:d0:0d:7f:7e:45:3b:b6:cd:c3:cb:
a6:82:5a:b8:15:51:9e:f8:82:25:80:25:ad:8c:5c:b6:8e:0e:
95:70:bd:4e:2c:a7:72:dd:07:a8:ef:cd:ca:5e:aa:63:7a:b1:
ae:06:f3:16:99:8c:dd:40:97:f1:e3:56:86:4e:7b:70:13:fb:
e8:63:61:96:df:16:97:c5:c9:dd:82:8d:bb:b7:8a:58:52:7a:
16:b6:f1:0f:50:3c:5b:9e:0b:d9:c8:35:8a:3d:43:3f:36:cf:
24:9f:a4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU+b8/uOQ9RoEsyXt3UpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlM2FkYjU4YzEwOGI4YmIxM2U0M2MxNWVlYTNjNzg5OWI2
NGEzYWEwHhcNMjYwNDE5MDYwMDU1WhcNMjYwNDIwMDYwMDU1WjAzMTEwLwYDVQQD
EyhhN2ZlNjMzNjM1OTI0NGU0YTcyNzAxNzliZWYyYzMxMDI4MWQ1MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQxQvyU5A/VZhoVvZ/Ww63YkjZss
xr2x3BdDLpfmtgkD1LV/DoVYeSDpH91zXJVN7mlzQLVRc54BWrJnpS85LWaps1NS
ujOOiYj0nOWX13Rm0Y3O4chRiSWX5znDd710qGTzkD70Od7mOvfhSyJ46ZN3clXM
pm8qonf06Gh16GAsNFdKOdzc2o3viQDfesMVnOFzvvIgVTGutUcWdW8wrTiyZncq
AiFF10fHkmOkmGYpHXX3MDgksgy8GCPER55LY55Bo6Ek2wqE4QgHgWYlCRP4uWQ4
mXFbwgBvJGXj1hax/zDlck75x26UBpsBRYG/Qet0myQ8pNugNJVrk3t6DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf+YzY1kkTkpycBeb7ywxAoHVNMMB8GA1UdIwQY
MBaAFK4621jBCLi7E+Q8Fe6jx4mbZKOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMt
OGZiYjUxMjhhMmM5LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kODFhYTItOGE1NS00MGRiLTk2ZGMtOGZiYjUxMjhhMmM5
LzEvcmpyYldNRUl1THNUNUR3VjdxUEhpWnRrbzZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1vDZdCw
Vprr7klzNTXuzITB6sgoMV+6+7VKZgx2Wmrmg3Gu0o1rMsXxjo5we6dFHvq5ExIB
mYnI7vz/5ikLyucHSWTFe+ZMFMYSiuxwnztMKAFT317O4O2aX/cCGEwT0LLPmv3u
TcQN1vilYHF2f12s6cJwOuUN9Rf5N4tZ9ruPEwB+YB93cmoqcRA8ekN4sipiryN+
4UjQDX9+RTu2zcPLpoJauBVRnviCJYAlrYxcto4OlXC9Tiynct0HqO/Nyl6qY3qx
rgbzFpmM3UCX8eNWhk57cBP76GNhlt8Wl8XJ3YKNu7eKWFJ6FrbxD1A8W54L2cg1
ij1DPzbPJJ+kDA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:08 2026 by rpki-client