Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: KgQ/+KPZYPGZ8JlSZ8AoWzr+WV2sLCtCztSA/2Ayneg=
Subject key identifier: 23:8F:14:25:7E:F2:CB:05:D7:43:D6:16:AF:95:E8:87:88:B7:AA:7F
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019D97E1661FBE01E9207665CF98EBDECCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 0A1D
Signing time: Thu 16 Apr 2026 20:00:24 +0000
Manifest this update: Thu 16 Apr 2026 20:00:24 +0000
Manifest next update: Fri 17 Apr 2026 20:00:24 +0000
Files and hashes: 1: PSCjCrxrCeT-cWttc-XrOlJtQZw.roa (hash: 2swSqRspsOoUJA6D3XUUWVLXclXLULrNOWbdZ6ShDg0=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: SPD4jCjzFk5E3O/2Gp0TF7ipAWHvDvzK2hruH1aASw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:66:1f:be:01:e9:20:76:65:cf:98:eb:de:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Apr 16 20:00:24 2026 GMT
Not After : Apr 17 20:00:24 2026 GMT
Subject: CN=238f14257ef2cb05d743d616af95e88788b7aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:0e:01:ea:dd:49:a9:a5:34:fa:34:9c:92:
49:e1:c6:87:b5:93:ee:7c:87:27:3a:b8:d4:f6:da:
07:12:ae:9f:93:bf:87:a7:b7:ff:d4:16:33:1d:1d:
da:9e:39:c6:26:fe:8e:92:9c:4f:b3:be:68:62:36:
66:9e:84:ac:1d:df:4f:23:85:f3:87:04:c1:13:6e:
c7:0f:27:a5:dd:d2:ed:04:ea:31:3d:c2:a5:4f:31:
b5:b5:ad:fa:6b:89:bc:71:fb:91:6a:0d:2f:10:8e:
d8:75:7a:a7:5a:8b:90:3e:9c:8e:17:5c:1a:9f:dd:
21:cf:9e:7e:2b:4d:63:17:c1:f5:b3:8b:3b:90:04:
9e:ae:f4:1f:a7:d6:d5:5d:99:91:93:a0:b9:a9:f4:
cb:3a:7d:fc:42:49:40:9e:1c:e0:ff:31:95:1d:5f:
0c:47:e4:ed:61:1a:0e:46:61:b3:39:83:20:79:ba:
26:38:f0:5b:ed:c2:84:0a:3d:a0:5a:a9:49:67:4e:
b0:28:09:81:c7:2f:a8:cf:f7:e1:29:3d:19:81:39:
e8:6f:3b:5c:f6:b9:1f:46:23:e9:cf:d2:fe:df:fd:
0f:51:f6:2b:fd:d3:d5:88:aa:4d:dc:a5:8f:0a:a6:
93:5d:d5:1a:9f:a3:49:86:f8:6b:dc:90:0a:06:e6:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8F:14:25:7E:F2:CB:05:D7:43:D6:16:AF:95:E8:87:88:B7:AA:7F
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bc:97:64:41:f8:c4:b6:0e:7b:be:02:20:f5:a4:ea:3a:ec:
2a:a3:f4:d4:25:be:5a:2b:25:c2:42:af:93:5d:59:5f:d2:de:
1b:f1:0d:dc:07:b8:10:9a:9e:1c:6d:a3:3b:8b:3c:dd:82:49:
1a:39:d9:52:5c:72:8e:14:96:97:b9:dc:6f:fd:9d:1b:31:11:
81:09:c8:bb:2c:7d:74:95:fa:01:63:b8:20:9d:0a:57:35:7f:
e0:8b:0a:87:3f:f5:c7:77:0e:a5:21:95:77:fd:c5:d0:7a:76:
b3:78:ac:0c:93:a4:e5:17:75:74:67:14:ba:f9:98:f2:f0:5c:
9b:ab:25:96:58:83:8d:86:06:5d:64:7a:89:91:76:73:2f:94:
bd:49:af:df:55:a6:fb:ed:12:8d:a6:0d:33:61:f7:f8:ca:ce:
fd:06:96:00:2c:9d:84:e3:e7:98:1c:f2:a5:f1:95:43:c2:57:
be:f8:ed:76:81:31:7c:12:f1:fc:2b:d5:3b:73:f5:2a:b7:07:
f7:7d:55:f5:9d:d5:e6:59:1c:f6:f5:04:64:d3:c1:71:72:bd:
87:98:60:68:84:91:38:03:f9:47:3c:49:5d:07:1a:7b:8f:ce:
27:fb:ee:28:5b:4a:f6:8f:13:7f:cb:68:c4:00:98:ad:d9:b0:
74:e4:77:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:17 2026 by rpki-client