Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File: rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier: RLCOb3bcZesw8TUOmrNxN/yDl6vvdIIYG9UAzogmvow=
Subject key identifier: 5C:47:B9:8F:5D:91:2B:7A:7F:C0:B7:AC:FA:46:CD:6C:D0:E2:D4:41
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer: /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial: 019D3909F2B5DB79FDE1909EC79B37CEFAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: ilWNiIG5SNtaUx1hrdRtNzldRkjnyuP+YnkE8M2RASk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f2:b5:db:79:fd:e1:90:9e:c7:9b:37:ce:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=5c47b98f5d912b7a7fc0b7acfa46cd6cd0e2d441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:ce:36:e9:6f:80:d8:db:ae:c0:04:f5:b6:
6c:e4:54:40:ae:a5:de:f8:fd:7c:96:44:38:a2:5e:
f4:e6:84:d5:fb:d9:3c:6b:8a:b2:3e:39:ee:6d:52:
11:1f:b7:d0:cd:03:f1:67:5f:a8:74:e5:c0:46:40:
9d:7b:74:42:53:c5:7f:6c:0d:f4:65:30:f0:87:54:
3c:79:32:3c:86:c7:41:48:4c:cc:c4:8b:c2:e0:59:
29:8a:9d:b4:a9:30:74:ff:bb:40:60:c9:19:4f:52:
c6:2a:9e:be:e2:a5:7b:73:73:ed:9a:63:35:16:e6:
6f:47:5a:bb:14:e0:76:3a:06:15:7f:ac:7f:8a:bc:
00:78:b8:43:5e:10:c4:70:93:cb:31:21:35:70:df:
6e:e4:5d:23:df:36:75:67:8f:a3:ba:ce:47:20:1b:
c9:7a:f5:93:b3:05:56:66:56:59:03:c7:97:ef:2d:
c4:4d:88:91:dd:ef:af:90:21:cc:a3:06:b4:73:1c:
a4:c0:e9:55:e9:ba:ab:95:65:6b:cc:02:13:b5:17:
65:9b:87:44:62:95:e8:6b:28:43:e0:ee:13:96:95:
3a:ab:19:14:80:46:41:f8:57:ff:fe:df:15:b4:de:
5a:a6:2b:3f:f1:e8:16:32:83:73:84:e8:69:e0:26:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:47:B9:8F:5D:91:2B:7A:7F:C0:B7:AC:FA:46:CD:6C:D0:E2:D4:41
X509v3 Authority Key Identifier:
keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:66:b7:b1:45:4e:d0:d8:f9:2e:ee:98:48:87:47:38:63:b2:
15:a1:b1:b2:d8:5f:06:c0:77:56:f3:f6:64:b5:73:84:c6:c8:
c0:a6:49:23:31:03:ed:63:1c:32:0e:41:a2:f3:8c:d7:e4:7d:
af:de:8b:79:55:69:8d:2f:69:ae:49:cb:0b:74:bd:72:9c:3a:
43:cc:a5:d4:fe:b6:d7:8a:62:88:ab:53:1f:a6:12:c7:a5:c4:
3c:b6:2d:70:1b:59:b9:71:79:ae:26:c7:d9:cf:1a:e3:ef:ea:
30:f1:1e:88:ff:d2:97:be:91:29:c3:6f:a4:28:e3:4d:7b:ab:
66:4c:7d:5d:6a:66:de:e4:31:c0:2b:ed:6f:80:32:ab:39:26:
64:4f:0e:40:69:49:7d:3c:f3:21:a9:85:a6:ae:ac:de:e0:8a:
2b:4a:11:58:1a:68:91:25:32:c8:55:23:bd:90:c3:9d:7e:11:
8e:f7:d2:85:96:7d:fa:9f:e2:b6:30:8f:56:3c:d4:a2:43:77:
9b:6f:d2:28:8a:e5:89:2e:98:8e:d9:ec:1a:dc:e7:e4:ba:a3:
0a:e6:11:79:3b:f4:95:15:73:5c:1f:e3:36:4c:ae:16:2d:0f:
b2:2c:7f:37:92:85:1c:ff:43:f6:10:60:93:a5:7b:9e:ec:9a:
2b:e4:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:23 2026 by rpki-client