Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: UbwI70Jw6dfGaq9v4HeBM7ADCecbaUPw6b/Hos/bW44=
Subject key identifier: 0F:38:8C:A1:A2:F2:B4:49:BE:E1:42:C1:CC:AB:C1:15:1E:A8:36:7E
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 019D98F47BCB2ADC520077E9A41893573135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: GCj4Bk1xQNTPsOGcPIvVKgT/B5uMnAG9wTHBibArhPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7b:cb:2a:dc:52:00:77:e9:a4:18:93:57:31:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=0f388ca1a2f2b449bee142c1ccabc1151ea8367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:df:62:81:fe:11:c7:e4:17:2f:5e:ac:c1:
a8:05:b0:ae:6f:5e:4a:3e:b2:e9:38:c1:0a:63:cd:
b0:6c:71:b2:e0:0a:9e:df:34:9c:b7:63:99:04:e2:
6d:f6:46:f2:fd:33:f6:16:46:36:bb:a9:5b:24:30:
7a:75:32:24:92:a0:b3:95:ad:05:78:5e:74:25:db:
6e:fb:aa:3d:f7:f5:86:8d:19:16:d4:67:05:b4:9c:
f2:3f:c8:15:45:2a:30:d0:c4:dd:57:c6:ee:ad:3c:
55:df:00:2e:4c:8e:97:1e:63:05:69:cb:4c:79:e1:
38:2e:d0:c4:4d:f2:ff:8f:5a:d2:4b:a8:4b:3e:0b:
34:9d:97:e8:d7:a7:be:b7:f0:a7:12:72:8b:16:44:
f4:4b:d8:53:04:01:5e:d4:af:48:54:39:cf:0d:ca:
a4:19:04:ff:ca:47:f0:44:bc:af:fe:c9:c6:3f:ef:
0b:a6:ff:ea:c5:34:ea:b9:61:81:8e:61:6d:04:82:
f9:51:ac:7a:e7:de:89:4c:d9:c6:a0:1a:d7:ac:5a:
32:75:12:94:4a:42:d4:d1:53:21:bf:4f:47:03:10:
50:55:f0:49:d2:f2:f3:21:2f:11:2b:03:99:41:e3:
1a:fd:07:30:1d:a4:ed:78:aa:ae:e7:17:b6:04:a2:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:8C:A1:A2:F2:B4:49:BE:E1:42:C1:CC:AB:C1:15:1E:A8:36:7E
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:6c:f4:a4:22:56:1c:6d:d8:bb:cc:5c:af:a3:f1:20:e4:
eb:8f:84:cb:17:4b:fd:46:ef:9b:73:b5:ba:8e:9b:b4:d7:fc:
fc:05:b2:03:22:d9:ca:c2:98:3e:b1:5f:2b:21:9b:19:b6:0e:
29:44:7b:d5:78:5c:9b:28:36:90:78:af:00:60:2a:3d:c8:c4:
44:c1:68:ea:23:41:b2:88:05:cc:5c:7a:23:14:dd:71:a8:5d:
05:05:ae:14:e6:56:0e:ee:67:82:d1:07:f0:3f:f9:aa:a4:d4:
b3:55:3a:ff:2d:03:8b:af:d7:5a:bd:28:ef:77:f2:2a:c9:2b:
c7:a4:8b:be:9e:71:2b:51:fa:92:b1:9e:2d:8a:cc:b1:ed:05:
3b:e2:75:71:62:35:38:a9:e3:fb:75:be:af:be:1d:bb:86:3e:
4b:1e:f4:02:0b:02:b1:03:8d:41:d7:66:99:2f:d5:03:bd:85:
fe:3a:d7:44:b8:c8:03:fa:62:60:7c:23:af:d5:e6:7a:2b:09:
74:92:7a:1e:a2:23:87:ce:d4:84:5c:57:52:5c:8f:e7:79:6d:
54:b2:76:ea:ae:3e:29:84:e2:c5:01:6e:f4:83:ff:77:64:c7:
3e:58:57:0a:65:96:42:1d:43:33:7e:9e:c1:8f:64:67:87:22:
e4:fc:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:48 2026 by rpki-client