Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
File: RJEWZsI21ozTG82FLhwbifzO8wA.mft (raw, json)
Hash identifier: mdQUPcQk3Fzw3j86SYXEq7jFDgDtzin2C2S9vC0iVGw=
Subject key identifier: 5E:83:72:76:F8:99:A5:D9:8D:A5:53:26:25:D1:F5:28:F1:B6:81:4A
Authority key identifier: 44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
Certificate issuer: /CN=44911666c236d68cd31bcd852e1c1b89fccef300
Certificate serial: 01A0DC4D80B9F04EBE7B051298C5DCEB220F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
Manifest number: 7A
Signing time: Sat 26 Sep 2026 06:01:01 +0000
Manifest this update: Sat 26 Sep 2026 06:01:01 +0000
Manifest next update: Sun 27 Sep 2026 06:01:01 +0000
Files and hashes: 1: RJEWZsI21ozTG82FLhwbifzO8wA.crl (hash: gHcG1jYxksVSUPkJEF5qhOI8BfPjTr3ZsHMCppTMa0I=)
2: gcBNVcYgOgoq_XeEPtbEZjKQPv4.roa (hash: I05foFhPwtjC41vNTBYky0OTidLIWUCpRGSlsMhk3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:80:b9:f0:4e:be:7b:05:12:98:c5:dc:eb:22:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44911666c236d68cd31bcd852e1c1b89fccef300
Validity
Not Before: Sep 26 06:01:01 2026 GMT
Not After : Sep 27 06:01:01 2026 GMT
Subject: CN=5e837276f899a5d98da5532625d1f528f1b6814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:1d:80:4c:69:0b:2d:35:e6:d0:9d:b8:09:
3e:63:70:cf:b8:3d:0f:9b:a7:c5:bb:70:20:9f:a7:
42:67:05:96:95:52:7c:a6:0b:18:4c:bf:2b:48:9f:
20:1f:31:ea:d0:b9:dc:bd:f3:92:52:4d:37:33:ae:
6c:a7:05:3a:ec:6c:3b:56:e2:65:f5:35:3a:57:b0:
16:9b:8c:00:82:69:7a:55:fe:17:4b:aa:24:76:37:
e2:ae:49:68:e8:b6:b3:1c:d0:e5:42:9b:80:c8:d6:
94:6e:a3:69:3d:c8:44:b3:0e:66:36:b6:60:c1:b8:
55:88:c6:47:bf:85:e7:1c:e4:0e:09:50:3a:44:25:
43:3d:23:47:0c:97:e4:fd:c6:dd:df:1f:60:f2:4b:
dc:d4:b2:9a:ab:5c:5f:c5:81:ba:04:bd:69:56:14:
12:fa:b9:79:b5:93:ac:5b:6a:92:05:93:1e:39:ab:
da:ed:07:a1:5f:9a:cc:f8:8f:d2:40:2a:e2:de:66:
b5:e8:42:4a:be:0d:07:79:54:cb:ec:ce:c0:77:82:
e8:aa:fe:9a:de:8d:f6:36:2a:77:4c:99:f8:30:d4:
03:50:35:13:6c:c7:b6:48:b9:58:56:c7:bd:aa:f3:
9a:0b:59:be:59:54:9c:36:72:06:66:c3:fb:ad:c4:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:83:72:76:F8:99:A5:D9:8D:A5:53:26:25:D1:F5:28:F1:B6:81:4A
X509v3 Authority Key Identifier:
keyid:44:91:16:66:C2:36:D6:8C:D3:1B:CD:85:2E:1C:1B:89:FC:CE:F3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJEWZsI21ozTG82FLhwbifzO8wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/470906-0c13-4a12-a363-7ef72bdda2dd/1/RJEWZsI21ozTG82FLhwbifzO8wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:12:ec:8e:42:6c:3d:fc:d1:ea:29:fd:4a:4f:f0:98:b0:fd:
c5:f4:01:3f:43:97:3a:0b:4f:f0:ad:7c:61:25:d6:ab:02:b3:
41:17:2b:07:89:82:57:73:1a:b7:65:b7:be:80:64:32:f8:5e:
38:31:7f:20:f4:ea:80:28:d4:e4:6a:27:0e:05:86:ce:34:6f:
bc:2a:37:a3:7c:de:fa:4b:dd:fb:19:9d:6e:6c:be:f6:f4:92:
da:3a:be:18:7f:2f:cc:5d:06:f6:d7:02:a1:9c:99:3a:a9:60:
e3:b8:d5:c3:6c:6a:01:23:07:94:96:eb:fc:d8:c8:37:86:16:
32:47:13:89:05:be:74:d0:59:d6:78:02:18:b1:b5:cd:93:7e:
5f:f6:49:59:2e:9f:b0:2a:ef:87:46:03:8a:43:6f:fc:fa:61:
d4:d2:9b:3d:96:0f:6a:33:0c:4f:04:14:f3:61:2c:a2:9a:11:
ba:9a:84:d5:9c:3d:44:a4:0b:0a:22:37:26:d3:d7:f6:15:b6:
a7:0f:a2:bb:7f:40:81:0a:e5:cc:1d:9e:f6:b7:dc:11:af:2f:
af:61:a6:89:55:24:43:f1:ba:60:65:ff:0f:5f:9e:d1:92:e4:
3f:5f:a2:56:08:0d:5d:cf:08:a0:66:c0:03:1a:a1:2b:e9:1a:
15:0f:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:35 2026 by rpki-client