Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 8nAEQGDkBF2wAuI9T4DwqhrNFQK26BZ53zvVXVPahLI=
Subject key identifier: 3D:47:B9:A9:2A:82:F2:C0:77:62:8E:73:14:66:AD:63:2D:00:E0:2D
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019CE2FDE0D55ED5522E08D120DA784D2FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0732
Signing time: Thu 12 Mar 2026 17:00:14 +0000
Manifest this update: Thu 12 Mar 2026 17:00:14 +0000
Manifest next update: Fri 13 Mar 2026 17:00:14 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: YSiIe3fAOEcv7xgooqW3PslLpEiYFWD6XIkjN9o8lE0=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fd:e0:d5:5e:d5:52:2e:08:d1:20:da:78:4d:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Mar 12 17:00:14 2026 GMT
Not After : Mar 13 17:00:14 2026 GMT
Subject: CN=3d47b9a92a82f2c077628e731466ad632d00e02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:df:9e:dc:28:0c:32:86:46:63:38:d9:d0:
04:a8:1f:6d:9c:74:b9:4b:87:6f:04:80:6d:e1:e2:
58:87:d4:0d:c6:46:8d:8e:6a:d3:7e:b7:c2:68:e3:
3a:52:03:d2:ee:ca:72:9d:93:ec:7c:e0:74:c3:bd:
d8:cf:69:62:9c:43:b1:70:5b:69:e7:35:91:2c:2a:
d9:64:fe:71:ec:39:c4:86:82:da:f7:fe:e4:2e:4c:
1e:4c:77:96:40:95:a2:1d:0b:20:9f:77:cf:e4:1b:
30:0c:db:85:79:dd:3e:b4:13:5e:2d:b0:00:03:81:
87:cd:95:c4:66:f1:fc:c7:94:74:a0:0f:01:5c:db:
e8:a1:e1:56:80:d4:67:bb:bf:49:84:f9:8c:11:ba:
e5:bf:ab:0b:5d:9e:71:14:96:0b:e9:fe:9f:90:05:
5f:42:3f:b0:7e:be:b5:77:7f:f8:41:01:0b:4b:c6:
4d:9e:b1:b8:e5:b5:5e:7a:10:31:1d:8d:cb:b1:f1:
4b:55:cb:26:79:e1:b5:60:30:1e:e3:b2:9f:08:bb:
64:46:e2:a3:86:c9:d2:a5:f5:e6:c3:ea:f1:1d:11:
f3:f1:c0:dd:50:5b:25:3b:93:7c:0d:da:92:f3:c1:
69:18:b7:2a:c3:31:e5:08:78:6c:8a:16:ca:2d:fe:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:B9:A9:2A:82:F2:C0:77:62:8E:73:14:66:AD:63:2D:00:E0:2D
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:e7:f4:ef:15:52:df:a6:dc:d7:a4:f2:f5:ee:4e:a9:6b:
66:95:de:46:33:27:d7:1e:fb:f7:8c:bc:60:c2:63:49:06:bb:
c8:b2:cd:51:81:90:2f:fe:db:4f:99:b5:b0:07:cc:76:65:1f:
fa:f3:83:f7:ed:27:7e:44:33:c3:83:61:ad:22:17:cb:cc:92:
3c:97:49:15:13:af:9b:c2:63:3a:9c:33:cc:58:76:ef:4f:f8:
2b:2e:0a:4c:04:56:ca:7e:6b:42:3a:d8:91:0d:2d:eb:ce:37:
cc:ac:3b:cf:26:1f:8d:4c:98:06:34:d1:36:a6:77:42:b9:f0:
7d:53:64:dc:68:41:97:26:1a:06:3e:44:23:d2:11:56:4a:7a:
ac:f2:3a:3f:4d:83:13:f3:6e:6d:47:21:a0:c4:4a:65:02:8a:
36:80:a6:f7:3e:15:8f:85:f3:72:2d:8b:fd:e3:96:b8:0d:6b:
a1:20:99:df:aa:73:94:f0:9c:a8:2a:7a:cd:38:e1:ee:91:50:
12:d5:a4:61:43:61:66:6e:35:8a:bd:1c:7a:69:94:2f:0b:e9:
43:b0:be:ad:5b:c2:d2:86:08:5f:3a:68:f0:39:f1:46:a7:8d:
4c:a4:31:46:52:ba:b5:1f:f9:33:13:53:15:98:24:af:42:42:
f3:a3:42:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/eDVXtVSLgjRINp4TS/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0
NTZhYjQwHhcNMjYwMzEyMTcwMDE0WhcNMjYwMzEzMTcwMDE0WjAzMTEwLwYDVQQD
EygzZDQ3YjlhOTJhODJmMmMwNzc2MjhlNzMxNDY2YWQ2MzJkMDBlMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PfntwoDDKGRmM42dAEqB9tnHS5
S4dvBIBt4eJYh9QNxkaNjmrTfrfCaOM6UgPS7spynZPsfOB0w73Yz2linEOxcFtp
5zWRLCrZZP5x7DnEhoLa9/7kLkweTHeWQJWiHQsgn3fP5BswDNuFed0+tBNeLbAA
A4GHzZXEZvH8x5R0oA8BXNvooeFWgNRnu79JhPmMEbrlv6sLXZ5xFJYL6f6fkAVf
Qj+wfr61d3/4QQELS8ZNnrG45bVeehAxHY3LsfFLVcsmeeG1YDAe47KfCLtkRuKj
hsnSpfXmw+rxHRHz8cDdUFslO5N8DdqS88FpGLcqwzHlCHhsihbKLf7KlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1HuakqgvLAd2KOcxRmrWMtAOAtMB8GA1UdIwQY
MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt
MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz
LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIvn9O8V
Ut+m3Nek8vXuTqlrZpXeRjMn1x7794y8YMJjSQa7yLLNUYGQL/7bT5m1sAfMdmUf
+vOD9+0nfkQzw4NhrSIXy8ySPJdJFROvm8JjOpwzzFh270/4Ky4KTARWyn5rQjrY
kQ0t6843zKw7zyYfjUyYBjTRNqZ3QrnwfVNk3GhBlyYaBj5EI9IRVkp6rPI6P02D
E/NubUchoMRKZQKKNoCm9z4Vj4Xzci2L/eOWuA1roSCZ36pzlPCcqCp6zTjh7pFQ
EtWkYUNhZm41ir0cemmULwvpQ7C+rVvC0oYIXzpo8DnxRqeNTKQxRlK6tR/5MxNT
FZgkr0JC86NCUw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 23:13:36 2026 by rpki-client