Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
File: RJEWZsI21ozTG82FLhwbifzO8wA.mft (raw, json)
Hash identifier: Xy0mXAk+3CUtMxfuJKitmU26jnABANrZrCw9VJFNnCY=
Subject key identifier: EE:4C:42:0F:75:5D:EE:A0:B6:F8:32:E9:0C:BA:35:38:3A:A3:6E:B6
Authority key identifier: 44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
Certificate issuer: /CN=44911666c236d68cd31bcd852e1c1b89fccef300
Certificate serial: 01A155F80CE7FD5D29E3A1E549F35EA1C860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
Manifest number: B9
Signing time: Mon 19 Oct 2026 21:01:21 +0000
Manifest this update: Mon 19 Oct 2026 21:01:21 +0000
Manifest next update: Tue 20 Oct 2026 21:01:21 +0000
Files and hashes: 1: RJEWZsI21ozTG82FLhwbifzO8wA.crl (hash: ZBepd2vO166J/Zd8O21pelIhxFebtDcMIs//Rm1ou5E=)
2: gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa (hash: I05foFhPwtjC41vNTBYky0OTidLIWUCpRGSlsMhk3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f8:0c:e7:fd:5d:29:e3:a1:e5:49:f3:5e:a1:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44911666c236d68cd31bcd852e1c1b89fccef300
Validity
Not Before: Oct 19 21:01:21 2026 GMT
Not After : Oct 20 21:01:21 2026 GMT
Subject: CN=ee4c420f755deea0b6f832e90cba35383aa36eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:72:c6:55:9b:7d:e2:56:a7:57:b2:26:2b:
02:66:60:7f:86:15:e4:f9:56:37:8f:1a:67:39:89:
74:8f:83:7b:e4:67:f4:29:2c:40:14:f6:7d:0a:63:
6e:a9:52:6c:0e:dc:1b:09:6e:12:fe:28:1c:5c:a1:
53:e3:b3:c6:fd:d2:e8:65:c4:ca:73:8f:cb:49:50:
5a:7c:7f:71:b4:60:01:11:2e:e1:3d:16:e7:82:43:
a3:a3:39:fe:1d:85:66:38:a7:bf:72:b6:8d:8b:00:
1d:fe:cb:9a:c3:5e:00:7d:e5:b6:86:75:8e:f6:89:
ef:b8:28:b9:10:0d:2a:0c:ef:5c:8a:58:da:bd:82:
cd:02:9a:00:3d:cc:59:66:21:a8:85:c1:0f:3e:e3:
e2:78:14:77:09:dc:a4:5b:54:e0:61:31:c5:77:c0:
b9:25:c2:d7:13:c8:3f:ea:20:f6:0a:b9:70:c3:cf:
b7:3b:22:59:22:db:6d:2f:aa:6f:ce:14:d5:98:00:
96:eb:2f:b9:4d:27:50:25:fa:ec:c9:ec:35:8f:06:
5d:9c:9b:47:c0:47:a5:75:82:20:12:26:10:68:2b:
fd:c7:b5:52:69:81:84:16:05:15:66:11:3e:12:6f:
3e:28:0f:46:6a:a6:2a:ef:80:e6:45:2b:6b:fd:61:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:42:0F:75:5D:EE:A0:B6:F8:32:E9:0C:BA:35:38:3A:A3:6E:B6
X509v3 Authority Key Identifier:
keyid:44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4c:35:30:cb:cc:e7:f7:4a:de:22:62:07:ac:8d:ff:23:2f:
78:df:9d:27:b8:ad:6c:83:e1:12:58:95:40:48:a0:9a:32:11:
b4:c6:eb:9b:0f:a1:99:da:e8:62:22:b2:00:0f:49:de:2e:8d:
89:54:1f:46:41:93:09:d7:be:16:5d:14:5b:cc:7b:73:ff:0c:
61:1c:2c:ff:b3:3c:bd:cc:c5:37:59:b3:bf:02:2d:85:67:d6:
f0:04:eb:a6:c8:fa:41:20:fc:6d:a4:06:7b:60:21:94:fe:d6:
99:7a:21:09:73:cf:31:12:09:22:2b:a0:2a:be:2e:57:c4:82:
d3:c2:1e:d8:0b:3d:19:e7:31:28:9f:a4:07:d7:75:78:8b:d4:
83:c3:85:25:19:2f:26:1f:6d:ca:90:b2:50:76:60:0d:f1:4a:
bd:15:98:86:2b:5d:f9:d2:6c:ce:e1:60:89:ee:ff:e5:62:cf:
ee:98:00:d4:b1:6a:f2:7e:fc:77:df:71:dc:d0:b2:70:fb:56:
0e:be:d7:52:f3:c6:29:42:ec:de:f4:d6:db:63:19:0c:ab:b2:
c8:87:47:14:c7:3a:7b:c0:c1:c8:83:de:4c:ca:3c:d6:85:97:
da:a0:05:ce:03:43:88:fc:4d:d0:07:14:73:7a:a6:83:96:f8:
d4:6b:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:45 2026 by rpki-client