Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: 6LPWIcbhoDe+EXgglLtSTX6AiSaSXHYSNTvX33TCNak=
Subject key identifier: F3:E6:37:ED:47:81:F3:36:F9:EF:DA:AE:72:34:C1:F2:8B:6D:AD:BB
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 01A029FD25187604F4758D29C31B3E1E7225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 0272
Signing time: Sat 22 Aug 2026 15:00:50 +0000
Manifest this update: Sat 22 Aug 2026 15:00:50 +0000
Manifest next update: Sun 23 Aug 2026 15:00:50 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: 6FjR0ot0I9nH8c1GCFYBNo8E8jK3yC5vI8gwAQw6ays=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fd:25:18:76:04:f4:75:8d:29:c3:1b:3e:1e:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Aug 22 15:00:50 2026 GMT
Not After : Aug 23 15:00:50 2026 GMT
Subject: CN=f3e637ed4781f336f9efdaae7234c1f28b6dadbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:45:61:78:e3:ef:02:35:c5:61:9b:fa:ab:
d8:2f:b6:bb:da:dd:22:ec:78:72:b0:29:24:3d:4a:
0e:61:05:5d:5a:47:3c:7d:03:11:f5:7c:0e:08:00:
0b:a1:8c:d0:3c:e9:36:8f:1e:54:7d:3c:ce:32:5b:
53:e6:e3:71:31:f7:8a:53:c1:42:66:2e:22:d9:51:
b0:b3:1e:4a:4f:8b:27:4e:b5:37:a3:70:20:3d:5c:
73:a4:79:5b:e9:aa:b1:a3:c0:40:68:2e:fb:36:8b:
ee:27:dd:1a:25:d2:ee:6c:f0:71:7d:89:4d:5d:c1:
2d:37:c5:8a:35:29:f7:53:de:6b:10:91:91:38:07:
07:5c:55:88:68:da:3b:ca:38:47:e7:50:71:ed:ae:
02:9e:91:c4:b3:40:3b:6d:88:d2:70:56:00:a7:8b:
74:78:e4:74:2d:76:43:51:e6:73:bc:5f:22:69:8d:
2c:c7:96:4b:5e:2f:7c:33:47:6f:ff:00:5d:da:c0:
79:5b:84:89:de:57:01:5c:50:37:70:44:0f:90:ca:
8c:66:f4:22:4a:64:c5:6e:d3:4b:28:09:bd:e9:e3:
69:3e:ac:f1:1f:d6:70:ea:e9:21:a6:4d:25:41:63:
13:11:27:aa:ce:58:07:a2:20:b1:7a:e3:3e:fa:48:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:37:ED:47:81:F3:36:F9:EF:DA:AE:72:34:C1:F2:8B:6D:AD:BB
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:dc:5f:a4:61:12:5b:e8:bc:94:30:60:93:10:0f:b4:ad:
12:74:1a:ad:3c:b0:5c:94:5d:74:bb:d3:56:de:be:e8:95:9b:
42:b4:39:47:41:b7:de:9a:f3:cd:11:8f:93:4e:f7:bb:b4:dc:
1e:9d:c5:8e:aa:85:c6:86:5c:ed:4a:a0:60:e2:32:34:84:cd:
19:9c:58:62:d5:ef:e6:ea:c5:fc:98:b0:5d:23:8f:1a:69:08:
0b:59:65:e8:c2:16:65:52:da:14:af:24:26:93:24:ee:cb:4d:
83:a4:a0:05:bc:39:41:19:aa:08:85:21:85:4c:43:c7:31:e5:
d4:d6:fe:3c:94:d5:40:3c:49:e5:79:6a:81:c9:4e:9a:37:d2:
32:4a:30:b8:58:8a:8a:2f:d3:da:e3:dd:9a:bd:47:ec:56:2a:
d1:8a:df:16:7a:75:33:31:ce:7d:9a:02:07:f0:1a:a7:6c:e3:
02:79:86:3e:77:86:95:0b:ce:46:c5:4a:20:b8:55:68:bb:50:
6f:9b:9d:a1:77:6e:b3:8e:ea:be:e4:2b:e7:ae:f1:bd:dd:c3:
c3:c4:2e:de:90:37:d4:4c:e1:0c:14:23:c7:12:e1:f2:22:ad:
b1:60:ac:66:ec:24:4b:34:a9:a9:65:9f:c6:f5:97:e8:d4:b3:
2a:2a:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:55:36 2026 by rpki-client