Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
File: RjfshNu9TlwIo5IV8S54XLOsVpY.mft (raw, json)
Hash identifier: pExcGPX6Gk2Ce3B2AExBIQUYBbvnkcf0d0kNQFSzrMs=
Subject key identifier: A7:28:4C:87:34:34:57:A4:93:55:35:0D:35:0F:BD:C4:6B:17:9F:D2
Authority key identifier: 46:37:EC:84:DB:BD:4E:5C:08:A3:92:15:F1:2E:78:5C:B3:AC:56:96
Certificate issuer: /CN=4637ec84dbbd4e5c08a39215f12e785cb3ac5696
Certificate serial: 019D37896C41239BD7AA52CEAC39846B35CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
Manifest number: 46
Signing time: Sun 29 Mar 2026 03:00:46 +0000
Manifest this update: Sun 29 Mar 2026 03:00:46 +0000
Manifest next update: Mon 30 Mar 2026 03:00:46 +0000
Files and hashes: 1: RjfshNu9TlwIo5IV8S54XLOsVpY.crl (hash: CjJ8Vg9VhV1PybTgJ8XSRbtXnu9/ZvCRcnYUZGzokgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:6c:41:23:9b:d7:aa:52:ce:ac:39:84:6b:35:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4637ec84dbbd4e5c08a39215f12e785cb3ac5696
Validity
Not Before: Mar 29 03:00:46 2026 GMT
Not After : Mar 30 03:00:46 2026 GMT
Subject: CN=a7284c87343457a49355350d350fbdc46b179fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:79:8f:d6:03:79:7f:4f:79:b9:46:17:a1:9c:
84:dd:25:88:ae:a0:4d:cd:82:b3:6a:97:2f:f3:91:
4f:6d:e0:dd:81:a2:6f:f0:e9:34:1b:56:2a:88:1b:
60:df:2c:75:a7:fa:ad:ac:cd:7b:1f:82:40:fd:a6:
91:6a:eb:93:1f:08:82:4f:81:4a:44:7a:52:28:4e:
2d:6d:a8:8e:c0:2e:b2:02:c1:21:83:d6:0e:50:92:
34:ae:f1:a3:36:35:89:3c:be:39:c5:3d:e1:b2:6d:
9d:87:f6:63:ed:2a:47:cf:23:fc:79:e9:1e:49:d1:
32:80:91:2c:40:7d:35:fd:67:75:09:90:bf:42:b0:
43:b9:c8:a0:4b:66:98:3a:3d:37:12:d5:e4:47:21:
9b:0a:c1:4f:aa:d4:7c:c5:95:0c:67:03:67:f8:51:
f3:db:5b:d3:72:4e:e8:fe:b7:b1:dd:c2:f2:9b:67:
c7:83:a0:01:49:b5:dd:83:e7:e5:3c:94:ff:30:65:
bc:7b:72:9b:44:76:66:f1:d9:28:ba:97:f7:18:c3:
eb:d9:5d:66:41:74:90:76:9a:37:5c:24:dc:ab:f3:
19:ec:04:2a:8c:16:9e:24:95:48:30:4b:88:8e:da:
ed:2a:1e:c8:5d:52:b9:e5:85:e9:c6:7f:ba:4a:27:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:4C:87:34:34:57:A4:93:55:35:0D:35:0F:BD:C4:6B:17:9F:D2
X509v3 Authority Key Identifier:
keyid:46:37:EC:84:DB:BD:4E:5C:08:A3:92:15:F1:2E:78:5C:B3:AC:56:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjfshNu9TlwIo5IV8S54XLOsVpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6dbfe3-1256-4935-9755-e81d32d87e6f/1/RjfshNu9TlwIo5IV8S54XLOsVpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:de:36:54:ba:98:65:9a:03:e3:58:b4:f6:f1:17:10:06:
bb:4c:cf:3e:e4:bf:39:44:04:10:32:62:c2:cf:2b:c8:fe:ab:
15:fa:d2:52:ae:32:ec:54:42:cb:d7:e5:54:b7:73:07:36:c7:
0d:63:4c:06:76:7f:0a:d7:08:a1:a9:b1:f3:17:ab:0e:31:e4:
d2:a6:e7:ab:ab:2a:fe:9f:4d:5a:c7:1d:b2:bb:f0:a8:4d:9b:
75:77:13:bc:1f:ce:f6:24:35:91:e5:28:6e:24:b5:92:25:39:
b4:48:49:1a:8e:c3:26:50:cd:13:67:25:05:d4:5a:5a:ea:4d:
60:1e:d5:50:8b:0e:6d:ab:d2:8d:5e:7a:8c:70:21:0e:91:5a:
05:c5:e7:09:02:4e:c6:aa:ff:f4:c8:6f:a5:a0:ad:4e:dc:60:
d3:6d:c5:e9:71:7b:d4:71:e9:c9:bf:73:7c:83:6e:c3:69:0d:
de:5a:d7:e4:06:c1:73:f1:ec:1d:9b:bf:a8:10:f3:5d:1e:10:
34:ff:35:c1:13:4e:7d:52:72:5e:c1:7c:bd:15:51:ee:ad:94:
36:b6:4b:80:27:7d:06:6f:5f:42:6d:2a:33:b2:cd:a2:cc:f8:
26:4a:1f:5a:6c:f0:24:59:c9:c9:0e:ed:b0:38:85:91:f0:a7:
19:93:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:18 2026 by rpki-client