Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: hv9FsDHdU+Nj/80+K8wgYjoMsrVeMUf8CTglWTXIrIM=
Subject key identifier: 64:47:22:2D:DE:6F:CD:37:73:EE:40:C8:45:74:51:63:0C:13:C3:DB
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 01A181505BAA608E60AC6CD0FFA47F8F7449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0997
Signing time: Wed 28 Oct 2026 07:01:29 +0000
Manifest this update: Wed 28 Oct 2026 07:01:29 +0000
Manifest next update: Thu 29 Oct 2026 07:01:29 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: B7+7TC/GLRhkYZN63oeDmhUCFpQsajwI+8qpqqUBJkY=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:5b:aa:60:8e:60:ac:6c:d0:ff:a4:7f:8f:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Oct 28 07:01:29 2026 GMT
Not After : Oct 29 07:01:29 2026 GMT
Subject: CN=6447222dde6fcd3773ee40c8457451630c13c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:32:7b:7d:69:b8:71:bf:9e:26:00:d9:c1:
04:91:03:02:fb:b4:ac:e9:1f:fb:3c:c5:5a:01:95:
d7:8d:30:14:14:1d:e2:8a:ca:de:da:fd:b9:34:bc:
3d:9c:33:70:07:fa:31:5f:28:b3:c9:18:66:5c:cc:
2d:52:63:53:c8:e5:62:cd:10:a0:3c:cc:5b:09:e5:
4e:a6:9e:94:3c:f4:64:10:54:d7:26:bc:7a:3d:ef:
6a:71:70:0b:b3:e5:83:f1:0e:29:4e:3c:33:53:ed:
b9:6b:a9:e2:36:d5:8e:0f:52:f8:25:73:a7:f5:a3:
bc:84:90:9b:38:cb:e3:81:e7:d4:6f:2a:74:35:16:
6a:85:8f:1b:1d:ea:de:1b:9c:8c:ff:b6:3f:5a:1a:
79:17:87:8d:b6:51:06:6d:5e:b5:e5:43:9f:92:75:
de:4b:b2:da:b5:e1:87:9d:2e:70:21:0d:e9:87:10:
5a:fd:08:3d:a5:a9:e9:85:0d:01:8d:57:ea:66:17:
3a:6f:d6:57:4c:14:70:d8:26:58:43:56:ef:3e:e2:
37:a5:23:8c:aa:b9:31:31:71:ff:2e:1b:6e:f5:38:
48:1f:d6:48:ca:fb:e1:79:bf:1c:03:b7:ae:56:10:
f7:9c:59:55:10:81:2a:30:43:9a:f1:84:89:59:b5:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:22:2D:DE:6F:CD:37:73:EE:40:C8:45:74:51:63:0C:13:C3:DB
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:84:81:79:10:51:1b:c5:fd:77:9f:63:e0:91:83:40:23:56:
30:2e:4c:64:8d:16:c9:d9:cc:60:ae:fd:e9:1a:0d:70:53:5d:
e8:45:76:60:48:d3:7b:40:cd:79:1c:92:49:7c:c4:18:e1:b8:
72:52:cd:3e:64:d9:cd:0d:12:e9:8e:de:b1:66:c1:d3:67:76:
a7:6c:a4:0f:fa:03:73:30:6d:07:ad:b1:59:fd:1b:d7:a2:8d:
0d:da:f5:2e:b5:cd:cb:e2:e5:f5:0b:8c:2b:ee:0c:a4:05:26:
81:da:c9:45:f8:27:af:8b:04:82:d9:33:3b:f0:1d:cd:90:e0:
82:7a:1a:6f:73:f2:53:c0:b6:4b:8e:9e:5d:ed:b9:83:97:5b:
d0:41:ac:b4:4b:b0:78:a3:2c:c3:6a:20:20:f5:d2:fe:40:5f:
58:d7:88:58:c4:c5:51:da:2a:11:69:a5:d2:fd:7a:9a:00:b9:
cb:f2:1d:23:c0:49:b5:4e:31:ad:0d:09:75:47:87:54:c2:4a:
f7:95:ef:c4:a5:4e:3b:d0:e8:e9:16:e7:9b:d3:92:4b:a9:0a:
07:a6:a9:3b:e5:02:24:4e:4a:bc:02:3d:43:cf:56:5d:c5:51:
f8:de:d7:4f:10:f5:cf:73:03:06:66:5c:00:28:ae:e7:67:b7:
25:2f:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:19:50 2026 by rpki-client