Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: Gb5N7qIo0B1CTwDY41FrLBO9lRWiAar/TBwG49S9BUk=
Subject key identifier: C2:68:9D:02:BA:5D:F9:26:5A:F8:67:64:54:38:DA:F7:63:B5:07:64
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 01A120C0677F9BD1B0FD368B69B745038E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 0309
Signing time: Fri 09 Oct 2026 13:00:42 +0000
Manifest this update: Fri 09 Oct 2026 13:00:42 +0000
Manifest next update: Sat 10 Oct 2026 13:00:42 +0000
Files and hashes: 1: 7FxLncSDYVoZ6Iufw5pur3BUHiE.roa (hash: YgYsqBmeiNBHe4niuDgW9xPkD23Iui2p8MLylcQcAk4=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: 7WbsHJmFYHwg7JQgCvGyZzyjNFlNaPanbz1MZi31ZtM=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:67:7f:9b:d1:b0:fd:36:8b:69:b7:45:03:8e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Oct 9 13:00:42 2026 GMT
Not After : Oct 10 13:00:42 2026 GMT
Subject: CN=c2689d02ba5df9265af867645438daf763b50764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:ba:03:20:5e:79:72:52:31:60:5d:a9:50:
e7:81:a9:b8:e3:28:c8:22:41:c3:d1:24:c4:d9:4e:
cc:87:60:ae:85:a6:b7:ba:3b:8e:a9:ee:c8:bc:b5:
48:65:5a:35:53:e9:30:92:84:58:a7:ba:2a:0f:cb:
cc:ed:ba:2f:d0:c6:af:78:29:a8:b5:04:a4:5a:85:
6c:e1:ec:58:b7:9f:41:02:b9:99:3d:a3:18:c8:e8:
51:67:a6:3a:19:1b:c0:d1:31:56:d5:3f:62:71:99:
30:88:22:38:09:17:99:ea:dc:78:c2:f2:e7:22:87:
84:70:78:35:42:d5:fa:d6:2f:31:eb:fc:e1:f8:3c:
0d:59:50:8f:4b:94:b3:82:63:5c:7c:a1:f9:c0:72:
4c:1d:06:f3:b4:20:5a:ad:87:9e:f6:2d:79:93:60:
91:67:13:41:b3:c1:2d:6b:06:8e:28:68:d2:f4:07:
15:46:3a:e9:80:6f:2f:c6:17:7a:31:83:86:6e:1e:
77:c4:21:79:8a:2a:45:4b:b8:e0:aa:30:4e:8a:80:
ef:ad:3e:2f:a3:ef:6e:a0:13:c2:9e:3b:61:b4:e3:
65:e3:0a:12:c8:33:06:04:86:9f:cb:84:e4:ee:ae:
7b:d5:62:99:d9:81:fa:44:fa:22:38:09:95:c5:4c:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:68:9D:02:BA:5D:F9:26:5A:F8:67:64:54:38:DA:F7:63:B5:07:64
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:65:30:41:e2:96:3e:82:bd:58:a9:65:9f:d5:b3:6a:5b:84:
5c:1b:9c:d6:a4:0e:24:b8:d5:45:93:05:96:1c:70:d0:e6:d6:
36:fd:1e:15:fc:e0:9b:49:db:1f:e6:3c:98:b7:d9:c4:ff:c8:
6a:46:51:4f:c2:79:0f:26:aa:37:a2:a4:8f:4d:d2:d0:44:37:
3f:05:71:d4:b3:ab:34:40:67:fb:c2:44:36:26:97:58:11:5c:
28:75:94:0f:ba:c8:3e:f4:64:58:df:0c:63:91:39:ff:7c:ef:
48:ec:3f:58:7e:53:f6:71:a8:53:28:e8:59:cf:53:60:34:c8:
b1:06:0c:7a:4a:d3:50:9d:39:5e:2e:71:98:51:e5:4b:36:2d:
dd:cd:f3:fb:e0:8e:b3:dd:a5:04:10:2c:85:2a:9e:90:56:9a:
7c:70:c8:d8:20:47:d8:f0:a4:24:b4:78:fb:62:a5:0e:da:cb:
9f:b2:0b:23:54:73:bf:09:8d:89:b9:7c:93:fe:25:dd:33:07:
1c:92:f3:15:ac:9d:0b:41:39:06:33:22:bd:0a:f2:81:84:c4:
37:4b:ab:c0:b9:3b:e2:28:40:28:d0:5f:80:4b:cc:4a:37:23:
c1:ba:24:40:fb:26:70:5b:cc:39:31:7d:cb:40:f8:64:74:43:
e6:d8:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:39 2026 by rpki-client