Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: CMT+44PXjO6WE45d+PakuaACNP919zJCLPDC3goqtZY=
Subject key identifier: 76:39:FC:7A:F2:EB:36:85:C3:27:B9:17:8B:88:5A:A4:49:BD:EA:0E
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 01A0CFA3C841F865208C739BE8EB31DCC001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 09D4
Signing time: Wed 23 Sep 2026 19:00:12 +0000
Manifest this update: Wed 23 Sep 2026 19:00:12 +0000
Manifest next update: Thu 24 Sep 2026 19:00:12 +0000
Files and hashes: 1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: SOPlnzNaKlRCxYsbFGk3001oUw5Q7dNUaGFSO9lie08=)
3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:c8:41:f8:65:20:8c:73:9b:e8:eb:31:dc:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: Sep 23 19:00:12 2026 GMT
Not After : Sep 24 19:00:12 2026 GMT
Subject: CN=7639fc7af2eb3685c327b9178b885aa449bdea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:83:0a:48:bb:ea:de:76:d2:11:e6:2c:d4:
e0:66:08:ea:43:0a:ca:21:52:33:7b:e1:5a:f1:f2:
6e:04:1a:2d:5d:0a:76:8e:97:4b:ef:0b:51:3a:57:
00:ae:0b:4f:e1:f4:2a:3e:79:61:93:e9:a3:a1:bc:
f1:e7:22:1b:47:b9:9c:e1:a6:01:b3:df:2d:83:52:
f8:6f:c1:b5:3f:c3:9c:4c:57:4a:fc:3d:44:52:6a:
30:73:56:a5:62:a5:39:c3:47:50:fb:2e:9b:96:5f:
f6:11:91:a1:e3:38:7f:1e:5b:a8:d4:90:91:96:10:
f6:4e:9f:13:5e:60:18:1d:60:cc:a2:a8:aa:65:e5:
9f:b3:70:3e:4b:4f:f1:fe:51:d9:80:a0:c5:92:33:
a2:98:f3:a7:55:13:49:af:46:cf:84:cc:fe:6f:9d:
65:8f:4c:5b:bf:bd:33:6e:d7:e3:73:12:da:8b:89:
96:91:99:c9:be:be:77:b8:9a:c8:72:b9:68:c1:08:
7c:f7:05:fd:9f:7b:a5:03:46:68:0b:0e:37:c8:6c:
4d:68:4c:0b:29:d6:9b:04:60:b6:30:18:89:6d:81:
3b:22:16:41:60:79:71:a3:04:12:75:5c:1f:94:74:
e6:e3:41:54:d6:e2:d8:c1:0d:da:e7:ce:29:e7:62:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:FC:7A:F2:EB:36:85:C3:27:B9:17:8B:88:5A:A4:49:BD:EA:0E
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4e:ee:fa:12:92:6a:e7:8b:58:93:1f:9b:4a:89:d6:e2:61:
57:38:60:bc:ec:d9:03:70:68:ba:6d:8b:b4:33:4e:3e:6f:b4:
34:5d:4d:6f:ad:2c:ad:d3:0e:f0:62:b6:82:25:7f:20:3c:64:
b2:d9:49:0c:34:69:dc:d9:81:43:a5:54:c6:9c:fc:29:2b:46:
d6:f9:79:54:58:70:23:99:81:c4:b1:a8:67:9b:0a:cd:d9:32:
c9:cc:9f:09:fe:8c:a1:c5:7f:44:b6:22:de:33:27:ce:ac:71:
bd:75:bf:2c:75:45:ab:74:74:bc:96:eb:d3:ba:c0:6c:a6:d7:
ee:40:15:91:00:68:33:ee:80:ea:3f:af:e2:37:b9:d1:3e:0c:
ee:fa:f4:2a:57:a3:d0:ea:4e:f4:ef:a1:34:57:33:a0:30:91:
19:81:4d:fb:6b:93:ca:f9:e9:e4:75:d0:1f:0c:82:23:7f:3a:
4f:26:64:a0:14:04:d1:24:80:ca:f4:42:51:09:f4:7f:d8:0d:
6c:1f:18:f1:59:ae:83:9a:b7:a9:4a:10:3d:f1:9b:90:d0:60:
4d:f8:f0:36:fe:ad:ee:80:ee:88:f5:a8:e8:d3:26:cd:b7:1c:
f2:09:e1:48:22:9a:34:47:56:d6:ac:6e:59:42:b7:5e:80:86:
80:52:7a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:36 2026 by rpki-client