Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: 36zn7SJ2J4/Hl+EUFggWaEsW/fWH+Crju6H/9FSDj8o=
Subject key identifier: BE:5B:73:B5:03:7E:3E:11:7E:22:C1:F7:FD:3F:1D:DB:32:E6:70:35
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019D3A1CC650A8D30FD3007E7F9E61A661F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1129
Signing time: Sun 29 Mar 2026 15:00:57 +0000
Manifest this update: Sun 29 Mar 2026 15:00:57 +0000
Manifest next update: Mon 30 Mar 2026 15:00:57 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: wN11v4JN7mZtkEDVlacD0f9nRqYYOXffLH4DTAXL8sg=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c6:50:a8:d3:0f:d3:00:7e:7f:9e:61:a6:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Mar 29 15:00:57 2026 GMT
Not After : Mar 30 15:00:57 2026 GMT
Subject: CN=be5b73b5037e3e117e22c1f7fd3f1ddb32e67035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:26:ea:47:85:63:68:78:00:d0:89:3e:28:
83:82:b0:b1:bc:73:98:0d:d5:2a:84:79:53:6b:af:
af:dc:c8:77:72:fc:c8:2f:ee:6d:90:b2:b4:81:d5:
96:f6:e4:1e:9f:a3:69:c5:87:cc:73:ab:95:74:36:
90:6b:10:8a:e9:2d:0b:41:48:8a:41:ff:72:ae:62:
c5:b0:b6:84:41:83:90:09:2d:d5:da:e2:99:c1:0e:
8d:a4:b0:bc:fc:46:8a:72:05:fc:b4:57:ab:13:cf:
b0:08:28:e4:a8:8e:fb:26:54:b8:9e:13:9b:b3:ff:
91:59:7e:f5:75:1c:fd:67:c5:9d:4f:c9:45:fc:08:
b8:ed:f0:30:4b:eb:4f:1f:18:ea:eb:8a:84:6c:83:
d7:3b:f1:c5:1a:d6:d2:40:26:0d:88:96:a7:c8:15:
4e:81:1f:90:75:dd:68:4e:68:6d:4e:05:18:18:0b:
49:bd:06:d9:11:c2:e0:a4:81:0d:30:a3:33:f9:00:
98:99:0a:04:6b:22:70:68:32:d4:7a:f4:81:c2:dc:
a4:68:17:30:a4:5d:e4:a9:b7:e6:68:60:e2:2c:ac:
1f:04:1c:5d:b7:a0:b9:50:74:c1:7c:30:68:22:85:
d5:64:4d:f3:0f:6c:48:65:80:c7:14:96:f7:7c:74:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:73:B5:03:7E:3E:11:7E:22:C1:F7:FD:3F:1D:DB:32:E6:70:35
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:26:8f:fc:93:b5:54:0c:67:6c:24:15:0c:81:9a:a1:b7:f7:
37:9a:5b:bc:62:5c:f1:cf:68:74:8c:db:1b:d9:fd:f4:8a:66:
6a:c8:ac:21:b3:c6:18:6a:15:ec:fb:b9:85:fb:13:09:54:91:
1d:bc:60:7d:ae:6b:77:86:ce:b5:a9:b5:b1:da:50:79:ea:1c:
68:f3:8a:a5:ed:95:c5:e2:1e:1b:6e:ee:43:64:af:82:dd:28:
a1:b8:c6:b8:59:ff:98:60:e1:53:00:a5:59:91:b5:ab:c9:ab:
6a:fc:56:e6:c6:2b:9f:59:a8:65:b6:6f:8f:c4:90:34:36:17:
ee:ca:9f:9c:18:98:01:db:c8:f5:33:ea:b6:70:42:3c:7b:11:
60:c1:b0:2e:7a:64:ed:c2:fa:4b:9e:db:59:ea:98:a1:09:39:
b7:ca:2c:1b:5c:29:1e:08:58:4f:e1:e3:7d:1b:a4:60:f0:17:
a7:52:f4:ea:b8:79:2c:44:7b:e7:25:5a:6c:c2:f2:e3:30:4d:
71:6e:71:23:82:65:9d:fe:da:3f:71:82:c3:98:85:6e:ab:a5:
cd:05:33:f0:65:19:43:a9:ac:45:46:b7:dc:10:59:14:81:56:
eb:cf:e6:23:bc:34:d4:31:7b:24:52:5a:3c:c9:f8:9c:45:44:
0e:cf:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:35 2026 by rpki-client