Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: t/WaQpTLmEuEpph/mHY68k8szPJk24o+fWfbEtk/cPQ=
Subject key identifier: C9:98:27:8B:92:C2:92:14:86:A2:55:47:34:C2:E9:9E:14:B9:AE:FD
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019DCCAAC2614D290AE454CEDEE19CFB6997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 07AB
Signing time: Mon 27 Apr 2026 02:00:36 +0000
Manifest this update: Mon 27 Apr 2026 02:00:36 +0000
Manifest next update: Tue 28 Apr 2026 02:00:36 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: +6OJcMu4Wmu3dxyg68qbp8muoEZQemyPuSL1EwFecq4=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:c2:61:4d:29:0a:e4:54:ce:de:e1:9c:fb:69:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Apr 27 02:00:36 2026 GMT
Not After : Apr 28 02:00:36 2026 GMT
Subject: CN=c998278b92c2921486a2554734c2e99e14b9aefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:7c:89:ad:96:74:21:ef:12:34:4e:b3:45:
cc:77:a3:95:f5:30:b0:d6:1c:65:eb:bb:e0:10:e5:
2d:bf:1c:7d:e2:cb:82:b5:8a:5c:a2:8e:b4:17:0d:
0a:15:8a:95:80:7d:60:71:8a:f8:56:d9:6e:8f:35:
bf:15:b7:7a:5f:80:76:e6:e7:6f:c6:e5:af:f9:ac:
df:55:83:f6:e7:79:a8:13:27:5f:18:6a:4a:a4:d6:
29:28:71:b5:65:ba:97:6e:7c:65:74:55:1d:93:cc:
d7:b4:8d:a7:ce:f7:db:f3:52:02:79:24:f7:dd:ff:
29:18:42:17:09:ff:47:d9:0f:e3:1a:4c:78:76:3a:
b3:14:6e:e8:e1:db:66:e8:1a:c2:36:17:af:a4:3d:
fd:03:32:d8:15:7e:d2:44:ba:01:cd:cb:cb:27:dd:
4c:4e:7f:a4:b1:45:ae:38:c1:ce:88:9d:24:17:6d:
d1:d9:03:85:f6:f1:97:62:da:10:69:c6:b4:f7:18:
ba:69:78:2c:4b:7a:74:f6:5f:92:3c:fa:56:cb:fa:
8b:6c:42:20:48:ce:ec:68:ba:f3:c1:55:a1:e6:08:
63:46:83:bc:93:15:d5:a9:28:b5:c6:b6:9a:e9:fe:
8c:ec:6f:43:4b:f6:0b:e8:0a:9e:b0:e3:b4:bd:f7:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:27:8B:92:C2:92:14:86:A2:55:47:34:C2:E9:9E:14:B9:AE:FD
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a6:8b:70:72:18:ce:ac:f1:d9:1d:62:65:04:0d:9d:31:3d:
d2:a2:9d:a2:eb:dc:92:59:86:42:6b:f6:26:9a:c9:ff:c9:4f:
a3:f4:28:0c:b4:04:29:1d:06:13:e0:d2:be:ec:1f:e6:e4:0f:
e5:3f:1b:34:5e:7b:42:f4:d2:2b:f0:a0:6e:7c:b3:e7:fb:e8:
44:da:27:18:9f:bf:5b:fe:8d:a2:05:09:2e:14:0f:30:ec:b1:
c1:be:53:26:da:fa:b0:4d:5e:86:a7:98:64:f4:a5:1d:97:06:
4e:86:7e:82:4b:89:17:71:e1:cd:84:8e:ee:5a:f9:b8:79:be:
f2:1b:10:05:0d:21:69:01:ad:ce:91:06:63:c2:bc:da:7e:3d:
b8:16:0e:a2:63:f1:4b:ea:54:86:6a:a6:e6:aa:ea:14:50:73:
47:d2:d0:3b:73:6a:ab:8c:f7:d4:bb:d4:c6:9c:cd:c7:dd:9c:
81:5f:f3:a7:e4:f8:3a:50:c9:c9:1a:fe:12:d2:d5:a8:1b:4f:
9c:55:8c:62:33:c5:7f:4c:eb:b1:01:98:f5:d6:fd:e9:9e:e9:
e4:d0:e4:af:69:0d:33:3e:ae:8b:2d:47:9f:97:af:3f:50:ef:
57:26:42:fe:cf:b1:d9:ca:f7:4a:b0:5a:b5:f3:66:e9:b0:ab:
5e:a3:4e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:22:43 2026 by rpki-client