
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: F/PRuTjwIz552dFx0KoQ1W1xvjV35M+askyAYSMP6a0=
Subject key identifier: B5:D4:F0:71:87:D3:9E:CF:62:0D:6F:70:63:B5:B3:04:4D:B7:58:3C
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 01A192434736F11E17BD28D40AD06B1EAC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 1AD4
Signing time: Sat 31 Oct 2026 14:00:44 +0000
Manifest this update: Sat 31 Oct 2026 14:00:44 +0000
Manifest next update: Sun 01 Nov 2026 14:00:44 +0000
Files and hashes: 1: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: ux1Au97n8+m9ukpB0x/8HBw4nNvqoYtqAiqqY7njZC4=)
2: sq_j1691pyhvkH9BoIr0BcNKCxI.roa (hash: i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:43:47:36:f1:1e:17:bd:28:d4:0a:d0:6b:1e:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Oct 31 14:00:44 2026 GMT
Not After : Nov 1 14:00:44 2026 GMT
Subject: CN=b5d4f07187d39ecf620d6f7063b5b3044db7583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:1a:f9:49:83:a5:3a:e5:7b:84:94:3b:7f:
12:d8:31:32:b6:24:63:05:84:ff:9d:bb:ab:74:3e:
ea:35:ae:e3:97:14:82:4d:f5:ca:ce:e7:80:fe:6d:
6b:0c:63:39:1f:e6:97:42:83:31:39:ee:43:36:69:
d8:bc:d1:fa:5f:86:46:eb:d2:04:d1:a5:54:43:20:
9a:9d:ea:e4:9c:de:bf:10:7b:31:f5:a3:ce:9d:1f:
02:4b:74:12:8d:9a:59:9c:d8:ad:fa:aa:99:d4:e9:
3d:cc:93:f5:85:a4:ac:de:10:fe:ed:c1:ea:66:cc:
31:25:08:00:49:e1:c8:f0:15:10:35:a9:e1:35:9e:
60:fe:8b:b1:f2:89:e1:28:e4:e2:13:3c:69:25:f2:
cf:69:44:50:fe:8c:8a:af:cc:74:20:27:52:72:37:
a2:50:b1:2e:7f:0e:9c:1b:c8:ba:96:f3:37:70:50:
58:76:05:b6:bc:39:ac:e6:52:14:a8:53:9e:01:59:
96:82:38:37:9d:47:74:c6:f1:d2:76:d5:99:cc:71:
e3:a8:4c:bc:f3:2e:16:88:69:91:e5:b7:8e:1e:f2:
f5:95:cd:f9:b9:91:39:3f:d6:5d:89:fc:af:39:6d:
5f:71:90:5d:cf:6d:eb:cb:75:cf:40:0a:be:c8:8d:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D4:F0:71:87:D3:9E:CF:62:0D:6F:70:63:B5:B3:04:4D:B7:58:3C
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:56:e7:3d:d3:c6:27:cf:2e:6d:10:bf:ef:54:16:90:2f:
78:93:63:cb:c3:8a:27:26:55:6b:2f:56:3f:1c:ae:8f:1c:7a:
ba:22:c0:74:8b:22:51:df:f5:34:ee:c8:57:73:d3:a9:24:a2:
b5:9f:a5:63:97:14:f4:0c:90:af:8c:14:e7:c6:f2:d2:7c:bc:
0f:cc:13:74:2e:e6:ad:4b:9f:ff:37:46:7a:c1:f2:30:86:f6:
68:a5:6b:91:9d:65:2e:80:c7:32:03:2d:8a:01:8d:c1:5d:ca:
2a:41:e7:af:d4:78:a3:3c:c6:e2:4e:98:08:56:cc:90:59:90:
57:ab:c0:2f:7b:2b:64:d3:bc:a4:5e:c4:b1:ed:ff:f8:fe:9c:
7a:15:8f:5e:14:d8:12:a2:61:09:76:6b:e4:ce:36:58:59:8f:
a4:6d:c2:8e:c0:2d:ec:be:4c:c5:e7:d4:96:06:60:97:0c:10:
e8:db:73:4d:4b:9b:53:26:25:c2:26:ec:21:66:eb:07:0b:be:
bd:49:c1:92:6f:54:2b:f7:49:e7:97:a8:f0:1f:57:52:c7:c0:
6a:e8:9f:a6:82:28:30:4a:22:61:d8:94:7b:99:a3:b3:f2:97:
d7:04:fc:cd:29:56:2b:8a:cf:4e:94:05:b5:91:6b:e2:64:e8:
e7:4b:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 20:41:48 2026 by rpki-client