Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.mft
File: RjeuolGFTfWdtwhq18978V0psvM.mft (raw, json)
Hash identifier: +5NTCdBcKhiAt2fdQGPTpcfNg3YIQxUgpAMf6a5q6sc=
Subject key identifier: EF:7F:01:E3:DC:3B:44:C5:F2:CF:F2:B3:18:E4:D1:2F:7D:FF:10:23
Authority key identifier: 46:37:AE:A2:51:85:4D:F5:9D:B7:08:6A:D7:CF:7B:F1:5D:29:B2:F3
Certificate issuer: /CN=4637aea251854df59db7086ad7cf7bf15d29b2f3
Certificate serial: 01A181BE83D561D701FCAEC4D92D7D09F993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.mft
Manifest number: 3A
Signing time: Wed 28 Oct 2026 09:01:48 +0000
Manifest this update: Wed 28 Oct 2026 09:01:48 +0000
Manifest next update: Thu 29 Oct 2026 09:01:48 +0000
Files and hashes: 1: RjeuolGFTfWdtwhq18978V0psvM.crl (hash: GaMBjx4hgiCsJwzhCKt2Fi+X5ts5UO8OGmzvQLzItf8=)
2: S6bTx0qF225p9cGwxgAgpVMuMWg.roa (hash: DKTGjtHQTIvBcsYzak9PEGsIxXLCwp43vh3q9YVtQ3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:83:d5:61:d7:01:fc:ae:c4:d9:2d:7d:09:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4637aea251854df59db7086ad7cf7bf15d29b2f3
Validity
Not Before: Oct 28 09:01:48 2026 GMT
Not After : Oct 29 09:01:48 2026 GMT
Subject: CN=ef7f01e3dc3b44c5f2cff2b318e4d12f7dff1023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:cc:d1:00:80:92:bc:63:c0:f9:4c:19:52:
f8:9f:73:95:1a:3a:0f:46:57:cf:81:29:06:89:aa:
05:51:ae:cb:86:16:05:93:f2:45:bf:fc:eb:19:11:
d2:ec:c7:98:78:59:39:10:f5:94:a1:1a:34:17:c0:
d8:e0:d6:82:d0:f6:00:ef:12:b9:d3:a3:2f:a2:d8:
42:d2:a5:ae:0e:6b:26:70:31:ac:f2:48:37:2d:e0:
8c:65:66:c2:50:5e:91:b3:ac:c9:f9:27:db:fa:67:
04:c1:9f:3c:5e:e9:23:69:e0:56:0e:15:7f:00:fb:
3a:3c:a3:f8:fb:df:d6:eb:a6:e3:62:bb:09:c8:68:
b1:06:53:f3:c9:6a:40:c1:7b:ee:be:33:04:05:c4:
a0:f6:5a:5b:f1:9d:11:f3:60:29:b1:59:59:ac:bf:
b8:7f:3f:e1:81:f2:39:36:d3:08:30:7c:8c:13:b9:
4d:bb:8d:e5:c3:be:0d:fd:ad:06:d3:9d:a9:a7:da:
66:9c:a1:79:29:e7:db:a5:a6:b5:f9:53:41:e0:31:
50:58:5f:a8:97:d5:80:3c:7a:38:b4:86:47:d6:73:
f6:cc:cd:84:9f:77:3b:fd:0e:31:b2:b5:ba:e8:30:
3c:e8:ef:53:13:d6:9d:88:22:5e:33:5a:5f:fb:20:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7F:01:E3:DC:3B:44:C5:F2:CF:F2:B3:18:E4:D1:2F:7D:FF:10:23
X509v3 Authority Key Identifier:
keyid:46:37:AE:A2:51:85:4D:F5:9D:B7:08:6A:D7:CF:7B:F1:5D:29:B2:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:5e:d2:33:fc:1f:74:52:5a:e5:4e:9b:5f:1b:74:14:9d:
79:1e:30:1f:97:8d:b0:77:fb:42:20:b5:cd:82:9b:18:18:8d:
c6:6d:1b:c7:fd:69:f4:3a:9a:f7:e1:b7:c9:b3:97:c9:64:66:
86:ea:13:fe:d9:b2:d3:e1:96:90:e4:47:b5:28:63:d8:e3:0d:
eb:9e:43:d5:e2:b7:88:ba:5c:df:f6:2e:0f:ce:f7:3a:4e:3f:
08:18:f6:1b:60:79:24:b6:8d:6c:5c:44:a7:f7:34:ca:03:52:
e5:af:77:80:71:a7:1a:37:3f:0c:58:17:d6:14:3b:24:66:e5:
30:71:27:22:b1:89:19:cf:9b:4b:84:00:8c:01:84:30:77:f7:
ff:c7:74:d3:26:b2:f3:2a:0d:33:85:68:b8:bb:9c:9c:33:e6:
7a:ea:a2:17:c8:3e:e1:cf:b2:ab:28:56:74:06:1f:26:1d:7b:
62:e7:32:4b:14:d7:66:ac:68:2d:4b:90:ce:61:9b:36:db:7b:
a3:ec:8a:4e:0d:ad:99:f9:55:54:40:d2:1b:fd:06:a3:3a:0d:
cd:6a:8e:c0:0d:b4:6a:87:07:f7:46:a8:71:fb:9b:bb:72:f3:
5e:22:2b:85:c8:c7:c2:58:8f:b0:60:f9:dc:70:60:c7:e7:cf:
e5:82:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:55 2026 by rpki-client