Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: 4rqlY14jkqvrH+OxHt0JXsnFmFfnawLxIj0SkdZttRc=
Subject key identifier: FC:3A:9B:BD:08:3D:44:3A:AF:99:12:4C:33:A5:81:24:BF:23:AB:22
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019CAC4713832737C14E4E5D590FE291D0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 09A3
Signing time: Mon 02 Mar 2026 02:01:05 +0000
Manifest this update: Mon 02 Mar 2026 02:01:05 +0000
Manifest next update: Tue 03 Mar 2026 02:01:05 +0000
Files and hashes: 1: PSCjCrxrCeT-cWttc-XrOlJtQZw.roa (hash: 2swSqRspsOoUJA6D3XUUWVLXclXLULrNOWbdZ6ShDg0=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: epKvMADBNcJoR5gY6WlLM/GfLguCWTasAoSsPkOvUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:13:83:27:37:c1:4e:4e:5d:59:0f:e2:91:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Mar 2 02:01:05 2026 GMT
Not After : Mar 3 02:01:05 2026 GMT
Subject: CN=fc3a9bbd083d443aaf99124c33a58124bf23ab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:ed:85:cd:c1:d8:26:7a:95:d6:b9:4f:54:
00:3f:96:5d:38:23:37:bb:59:4f:91:70:7b:ce:92:
ab:2d:57:a3:bd:c3:c0:81:9b:bd:c4:55:f8:2b:70:
54:59:e5:57:22:3a:73:77:86:c6:03:b6:a0:21:93:
c5:39:ba:ce:d5:e3:9d:19:6a:b3:e4:4b:29:af:06:
28:ba:88:3c:09:70:78:c3:1a:27:7a:ba:46:2d:83:
fb:f4:7c:11:91:d7:03:bf:b9:60:be:9e:5b:5c:74:
2d:6c:d5:5e:39:18:bc:e7:81:5a:ef:97:7d:73:ba:
5f:50:39:39:3f:78:48:a3:6f:3e:5f:9b:3a:6c:e6:
93:d9:16:05:2e:6c:d0:4e:04:2b:df:fb:69:dc:9a:
04:41:a8:b8:5a:84:e8:63:9e:98:4f:02:0d:ed:54:
c0:6a:4e:0e:f1:fe:1a:85:0d:47:09:3a:81:08:ea:
f4:a2:d7:a3:68:cd:ee:3d:6a:37:20:90:2a:fa:22:
2f:e6:c9:a0:bb:53:0e:b2:84:23:6f:07:41:85:df:
ff:26:c1:b5:ad:3b:2c:48:30:de:98:1b:cf:36:a4:
5c:96:86:83:57:f3:8b:65:96:d1:f6:cb:e7:c8:7b:
ee:ec:7a:24:5b:c7:bb:35:1b:60:5a:16:9e:01:f3:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:9B:BD:08:3D:44:3A:AF:99:12:4C:33:A5:81:24:BF:23:AB:22
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:c7:a3:d4:82:d2:63:91:4a:f5:73:ae:d0:c0:f0:6b:cb:
95:9c:ab:44:7a:47:b3:98:7a:ad:e2:c2:f8:12:61:fd:47:88:
1b:f6:e4:bd:1e:4d:cd:72:00:db:ea:82:ac:e5:68:14:ce:66:
a1:c2:f9:c7:fe:88:71:18:dd:d7:fd:58:c1:a7:11:c8:51:9b:
06:65:dc:67:f6:f2:e8:1c:8c:66:0e:3e:16:09:0d:cb:e9:46:
b9:2f:d0:46:0d:e5:4a:31:b8:cc:8f:a0:30:0c:f9:f2:51:a2:
9d:84:1e:d6:f5:a9:64:c4:1b:22:eb:42:27:69:9a:14:7d:ae:
0c:92:7d:da:ab:82:60:4e:71:35:f3:f8:0b:d0:38:1f:c7:37:
21:74:6f:b5:d0:a2:90:01:7f:48:48:8c:b8:a1:5b:74:c0:fc:
df:2c:fe:95:65:cb:e3:c3:a0:c4:79:96:40:9c:c3:5e:23:3c:
17:07:28:ae:ff:fd:64:da:ec:2d:2f:8a:7e:d5:1b:a9:57:ef:
b3:e5:5e:1f:df:58:bc:41:11:9d:14:a0:57:c5:0b:53:0e:b3:
2b:59:48:d4:57:30:28:31:45:bb:94:c1:3d:64:3f:14:00:84:
8f:6a:62:1d:4c:4a:cc:a5:b2:06:11:3d:43:f9:af:5c:bb:79:
9d:11:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:32 2026 by rpki-client