Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: o76iYf+MtTL10zyaX9nmVeVEJwt9AnynsSJSaPSO2Lo=
Subject key identifier: E3:2D:AC:37:99:EA:8E:5E:29:CA:4B:B2:CA:79:80:A6:17:6D:44:D6
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019D382E14DB0F3057681E25883D950EF061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0D81
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (hash: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: +fQAOiJoVG7TAz+qQQhO6UVwsgrr/WFGcNx8r14ZSV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:14:db:0f:30:57:68:1e:25:88:3d:95:0e:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=e32dac3799ea8e5e29ca4bb2ca7980a6176d44d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:7e:e3:a7:2e:b3:97:93:32:ba:a9:61:75:
14:f7:d5:b3:ea:2f:59:74:26:02:e8:1c:cc:b4:62:
43:ec:81:e3:65:56:8c:ef:95:63:29:f6:eb:55:81:
e6:18:f0:51:bc:fe:27:55:b9:3f:8b:73:1f:aa:d3:
c5:a6:34:07:36:dc:26:4f:ea:cf:69:18:b0:64:f4:
98:28:f7:8d:e3:db:e8:20:7d:c3:84:95:ab:81:22:
25:44:98:b1:26:9b:f0:d9:af:df:92:0e:1d:ac:cb:
73:bd:3b:81:9d:6c:3c:e8:02:ca:6d:82:54:70:a2:
53:18:1d:24:5c:bf:52:8d:58:11:00:8a:7e:26:a2:
f0:e5:ba:55:d8:ef:4e:c6:cc:4d:f6:7e:8c:11:fa:
a1:ae:02:5b:88:d3:b4:c4:f1:03:9e:5e:05:1a:9e:
91:bc:45:a9:cc:e3:d2:98:a5:5a:12:82:ea:8d:e2:
37:c9:a5:2e:23:a2:34:2f:be:a5:17:54:d7:27:0b:
d7:ec:b9:bb:99:2d:4e:97:84:9f:78:3f:d5:91:1b:
2c:d6:81:ca:7e:5b:63:aa:6c:40:6f:3e:ef:35:3a:
b7:7a:03:b6:fc:81:26:5d:24:24:1d:04:c3:b0:c5:
75:42:1d:12:54:3d:70:ee:23:15:45:44:65:fa:fc:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:AC:37:99:EA:8E:5E:29:CA:4B:B2:CA:79:80:A6:17:6D:44:D6
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ae:2b:b4:a3:46:f1:57:c5:e7:44:58:02:58:48:2a:57:57:
8a:58:c3:05:71:b6:56:8d:70:bc:ae:83:f9:ec:2f:30:05:85:
d4:d3:d6:8d:62:2d:fc:fb:85:6a:90:50:a8:f1:7e:c5:6b:17:
0f:6a:fd:52:5f:dd:24:51:ef:35:a7:cb:b5:31:1a:63:7e:ed:
09:7b:01:69:17:d9:c7:2e:89:a4:98:db:6e:46:0d:92:15:b7:
ea:41:e6:77:5b:ec:34:4c:d2:1b:7a:9c:1a:47:4a:50:20:1f:
4f:b7:ee:b3:96:cb:ad:cc:54:21:0a:6d:1c:23:3d:77:51:c8:
49:ab:b0:a1:3f:cf:f8:90:ec:a5:f1:e0:1b:5b:e4:40:11:aa:
c8:54:8e:e6:76:9d:78:3b:f0:40:49:78:5d:63:c4:6b:46:c0:
37:3d:79:a2:11:d6:2b:c1:e2:12:7f:9f:50:fa:f8:4f:38:13:
76:1c:d4:bb:1f:43:76:6b:d6:d4:16:0b:61:3e:b2:d7:87:39:
ec:0d:2f:4b:cc:5d:e8:3e:57:1f:0a:67:e6:af:03:71:10:dc:
6b:e6:9f:ac:fc:61:88:1b:bb:a8:cd:f9:00:98:ab:95:c9:50:
49:79:ef:f3:eb:28:f3:c5:1e:b5:76:d4:fd:35:63:fc:2e:c1:
2b:f2:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client