Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: F4MQPjrW3fzyJzxTqGzXnhEcq/CNHNK9mMRVEJ8yES8=
Subject key identifier: 39:1E:90:F0:2E:84:01:DD:6E:B6:96:41:3B:21:F4:39:D8:E9:C2:CC
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019D378994F4515320C676960AD2DD8EA1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0C95
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: 2PZdzL8u6BQV8ef/Qe/yHTDh78Zt/htx+3i5Tn7tTDk=)
2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:f4:51:53:20:c6:76:96:0a:d2:dd:8e:a1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=391e90f02e8401dd6eb696413b21f439d8e9c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:99:a0:61:b5:14:42:c8:57:f6:20:bf:97:
9a:40:4c:20:af:78:f8:0e:ed:68:3d:09:69:b3:46:
21:e8:ec:28:00:73:67:24:38:68:e6:56:0e:b4:37:
c7:78:23:43:96:04:43:58:2b:1b:b1:1a:f7:c6:1b:
c6:e7:b5:0c:95:cc:f9:a4:34:ce:8f:8c:8f:d9:9f:
62:60:ec:b0:c1:2b:7f:8e:6e:87:06:bb:16:8c:1f:
87:5a:3c:3a:ba:fd:16:f8:ca:c4:50:6d:00:67:28:
ad:12:cb:04:31:e7:88:c9:72:fd:4f:ce:85:2c:20:
fa:90:01:8e:05:5f:6b:0b:18:ed:9b:85:01:b5:ca:
87:62:42:42:1c:09:f7:10:6f:19:32:6b:57:85:2d:
13:1e:d2:ae:ea:b6:74:ff:4a:47:60:ae:19:d5:c7:
79:27:ec:14:a6:dc:5e:a7:d9:5a:79:25:18:b4:6c:
01:2d:8d:20:d7:89:e8:bf:9c:2a:e4:e1:40:e3:18:
a1:ae:72:bc:4c:0e:2c:76:fe:23:31:ba:47:80:dc:
70:43:69:f4:3b:ef:8f:db:49:36:fa:04:25:1a:bf:
3b:f3:84:0f:f0:ac:df:3c:83:88:71:12:6a:3a:c5:
c8:fa:9c:2c:1c:65:b0:3f:06:27:5f:8a:5c:a3:91:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:90:F0:2E:84:01:DD:6E:B6:96:41:3B:21:F4:39:D8:E9:C2:CC
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:94:99:1e:e0:4c:6e:4a:19:22:fc:6f:ce:09:aa:69:45:
17:d2:fe:6a:a3:b6:42:f3:d1:fb:9f:1f:93:08:2e:70:c6:b1:
22:e5:94:3c:2a:ef:29:76:5b:47:eb:b8:56:50:b1:a1:02:1b:
e1:b2:ca:80:b7:9c:52:34:db:22:ef:16:3c:7e:de:c9:02:e4:
15:43:b9:ec:f6:3a:39:5b:7f:89:82:89:58:93:dc:69:64:bc:
ba:77:d2:e9:af:28:67:79:74:28:af:e4:63:70:d6:16:25:80:
3d:8d:04:68:68:d8:aa:20:93:27:f1:75:7c:e4:e9:1e:b0:a3:
0b:7f:c9:ea:73:e1:bc:de:44:6a:38:e9:5c:bd:41:c2:5b:88:
97:47:18:9f:94:9b:53:32:f5:2b:b2:66:49:7c:f6:8e:6e:ce:
9e:c4:b4:e2:e2:3b:40:c3:2b:91:78:e5:f2:b3:7f:a8:07:88:
ba:63:ee:d9:0d:b0:7d:80:4b:00:74:73:30:ef:60:27:90:17:
13:69:cc:42:b6:f2:ba:1c:ea:ca:6d:43:ab:6c:06:da:1a:33:
0a:dc:45:f3:e4:46:56:9a:21:46:b1:3c:94:86:19:95:4a:e5:
a9:15:f2:77:6e:d7:ad:01:0b:b4:f6:67:19:0f:fc:ea:fd:b1:
1d:94:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:35 2026 by rpki-client