Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 6gr7vpyjOhPTcsDoi2U1Pr/VtULjWOwjmx8zWgH1A5w=
Subject key identifier: 90:28:46:28:D8:EF:7A:AA:C9:40:54:57:34:3C:44:E6:F6:7D:27:97
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019FA071E6DC3CD31122C0D0EB445BFD28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 089E
Signing time: Sun 26 Jul 2026 22:00:46 +0000
Manifest this update: Sun 26 Jul 2026 22:00:46 +0000
Manifest next update: Mon 27 Jul 2026 22:00:46 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: 9oBDYTE9tAiXJTSRK3OU7ZBt0iRvmz7WLZTd9z4rqCo=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:e6:dc:3c:d3:11:22:c0:d0:eb:44:5b:fd:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jul 26 22:00:46 2026 GMT
Not After : Jul 27 22:00:46 2026 GMT
Subject: CN=90284628d8ef7aaac9405457343c44e6f67d2797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:c4:b7:da:e7:9e:66:1d:6d:2b:8e:1a:15:
47:93:61:ef:fd:21:2f:77:b4:26:2e:54:a5:9d:f2:
ed:9f:0c:c0:37:40:b0:32:04:83:29:b3:d3:8e:a3:
ee:19:53:b3:9f:ed:13:6b:9d:bb:08:1c:3b:0c:92:
b8:0c:d1:9c:5f:cc:0d:50:b7:de:ad:a0:d5:46:b7:
ae:ec:30:df:97:ae:e3:a9:f7:83:e6:91:08:22:2e:
2e:8a:70:c5:12:e6:ef:e8:90:68:53:7f:f6:9a:c5:
a4:72:58:9d:e9:ed:1d:5a:c5:be:28:ed:65:8e:c2:
7d:e1:a8:b8:9b:b5:13:aa:fc:d9:97:6d:3a:65:c4:
89:a2:f9:10:0f:64:db:1c:41:a1:ec:e1:c6:86:03:
65:9d:2c:af:0a:9a:0a:5f:cb:68:3b:66:bd:b5:8a:
3e:c3:46:42:08:34:fc:bc:10:65:b1:b6:9a:2d:f9:
da:a6:c5:ab:5d:40:17:69:90:14:4a:8b:41:90:95:
f5:64:4f:c9:4d:d5:c5:e6:ab:76:c2:44:1c:5b:f6:
be:2d:15:02:dc:ee:33:b4:b8:76:92:9a:e1:b7:31:
4e:67:73:b6:16:83:e6:16:75:b8:5c:bf:6f:74:b7:
7f:37:21:1d:7f:00:f0:8d:44:38:71:be:76:03:c7:
0a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:28:46:28:D8:EF:7A:AA:C9:40:54:57:34:3C:44:E6:F6:7D:27:97
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:21:95:92:e3:b7:f2:38:1d:ad:b3:cc:e0:ac:59:73:9f:87:
4a:af:77:26:9c:ec:0b:5c:bb:4b:eb:35:ee:7c:86:6a:80:db:
90:f5:90:9e:8b:28:98:2d:27:b8:b2:7c:cc:13:e8:21:5d:6e:
cb:1e:ae:1d:f4:0f:e9:95:cf:f8:9f:11:db:fa:3a:d5:bb:d4:
fc:0c:75:ab:fc:d5:24:2c:c5:b1:75:da:71:e0:b4:ad:98:27:
70:a7:d4:61:f4:c1:e4:be:fb:15:f1:55:fb:c0:4d:29:8e:78:
db:2c:74:24:d2:24:30:52:41:f8:0b:92:ac:d4:52:03:9c:ab:
1a:bc:23:0c:08:37:d5:75:31:46:cc:44:bd:f3:75:c0:5e:1e:
63:19:28:bc:02:ef:40:e9:40:1a:97:4e:1f:cb:d1:05:2f:ed:
31:42:89:12:9e:9c:9e:4a:0e:04:6e:c7:b1:bf:4d:28:76:ac:
e8:c5:5a:49:10:07:4b:51:47:f5:c7:41:6e:b3:49:dd:bb:74:
aa:4c:67:03:5c:3d:89:22:f0:e4:9d:7f:07:a0:cb:27:9e:c0:
c9:45:43:50:d4:fa:bc:5f:cd:e5:1f:86:4c:8c:f1:a7:24:b3:
37:6f:b0:a8:a5:3f:ec:40:e1:5b:6b:ba:09:9d:56:d9:32:59:
c9:85:58:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcebcPNMRIsDQ60Rb/Sj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0
NTZhYjQwHhcNMjYwNzI2MjIwMDQ2WhcNMjYwNzI3MjIwMDQ2WjAzMTEwLwYDVQQD
Eyg5MDI4NDYyOGQ4ZWY3YWFhYzk0MDU0NTczNDNjNDRlNmY2N2QyNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMjEt9rnnmYdbSuOGhVHk2Hv/SEv
d7QmLlSlnfLtnwzAN0CwMgSDKbPTjqPuGVOzn+0Ta527CBw7DJK4DNGcX8wNULfe
raDVRreu7DDfl67jqfeD5pEIIi4uinDFEubv6JBoU3/2msWkclid6e0dWsW+KO1l
jsJ94ai4m7UTqvzZl206ZcSJovkQD2TbHEGh7OHGhgNlnSyvCpoKX8toO2a9tYo+
w0ZCCDT8vBBlsbaaLfnapsWrXUAXaZAUSotBkJX1ZE/JTdXF5qt2wkQcW/a+LRUC
3O4ztLh2kprhtzFOZ3O2FoPmFnW4XL9vdLd/NyEdfwDwjUQ4cb52A8cK7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAoRijY73qqyUBUVzQ8ROb2fSeXMB8GA1UdIwQY
MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt
MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz
LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiGVkuO3
8jgdrbPM4KxZc5+HSq93JpzsC1y7S+s17nyGaoDbkPWQnosomC0nuLJ8zBPoIV1u
yx6uHfQP6ZXP+J8R2/o61bvU/Ax1q/zVJCzFsXXaceC0rZgncKfUYfTB5L77FfFV
+8BNKY542yx0JNIkMFJB+AuSrNRSA5yrGrwjDAg31XUxRsxEvfN1wF4eYxkovALv
QOlAGpdOH8vRBS/tMUKJEp6cnkoOBG7Hsb9NKHas6MVaSRAHS1FH9cdBbrNJ3bt0
qkxnA1w9iSLw5J1/B6DLJ57AyUVDUNT6vF/N5R+GTIzxpySzN2+wqKU/7EDhW2u6
CZ1W2TJZyYVYiw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:57:51 2026 by rpki-client