Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: y0Thq8SYn/nGZhBfqPGhAAbiSXVSNIz6lUFhL8U09sc=
Subject key identifier: CD:67:40:9B:02:8E:E8:CA:D8:D7:D9:76:A8:56:F7:17:3C:F3:F5:8A
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019F190CB10D72CB04E7A91202C929E42328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1221
Signing time: Tue 30 Jun 2026 15:01:29 +0000
Manifest this update: Tue 30 Jun 2026 15:01:29 +0000
Manifest next update: Wed 01 Jul 2026 15:01:29 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: 32zpSaNgFDrA9Fb/1dmBSPCj5jJNa9mU1/EIHO6M/24=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:b1:0d:72:cb:04:e7:a9:12:02:c9:29:e4:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Jun 30 15:01:29 2026 GMT
Not After : Jul 1 15:01:29 2026 GMT
Subject: CN=cd67409b028ee8cad8d7d976a856f7173cf3f58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:01:02:8e:6b:0d:1a:c1:84:90:2e:9b:db:
ac:04:11:d8:fb:6a:84:06:68:4d:df:8b:6d:da:23:
ad:76:6c:b2:57:0b:97:42:08:10:33:5a:74:78:02:
e5:22:99:f0:39:24:6f:9f:6c:9f:d6:cb:32:8a:6e:
16:de:2f:f3:9e:59:ca:7c:95:76:fb:78:e2:61:64:
11:32:1c:36:b4:2e:2d:80:56:7e:e8:d2:fd:c8:b1:
10:b4:58:c3:a3:c5:88:29:93:1e:e0:7d:fb:38:e6:
23:ca:0c:79:b7:f0:4e:e5:68:78:56:eb:25:9e:6a:
7d:93:d1:70:a5:73:d9:cf:af:86:73:7c:1d:b6:b0:
3c:12:56:27:e7:83:49:98:d8:60:9f:61:02:dc:31:
02:52:9c:fc:0f:aa:0b:09:b4:e6:d9:17:c8:12:f9:
16:bb:4d:5a:7b:bf:79:3d:16:49:01:90:d5:d0:5b:
69:49:57:36:ef:84:30:05:09:6c:84:89:0f:ce:3c:
87:50:db:69:23:95:0a:e2:53:a6:a0:a7:4e:cc:4a:
89:a4:8d:1d:57:9d:4b:5a:9a:c7:00:59:db:a7:78:
c9:8c:73:2a:35:07:e3:ae:c9:35:ab:5d:84:fb:cb:
02:52:2a:50:f2:89:9d:b1:04:39:41:bb:08:a0:56:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:40:9B:02:8E:E8:CA:D8:D7:D9:76:A8:56:F7:17:3C:F3:F5:8A
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1a:22:6c:c0:08:8c:3a:58:28:84:e9:db:06:8b:e9:53:90:
ce:c7:98:53:77:ad:51:77:bc:45:9c:29:90:5c:e2:9a:03:12:
ed:81:89:e5:5c:60:43:32:39:fe:8e:a3:07:e9:77:b7:6b:a5:
1d:3c:0b:c5:b0:97:88:a0:6d:09:95:c7:a2:d4:be:72:06:1c:
23:fc:e3:67:61:b6:0d:43:37:b7:36:8f:66:55:76:65:40:ed:
74:6c:1f:44:60:74:55:9a:aa:3b:c5:3b:81:19:44:fc:f1:30:
a3:e5:fb:d0:46:59:c6:f0:e0:e3:97:14:3e:c4:a6:7e:57:25:
c9:12:ab:cd:cb:81:89:06:d2:51:f1:1d:35:69:d6:52:36:3d:
9c:16:55:43:5e:d8:7e:16:5f:6a:7b:5c:29:66:77:95:9f:7f:
82:0f:b4:8e:09:3b:76:db:34:1b:b9:94:98:0e:75:11:6a:2a:
34:6e:7f:bf:81:cd:34:07:34:36:8a:c9:9d:ad:87:c7:cf:e3:
9c:70:2a:ed:48:66:72:32:ef:ab:de:3e:5d:49:6d:4a:e9:6c:
8d:bd:c3:7d:44:da:40:57:df:e0:43:c7:aa:64:bc:a9:82:99:
6f:88:dc:91:76:a8:5b:2c:f6:a8:57:3a:31:0a:8e:08:a1:e9:
4a:48:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:09:20 2026 by rpki-client