Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: YAW+Bfu7H3nUiF2ofRnnx2SNCZJKlbPlO4IbCE/hXyE=
Subject key identifier: DC:53:89:10:B1:26:AE:DB:56:CD:DB:02:36:1C:1B:AA:9B:D3:62:89
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 019D3940B143ADA7DD3C5C18A0E5D1D151F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: AyrzSBhcVdLjrtpgaPtvfCo2cgk.roa (hash: FPSdxwJlvKxB9usaAhQQLpbdSK3miP+bPkK1Uge0pAo=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: +kCMNoJotCdM3QntPMLfZSvJn1C0A5H+YmgfwCKSXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b1:43:ad:a7:dd:3c:5c:18:a0:e5:d1:d1:51:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=dc538910b126aedb56cddb02361c1baa9bd36289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:6b:64:b7:47:eb:20:d2:a4:5c:5b:69:a9:
7b:cd:f5:1b:c4:8c:32:a9:11:14:53:a1:bb:b8:4f:
3e:a2:d2:7d:d4:b1:23:15:e0:01:c8:68:8d:b6:6e:
78:0c:5f:94:d1:39:28:57:c0:14:7f:5f:2f:11:58:
76:67:71:af:15:b8:de:12:53:c6:6e:8c:1f:2d:46:
d8:88:b6:ab:dc:fc:1b:a8:21:6b:96:2d:39:f4:82:
f1:f4:63:41:b5:40:1a:f3:c5:0a:b2:d3:00:2e:c7:
e1:49:60:c6:5e:bd:46:23:cb:39:bf:9b:40:7f:59:
0c:a3:24:13:27:57:1e:5d:b8:b7:9e:e4:00:7b:f2:
52:75:07:e5:33:53:df:f5:61:5a:bd:93:d7:84:4f:
f2:78:e2:aa:9a:7f:86:85:fa:cf:93:3e:55:71:26:
c0:b2:97:cb:ef:e0:26:86:f7:6f:7f:e1:72:29:cf:
a0:1f:76:c9:8c:fe:bd:05:cf:47:b5:9b:b3:42:be:
cf:f5:4c:cb:d1:86:97:48:d4:d3:91:c8:6f:03:90:
6a:06:45:91:e8:4d:9b:08:62:dc:37:d4:c5:a1:4f:
6b:22:61:4f:ee:22:66:bf:44:d8:1a:09:3a:d5:c1:
ee:e9:45:d8:b2:db:99:5a:96:75:40:f6:31:ad:26:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:89:10:B1:26:AE:DB:56:CD:DB:02:36:1C:1B:AA:9B:D3:62:89
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:61:a4:1b:87:08:8b:c9:ac:d1:9f:f7:74:3b:c5:c0:eb:
68:bf:80:42:a1:cb:a6:e3:bc:7e:9a:d3:c1:4c:5f:6b:dc:29:
c1:dc:66:08:ae:8a:60:55:ab:43:c1:a0:8e:04:cd:35:f7:a2:
2f:33:8c:76:0d:30:0d:99:82:29:09:7c:56:42:01:42:96:94:
9c:b1:51:ef:0f:cf:c9:67:48:fc:f6:d1:93:59:07:de:6e:42:
40:b4:03:65:b5:38:af:c0:c4:1f:51:ef:d5:79:a2:ea:ba:1c:
bf:28:48:3e:10:f3:25:cb:d0:c1:25:36:53:ee:f7:b0:41:fd:
6c:d0:f1:9e:7a:f5:3f:b6:3b:2f:61:db:29:a1:e1:f2:29:0a:
a1:15:29:94:6f:84:43:76:ed:71:a8:1c:65:a7:64:a6:78:dc:
23:d1:a2:bc:9a:2f:9e:b0:97:55:bb:49:6a:cd:1a:52:0f:0c:
ea:a4:87:ac:14:23:a4:41:4c:62:aa:69:e6:54:03:87:63:03:
0e:b1:1b:3d:29:53:20:fe:43:c9:b6:49:db:28:2e:52:e9:09:
45:92:7c:59:db:d4:30:70:98:11:0f:4a:ab:81:09:a5:b1:a7:
1b:b2:3f:6a:f2:f3:09:5c:4d:bd:ca:3b:81:ac:75:04:43:08:
fe:99:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:20 2026 by rpki-client