Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: TSHxbTbdkSxlmLoljof40V9WoRpD8ObbUJv3G6UdOIQ=
Subject key identifier: 3B:7D:B4:64:82:97:A0:0B:2A:D2:67:4F:B1:38:37:A8:76:78:85:8C
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01A0CD7E82236CDC2879F0B68E392B07ADD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1303
Signing time: Wed 23 Sep 2026 09:00:15 +0000
Manifest this update: Wed 23 Sep 2026 09:00:15 +0000
Manifest next update: Thu 24 Sep 2026 09:00:15 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: RbCHyraTPEuOtXJG4p4nx8EjFuKacncyAKn2muu9G7I=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:82:23:6c:dc:28:79:f0:b6:8e:39:2b:07:ad:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Sep 23 09:00:15 2026 GMT
Not After : Sep 24 09:00:15 2026 GMT
Subject: CN=3b7db4648297a00b2ad2674fb13837a87678858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:78:90:34:eb:90:dc:ea:b8:c6:ca:ef:ec:
b4:82:be:ca:26:dc:dc:0a:61:de:69:05:b7:c3:2a:
55:fe:14:3a:e0:ac:d2:54:43:66:46:0b:dd:a5:74:
81:d2:b3:4a:4b:25:96:02:84:ed:cc:d7:7b:29:4d:
bd:bf:56:8b:04:09:b2:66:0d:8a:ba:a1:a8:a9:9b:
1f:bf:59:9c:bd:ba:6d:24:78:76:89:8c:91:2f:b7:
bf:41:f9:b2:32:38:c0:bc:3a:5a:da:08:91:6f:fa:
4c:50:c4:55:38:cf:f1:78:6a:ce:fd:4b:c8:c0:50:
e8:0d:26:c1:14:e0:d3:91:05:d6:75:d3:d3:8b:53:
96:5e:a6:b6:6b:86:f3:04:88:03:bc:49:9c:d1:d5:
3b:72:c7:b5:09:92:62:14:28:05:9a:04:05:05:08:
af:93:eb:71:39:fb:8a:76:f4:2b:d7:57:e2:05:6b:
8a:8e:9c:86:94:8d:f7:b8:5f:39:71:73:0d:c1:67:
ee:0c:7e:83:56:f7:5f:48:d2:98:6e:0b:ca:40:17:
02:95:52:f0:03:c6:6f:e0:0d:c6:94:04:cf:75:05:
12:69:98:eb:23:ca:9e:58:4f:b9:d1:53:2b:90:ba:
f0:00:d9:15:2f:93:f6:4c:56:27:b7:f9:66:8c:a9:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:B4:64:82:97:A0:0B:2A:D2:67:4F:B1:38:37:A8:76:78:85:8C
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:73:67:d1:b1:e4:bc:ea:83:c8:69:63:8e:39:a7:29:4e:74:
ec:b9:06:a5:2a:e6:2f:bf:4d:50:92:b6:03:df:7a:ee:89:aa:
95:a5:3e:7a:4e:b6:ff:e6:1b:43:8d:7f:af:a8:ca:45:97:2e:
f9:07:6f:67:9c:f2:ff:eb:18:90:4e:8c:fb:74:17:2e:6b:49:
1b:60:5d:f0:e7:5d:21:df:76:84:78:a6:9e:7b:89:0c:c1:8b:
5d:f0:cc:f0:20:6f:5b:97:5c:52:62:e8:0c:d2:85:3a:7b:9d:
fe:56:db:b8:02:19:02:c0:98:d3:35:1a:19:d2:5a:61:5b:b1:
b7:60:be:1e:ca:6b:13:e7:f2:22:73:fa:0a:08:c0:a6:13:03:
04:98:8f:58:ab:75:94:eb:04:ed:32:a3:f1:6a:eb:e5:49:ce:
62:58:ed:55:e7:75:cd:9d:3a:73:73:c2:65:b9:b3:d5:e3:e2:
24:05:9e:e5:78:b1:eb:35:d0:ed:b0:c8:17:73:d3:e0:79:b5:
ee:31:d1:ad:57:13:60:a7:d8:14:d0:5d:97:2e:1b:1f:6e:12:
9b:fe:35:85:c2:ec:18:e3:7e:57:ba:78:d1:d3:c6:f8:06:2c:
24:26:53:94:1c:ea:7d:ae:84:7a:35:d6:05:10:22:98:1b:5e:
49:79:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:44:02 2026 by rpki-client