Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json)
Hash identifier: 2WQEy/qEcplUGYXU+NARZYhvzP7USQbRyc93iFtMIWk=
Subject key identifier: AC:5F:8C:7B:2E:89:01:E6:B1:3A:92:6E:B5:09:6D:B0:BF:EA:0A:37
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial: 019E1E35F702906DAD6A464DBEEEB89DA619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
Manifest number: 086F
Signing time: Tue 12 May 2026 22:01:53 +0000
Manifest this update: Tue 12 May 2026 22:01:53 +0000
Manifest next update: Wed 13 May 2026 22:01:53 +0000
Files and hashes: 1: HmNbu7fvLqkuNCvwTP-eXZTgjiM.roa (hash: m/atD1lD6rUs54W8etAvVpgoMLgOWanL44spO3D1HdE=)
2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: bn8pDg7MusB33j9z/ekb1P5LQPrmJzgcajYfZZ+CoKU=)
3: eASxXKRxIs_kj-l1Ner7toyYCdA.roa (hash: ezV7+yb4XB2ubnd0AqkzgtqKTjmFbndpmZgG2VbnSno=)
4: pxOnqlq8UjygS2yRmi3Ur3nd-A4.roa (hash: aJhD1VyN6OGe5iE4OPjL2lO60V5k352+7aiUBwTHoKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f7:02:90:6d:ad:6a:46:4d:be:ee:b8:9d:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
Validity
Not Before: May 12 22:01:53 2026 GMT
Not After : May 13 22:01:53 2026 GMT
Subject: CN=ac5f8c7b2e8901e6b13a926eb5096db0bfea0a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:b0:bb:df:a0:c7:85:65:8b:d3:03:d3:dd:
e4:2b:4e:db:18:1a:cf:b6:bb:74:5b:70:07:91:e7:
d3:4d:dd:15:ea:1f:a5:86:1b:fe:77:18:97:82:b0:
eb:30:f4:2c:a0:a2:bf:3c:23:80:18:f2:5a:7f:9d:
c5:8c:f9:bd:e5:aa:bc:be:11:a4:d5:da:99:18:68:
49:c6:2a:2c:64:4b:21:6a:ac:c9:8e:51:6e:db:c7:
ec:ee:54:68:e2:8e:9f:5b:8b:0d:29:90:99:9f:8a:
35:cc:2f:f0:84:87:25:1f:4f:f0:84:36:e5:51:f3:
40:53:91:0b:24:ad:5f:1c:60:90:e9:f1:ab:7f:fc:
97:aa:fe:b2:7f:ee:99:1c:1b:a2:06:a7:bc:2f:06:
90:57:a7:7f:ee:35:59:78:c1:0c:5d:1f:a8:c0:fe:
e4:a2:18:4c:01:3e:6d:c1:03:a7:ed:46:e3:b0:d3:
0e:db:80:c3:1d:96:fb:6d:d0:fa:79:07:fb:4b:e0:
90:39:7b:cd:d3:50:52:77:08:01:70:8f:70:ed:98:
b3:6d:e1:d9:f3:fd:e0:47:29:87:11:4f:bc:85:25:
bf:3b:42:51:8d:5f:6e:0c:3f:aa:a1:e8:1e:91:39:
a1:23:25:56:98:6c:09:f2:65:eb:ff:5d:bb:fd:da:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:8C:7B:2E:89:01:E6:B1:3A:92:6E:B5:09:6D:B0:BF:EA:0A:37
X509v3 Authority Key Identifier:
keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:80:e6:5a:28:82:bb:a5:e8:88:b5:c7:19:a8:89:42:0a:
95:af:6b:aa:97:52:57:13:d2:7c:0f:5f:72:96:4b:aa:14:cf:
ec:a7:8f:be:d4:60:cb:44:e1:84:a4:e0:4f:49:54:ca:71:7b:
6b:f9:42:b9:29:75:ff:a9:c5:1b:94:99:f6:fd:20:d6:8b:83:
12:a8:7a:10:2e:ca:06:e8:3a:c7:6d:de:88:38:e6:5f:93:8a:
4e:ec:bc:6a:69:c6:08:0a:35:00:5d:d5:d5:87:09:4a:59:bc:
b9:dc:3f:51:f9:00:f0:1c:04:4b:02:9c:ac:f2:d7:a4:b3:6a:
2a:9c:0f:07:d0:81:e9:df:b4:5f:1f:0c:e2:26:e2:17:6d:03:
63:bf:ba:5c:22:95:ee:67:51:57:f8:3c:99:73:0f:ce:fc:50:
e3:3c:c0:40:91:06:61:3f:5f:a4:11:27:ee:b3:07:f2:9b:6a:
be:c9:b6:3d:56:1d:c3:3d:01:bc:23:32:6b:3b:7c:4f:43:e2:
4c:6d:a5:65:c6:ca:ee:52:f5:9d:13:6d:4e:36:01:cd:59:09:
f9:a3:4f:a7:42:36:a6:7b:9b:18:35:8a:7c:81:dc:e8:51:e9:
a8:6b:c9:c1:94:91:c2:73:99:f3:22:f1:05:30:6b:af:0e:52:
83:ad:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:07 2026 by rpki-client