
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft (raw, json)
Hash identifier: m4TixZ+ZQRXVdTccX/HNv92pCTVGvulvffYsXv1h/Ds=
Subject key identifier: CE:F9:67:67:DE:56:0F:D1:98:B8:84:F9:B2:06:57:07:48:1A:60:C4
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 019D269635226EBC06E7E72D77C21BA961C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl (hash: HaFMbeoKv/zgvuK/nShaj2p7eES3sWhpfq4wbomP1x8=)
2: eIeriWh_mMm8_RuNws4nkC-T7Ks.roa (hash: nkYOaP08jdtxIPJ51r8XY78drY5LBTKGpsUvu+BLGMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:35:22:6e:bc:06:e7:e7:2d:77:c2:1b:a9:61:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=cef96767de560fd198b884f9b2065707481a60c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:7c:42:d6:ff:e7:15:51:7a:30:a5:de:69:
9f:e7:ec:f6:02:4e:3e:a0:ee:0d:76:05:c5:0e:aa:
6f:d9:45:14:f6:90:1e:8f:8b:c4:cf:b0:4e:4e:87:
9d:89:73:a7:c6:d5:b1:bb:19:bd:6a:fd:41:0b:67:
52:18:25:48:16:52:bd:90:f2:ed:38:3c:a3:97:c7:
ff:bf:b2:3c:bc:d1:78:bc:e8:02:55:a5:6c:8f:6b:
d8:60:28:b5:3b:93:40:98:5d:7c:ab:eb:6c:5b:ef:
bd:f7:a3:62:45:a1:ee:9c:5f:63:bf:da:f5:65:9d:
ea:e1:92:b5:28:b2:f7:fb:f3:3c:c6:eb:8e:b2:94:
aa:f2:a4:cc:c9:ae:71:81:18:3b:d0:8b:4f:15:19:
00:6a:7d:00:4c:ec:46:55:90:ad:99:db:74:0f:0e:
d7:f6:74:36:73:9f:04:73:8e:af:71:12:34:5f:7c:
f1:74:24:bb:60:2d:a3:76:cd:87:03:e4:62:db:94:
c4:a2:64:cf:7f:48:14:4e:1e:0e:8b:90:33:f8:70:
c2:7d:9e:a0:c5:af:32:cd:12:d6:f6:04:8b:3c:c8:
08:9d:8c:99:1f:10:82:bd:98:91:2e:5e:56:11:1d:
0f:43:46:13:12:0c:f9:d4:14:a6:e0:65:52:42:f8:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:67:67:DE:56:0F:D1:98:B8:84:F9:B2:06:57:07:48:1A:60:C4
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:5c:86:a3:40:62:3f:e9:3a:e1:0d:4f:7b:f0:2b:39:94:
fc:f9:7e:53:1a:f1:c3:0a:d0:cf:85:08:8c:2a:96:d8:7d:12:
39:d1:91:77:38:28:17:7a:85:d8:fe:10:f0:7b:cd:1c:73:2a:
09:55:67:1e:b9:6a:9b:ee:08:46:76:58:e7:ca:3f:2a:ec:a1:
7a:e7:26:60:be:82:07:8a:56:ee:1c:e1:5b:9e:fb:60:43:01:
83:f5:46:4f:f0:d8:a3:de:a5:27:9a:67:18:39:67:8a:37:ef:
ba:df:a0:3e:d9:8e:4d:83:17:0e:54:e9:34:bd:2d:e6:a8:07:
b2:e2:d1:2d:bc:0c:27:4e:e4:b6:ff:34:37:06:8b:13:81:a4:
2f:0c:e1:c3:e0:3f:a2:31:f7:93:71:28:96:50:b6:b5:01:ba:
3f:87:c3:6d:93:fa:e0:71:34:fd:6c:17:74:92:5a:6e:f9:f9:
8d:22:9f:8f:cd:f0:45:82:d2:ff:ad:f3:fd:d5:9e:24:ed:7b:
a7:6f:e9:26:f9:ca:a7:6b:17:60:c6:93:4f:19:1b:ca:3b:2d:
89:fe:a0:f7:d7:76:4a:29:b6:40:95:ce:e8:37:de:9a:74:2d:
7d:bf:03:13:61:8b:1e:2d:55:cb:c7:08:05:e7:da:9e:a5:17:
8a:b7:bd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljUibrwG5+ctd8IbqWHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Mzg3YzU2YjMzMWZmODRiYzEwZDhhYzkwZTFlMmMxNmYx
NzIzNDUwHhcNMjYwMzI1MjAwMTExWhcNMjYwMzI2MjAwMTExWjAzMTEwLwYDVQQD
EyhjZWY5Njc2N2RlNTYwZmQxOThiODg0ZjliMjA2NTcwNzQ4MWE2MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPF8Qtb/5xVRejCl3mmf5+z2Ak4+
oO4NdgXFDqpv2UUU9pAej4vEz7BOToediXOnxtWxuxm9av1BC2dSGCVIFlK9kPLt
ODyjl8f/v7I8vNF4vOgCVaVsj2vYYCi1O5NAmF18q+tsW++996NiRaHunF9jv9r1
ZZ3q4ZK1KLL3+/M8xuuOspSq8qTMya5xgRg70ItPFRkAan0ATOxGVZCtmdt0Dw7X
9nQ2c58Ec46vcRI0X3zxdCS7YC2jds2HA+Ri25TEomTPf0gUTh4Oi5Az+HDCfZ6g
xa8yzRLW9gSLPMgInYyZHxCCvZiRLl5WER0PQ0YTEgz51BSm4GVSQvgc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM75Z2feVg/RmLiE+bIGVwdIGmDEMB8GA1UdIwQY
MBaAFEY4fFazMf+EvBDYrJDh4sFvFyNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUt
MjNiYjM5YTgzNDgxLzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYjQwZmYtYjFlMS00OTUxLTkxNjUtMjNiYjM5YTgzNDgx
LzEvUmpoOFZyTXhfNFM4RU5pc2tPSGl3VzhYSTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdBchqNA
Yj/pOuENT3vwKzmU/Pl+UxrxwwrQz4UIjCqW2H0SOdGRdzgoF3qF2P4Q8HvNHHMq
CVVnHrlqm+4IRnZY58o/KuyheucmYL6CB4pW7hzhW577YEMBg/VGT/DYo96lJ5pn
GDlnijfvut+gPtmOTYMXDlTpNL0t5qgHsuLRLbwMJ07ktv80NwaLE4GkLwzhw+A/
ojH3k3EollC2tQG6P4fDbZP64HE0/WwXdJJabvn5jSKfj83wRYLS/63z/dWeJO17
p2/pJvnKp2sXYMaTTxkbyjstif6g99d2Sim2QJXO6DfemnQtfb8DE2GLHi1Vy8cI
BefanqUXire9/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client