Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: wEiCyZ+0fR3zjk4Z602WQtYraBWZWTuS5a0vHh03/uM=
Subject key identifier: 23:A5:0D:BB:29:BA:46:E1:54:26:A7:D2:B7:B5:3A:37:09:22:FF:44
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019D28BB723568269C6A5CECC1BE294E44B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1120
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: 4+opgxyl4SM8SxFT7nWODbIQoU+7LTtSsCC6feyu29Y=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:72:35:68:26:9c:6a:5c:ec:c1:be:29:4e:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=23a50dbb29ba46e15426a7d2b7b53a370922ff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:95:0c:db:ba:27:4e:5c:99:3f:ff:0e:3f:
7a:02:2b:2c:30:a0:c8:34:76:ee:10:fb:15:7d:78:
d8:e0:66:3e:c1:73:7d:fb:1b:79:b8:ea:03:7f:b2:
5c:dc:ce:04:cc:a2:c2:b9:43:f1:00:86:49:9a:b4:
06:f6:72:80:50:f2:e9:71:83:c4:6f:4c:38:a3:ee:
c2:9b:40:7f:8a:71:cf:fc:5a:e9:2e:3d:68:8e:97:
45:8d:5a:90:db:77:f8:84:b1:cf:93:91:fa:71:7d:
90:aa:ed:5f:34:a3:af:c1:12:63:a3:09:79:f3:be:
9b:b9:86:2f:60:c3:7e:47:11:07:d6:db:77:27:df:
c3:ec:8b:88:5b:32:7a:05:f7:17:57:14:bf:ed:d0:
21:34:90:31:b9:11:44:7a:ee:13:09:1d:b7:48:08:
ee:c0:91:8c:88:e9:74:c5:1c:0b:51:42:eb:d6:a2:
13:16:a9:5d:39:45:4b:ed:d7:96:01:76:2f:f1:f9:
2e:f6:68:07:cc:25:1d:f9:80:75:d7:cd:b5:92:d2:
72:55:99:92:97:99:6d:bf:39:d5:f6:fd:ab:6f:07:
c1:15:cd:32:62:22:2b:1d:da:9c:f1:b3:a3:ee:84:
33:6f:98:16:f8:1c:a4:43:a4:8f:2c:7a:5e:ab:ae:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:0D:BB:29:BA:46:E1:54:26:A7:D2:B7:B5:3A:37:09:22:FF:44
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a9:ed:83:1d:57:6e:13:25:2d:80:d5:8e:be:76:6f:8e:62:
71:65:27:0f:d0:14:88:e8:a2:27:2d:70:66:8d:0e:d8:8c:8b:
4a:48:15:d0:02:8b:b5:50:57:ee:94:e4:f4:11:4e:47:e3:d7:
bd:63:5c:8d:30:9a:e9:19:41:e8:fc:74:02:05:38:d9:de:82:
13:66:94:66:e4:9d:93:51:bc:db:3c:2a:8d:43:7c:5a:a1:a0:
57:fb:2b:5e:8a:1d:c7:70:8b:ed:69:9d:84:39:25:03:51:b2:
0a:f7:4b:c0:ab:54:97:65:e9:e4:b5:39:f1:06:e3:7f:be:df:
66:bd:8c:b4:9f:86:68:c4:c4:0e:12:1a:15:fb:f3:bc:ca:3b:
dd:94:b2:a9:b1:98:41:3e:76:62:90:9f:a5:fa:b8:27:89:e0:
92:af:a4:5e:e4:cb:1c:11:33:83:b4:1c:09:5d:9b:42:6d:ac:
e8:bc:2a:ae:39:6b:6d:a7:e5:cb:25:5a:f3:84:5f:41:55:47:
05:8b:3a:fd:ec:ea:4e:a0:f1:f2:bb:6b:9d:1a:33:7c:a5:04:
a0:79:15:75:17:df:5d:26:12:92:85:68:13:2f:aa:77:45:a5:
25:be:05:50:86:2b:fd:49:7b:33:59:5b:19:d6:9c:75:fd:9c:
94:9d:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:46:51 2026 by rpki-client