Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: BCA4YoUHUOw/kywJVxlgss+VM6Eclvzh2B8IlfqTZkI=
Subject key identifier: 94:3A:7D:94:CD:27:3B:73:1A:02:26:5E:2C:4D:5C:4E:EC:01:FC:FE
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019D37527C94D41CB16EC736BE9915855144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 09EB
Signing time: Sun 29 Mar 2026 02:00:45 +0000
Manifest this update: Sun 29 Mar 2026 02:00:45 +0000
Manifest next update: Mon 30 Mar 2026 02:00:45 +0000
Files and hashes: 1: PSCjCrxrCeT-cWttc-XrOlJtQZw.roa (hash: 2swSqRspsOoUJA6D3XUUWVLXclXLULrNOWbdZ6ShDg0=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: saSbr/n+pns6XrWn17HhXu5UGL8os50/wYTLeRaPp3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:7c:94:d4:1c:b1:6e:c7:36:be:99:15:85:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Mar 29 02:00:45 2026 GMT
Not After : Mar 30 02:00:45 2026 GMT
Subject: CN=943a7d94cd273b731a02265e2c4d5c4eec01fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:30:b9:1c:86:c3:f5:bd:d6:87:22:03:51:
e2:f0:9a:18:60:cd:51:7e:4e:d8:59:34:6d:bf:be:
1d:b9:d3:df:84:b0:20:30:9a:18:d8:ea:e7:27:4e:
96:d5:03:93:a3:72:c3:31:f0:6c:ea:07:63:99:70:
71:06:45:d9:f2:52:40:2f:2d:90:69:81:e2:7c:9e:
e6:03:ed:19:fa:73:6e:53:a3:80:8f:80:e9:25:4b:
4b:fa:7f:0a:2a:2f:d8:24:6b:c5:43:27:41:5f:e9:
a3:4f:5c:f5:bc:4a:d9:5f:9e:db:0d:bd:14:31:62:
bc:1e:b7:7c:6d:65:fd:d2:bb:e5:48:11:9e:c0:06:
d4:33:d9:18:45:df:68:6f:e5:db:c0:f4:99:7f:e6:
b1:88:89:46:2d:1e:f3:85:65:53:4c:46:54:53:ca:
5a:a0:f7:e5:59:a7:32:1a:59:00:45:a5:bd:89:ed:
db:a8:93:f2:f3:90:12:c5:82:8a:d2:ac:1a:d2:81:
4f:00:5e:80:c4:bc:8d:15:59:01:a1:7b:ea:2a:0f:
b0:70:26:37:5c:f3:a1:be:f7:00:2e:f9:b6:50:04:
7a:6d:72:28:3d:9c:82:88:cb:29:05:f7:20:7b:78:
8e:f0:d6:35:38:22:02:f9:b1:32:6e:65:47:17:f7:
fa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:7D:94:CD:27:3B:73:1A:02:26:5E:2C:4D:5C:4E:EC:01:FC:FE
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:dd:15:3a:a5:e7:a5:1c:7e:29:74:b1:99:a2:b8:25:64:
2c:ff:1b:03:7c:02:31:b7:b6:7b:d9:66:33:3e:5a:25:29:ce:
ad:27:17:05:e0:e8:36:35:8e:c6:a1:01:20:f8:2e:24:f6:22:
03:59:95:14:f2:9d:6e:8d:b1:04:1d:96:7b:18:c5:c0:d2:82:
fe:c5:39:86:e6:85:ac:19:cf:72:76:ae:c3:50:64:bd:bd:8e:
5e:d2:07:1c:8f:22:91:fa:ac:6e:f2:c8:80:b8:ed:55:dd:65:
aa:c0:d4:0b:7e:74:09:f5:16:6d:91:51:38:16:be:9b:a2:80:
81:38:3c:e3:dd:f5:54:2d:10:a4:4b:3f:83:77:c8:08:82:02:
3e:6a:9a:5d:eb:86:db:63:70:0d:4b:62:29:df:c1:c6:7f:9e:
78:85:2b:9a:02:ea:13:71:25:de:98:c7:2f:ad:e2:5f:04:62:
6e:63:4c:81:21:e3:43:6f:a7:7c:a3:97:d1:c4:ea:19:aa:2a:
5b:0a:9f:e3:00:3f:a1:b3:87:32:ee:d3:32:7d:02:d9:01:47:
75:2a:fa:b5:c0:24:b8:98:57:26:7e:f6:ea:ba:6f:f5:5a:22:
cf:26:91:bb:1a:cb:0e:4e:44:c0:92:c2:27:a2:d4:b8:98:0f:
a6:fd:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client