Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: pRJnmPZmMYpVWLv5I+Oi0O6ztsankNEwAKaP5Z/tYg0=
Subject key identifier: 7E:98:5C:1A:14:37:34:AE:87:23:30:1B:B4:57:00:44:54:52:80:61
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 019D39E5B6B3D0FD920DA45E83D2A7D73033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: ugU6W7pvbCIh10dbHvYO2CQRAh7cl0C24DQvHtsRyiA=)
2: sq_j1691pyhvkH9BoIr0BcNKCxI.roa (hash: i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b6:b3:d0:fd:92:0d:a4:5e:83:d2:a7:d7:30:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=7e985c1a143734ae8723301bb457004454528061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:c5:7d:09:fc:bd:3f:17:10:28:ff:1b:c7:
72:40:09:75:bd:25:92:39:9b:9e:b9:d4:68:74:0f:
23:72:c5:f8:f2:7e:99:84:ce:19:23:90:a4:18:10:
95:4d:53:5e:7e:e5:e2:05:b2:cd:46:bf:5b:83:b6:
e8:30:4b:c5:02:93:c6:ae:97:b1:fd:85:7d:10:45:
86:a4:b8:dc:c1:90:b7:4e:74:f1:36:1b:e1:7e:80:
de:b1:23:1d:e7:d3:ba:e5:3b:8e:79:64:99:43:73:
75:42:c9:7f:c2:01:d6:bf:3b:e7:51:f0:0a:80:dc:
1a:1f:dd:c3:73:4f:2b:82:bb:3b:d8:65:53:5f:4d:
5d:67:3e:d7:d9:d1:ff:0b:cc:0b:09:bb:57:95:4d:
c0:39:54:34:d1:74:06:fe:3b:da:33:37:b4:0e:42:
32:dd:af:9e:fa:9f:0c:5d:e4:7d:91:ad:e7:bd:f4:
6e:07:47:1b:32:42:bf:b6:43:98:a5:3e:e4:e3:30:
35:23:b1:9e:90:0e:23:f0:7d:d8:2a:27:cd:74:c2:
f5:aa:2a:f1:90:5c:1a:e4:72:47:b0:9e:52:15:86:
85:b7:4a:51:c4:53:69:2c:eb:ad:e2:56:87:07:c3:
c1:e9:64:70:27:3a:f4:1a:d6:a1:89:45:d1:53:02:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:5C:1A:14:37:34:AE:87:23:30:1B:B4:57:00:44:54:52:80:61
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:4e:e2:cf:f4:4e:1b:8c:4b:70:9a:9c:02:0a:4d:4c:1b:
94:ad:94:47:d7:0d:0a:9d:7d:ae:34:05:86:f8:c9:16:d8:fe:
12:51:95:a3:19:59:53:19:db:ca:88:9e:27:08:ea:78:2e:ed:
59:6a:58:85:d0:6f:5f:7c:f0:10:f5:0a:88:9d:28:0c:de:78:
c2:a8:6f:dc:39:6f:5c:51:73:10:e6:df:3f:d6:05:96:09:ae:
8f:1c:bf:3f:7d:e1:90:a8:4e:e6:08:03:f2:30:05:31:d8:02:
5a:c0:83:13:b4:76:42:de:9c:99:98:6c:eb:37:3e:9a:d2:ba:
0f:41:6d:1c:da:1d:49:72:43:52:e7:2c:54:81:1a:fe:39:56:
db:36:4f:70:cb:24:2d:90:37:c1:34:23:80:0c:8a:bb:76:0c:
d7:f5:3b:08:86:df:a0:7b:e5:72:33:21:09:62:86:01:c1:db:
5c:47:48:25:50:cf:38:37:a8:42:62:5e:b8:5f:0c:2d:6b:d4:
ad:45:20:34:e3:12:4c:f9:95:e1:9b:55:a5:31:05:f2:d1:8c:
c0:52:a7:89:cc:90:22:46:02:44:e3:96:e7:71:aa:b4:b7:cb:
5c:e5:4a:ec:9e:01:ed:5d:0e:bd:b8:96:57:09:41:2e:24:f8:
35:70:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:41 2026 by rpki-client