Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: OzTPXLiM6al7FONeuyxrNYjB1I+9GC+MzE9POKXfTxY=
Subject key identifier: F3:0B:FE:97:1A:C9:ED:A1:84:51:D7:1E:FB:07:13:B3:38:1F:55:78
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019D29617309FBD8628A0190D570BED139DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: E4
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: OpO6Mw7WiKNMDPPPumPP6PzuHY4uaqURxF+z3aCtzAc=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:73:09:fb:d8:62:8a:01:90:d5:70:be:d1:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=f30bfe971ac9eda18451d71efb0713b3381f5578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:b6:2d:80:eb:e2:11:5c:a0:c0:c2:67:41:
bc:d4:ea:ce:e0:05:a2:0a:95:4a:66:77:d7:e9:27:
90:c9:da:95:d8:37:15:00:e4:7a:8b:e5:0b:aa:c9:
1a:8b:d9:25:48:7b:47:59:63:61:0c:cf:e4:4e:6d:
58:64:8f:2a:07:4f:a0:9f:61:ce:f5:5f:3a:5a:15:
0e:6e:0d:e3:80:59:cc:8d:92:b2:17:9e:9d:2a:e8:
2e:6b:f7:1d:27:a3:c6:6d:be:ce:1c:ac:a7:55:31:
31:f5:9d:45:47:df:4a:89:77:a8:1a:cf:00:b8:80:
a8:bf:e0:5d:73:3f:7a:05:ae:fb:f6:25:9a:55:c5:
3c:60:d6:8e:38:4d:74:70:f8:e7:94:4e:c0:bf:41:
81:90:37:3e:d5:0d:9b:24:36:5c:7a:83:84:0a:4c:
6e:86:b2:c4:48:94:2d:2f:f7:e3:9c:c5:ff:dc:cf:
4a:61:b3:88:cd:40:35:1d:12:36:ee:fb:6d:3c:c7:
09:cd:60:fc:14:fc:a4:61:60:e0:4e:ee:13:60:7a:
8a:27:73:93:e6:3b:5c:48:e4:27:e2:13:9f:43:98:
a9:ca:a3:4f:3a:85:7b:8c:8f:87:a4:4e:a4:6e:87:
15:2c:17:f5:0f:c2:40:95:86:4d:40:d8:15:38:87:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0B:FE:97:1A:C9:ED:A1:84:51:D7:1E:FB:07:13:B3:38:1F:55:78
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:25:86:07:78:4e:01:22:4c:0a:23:89:9a:a1:5a:d8:25:b4:
71:05:e6:f7:54:b2:e4:93:79:8c:66:2e:0f:c3:78:a7:7c:b7:
7b:3d:e3:72:4e:03:f0:fc:c0:5a:a0:0f:b9:2f:9e:69:07:0f:
5d:6c:b1:3d:e9:04:08:22:7a:8d:0d:3d:b8:7f:67:93:e3:3f:
d6:0f:44:b8:56:cf:d6:a4:5e:4a:1c:db:77:b0:c5:cd:6d:b0:
43:6d:e3:09:16:6b:7d:0b:3c:de:de:d2:a2:d7:3e:9f:0d:b2:
61:37:e6:83:7a:94:a0:d5:8b:7c:0a:ed:13:27:f7:8c:48:55:
f5:71:9f:95:a0:1d:4e:94:66:e4:82:0a:62:be:a2:c0:0d:38:
2d:b5:54:10:fc:89:a9:af:44:4c:4f:8b:ce:d3:8a:90:04:72:
6c:0a:c6:a0:02:db:ed:d6:f1:35:6e:6f:43:4d:9f:06:34:13:
09:25:28:e4:72:2b:20:44:b1:fa:72:b1:0a:0b:54:a8:c0:c8:
8b:1f:5c:45:d3:a1:30:d0:73:54:96:13:d6:37:67:b8:d0:f6:
e6:d6:c4:6d:cb:51:e4:be:b4:ba:6b:56:7b:32:39:a2:bb:ae:
da:59:02:fa:66:32:f6:15:7a:36:07:74:21:dd:d7:1c:01:51:
64:ec:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:18 2026 by rpki-client