Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: ckB2QwnMDwrV56UnDoRhtTEZZH0i02Zx+hVMo7h+nlA=
Subject key identifier: B6:3F:11:90:2B:60:FA:28:8B:8B:95:67:53:A5:89:4B:82:9F:C6:BF
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 01A0E6D34312F1706623F52C92533C5541F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0947
Signing time: Mon 28 Sep 2026 07:03:19 +0000
Manifest this update: Mon 28 Sep 2026 07:03:19 +0000
Manifest next update: Tue 29 Sep 2026 07:03:19 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: lEThiJEduZ2bI+SmLSbxwbcCvmjUU/nA6sUX6Y3gDeE=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:43:12:f1:70:66:23:f5:2c:92:53:3c:55:41:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Sep 28 07:03:19 2026 GMT
Not After : Sep 29 07:03:19 2026 GMT
Subject: CN=b63f11902b60fa288b8b956753a5894b829fc6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:03:99:94:de:d9:2c:1d:cf:68:32:4e:95:
95:be:fd:7c:0f:0a:10:a0:d4:90:1f:ba:de:41:0b:
e0:34:ba:84:93:91:27:67:35:c8:b9:eb:53:ea:52:
40:cc:a8:98:3c:b7:a5:73:52:1b:d9:27:2e:9f:04:
88:32:0c:2b:5c:6e:25:64:f3:6e:69:9c:20:7c:01:
f4:54:64:1d:eb:f2:23:f2:01:f5:e7:e8:56:09:5e:
54:22:ec:65:c7:13:3f:13:61:cd:45:bf:ec:8b:b6:
9b:21:c2:b8:94:5b:5f:ad:c8:ab:9a:1d:93:3f:25:
12:f9:c0:d6:78:a7:13:55:6f:70:c4:61:26:8a:91:
28:6d:7b:96:f8:48:8c:75:d9:1a:32:2b:a6:fc:a4:
44:9c:6d:3f:22:8e:82:8e:53:d5:9c:62:92:d4:b2:
0c:22:14:f7:9f:34:f5:c5:77:2b:83:11:45:fe:2f:
a6:12:07:6d:13:45:36:cf:39:60:38:9b:bc:f0:93:
83:4f:4c:41:65:53:00:3a:69:fb:b3:0f:c7:54:f5:
3b:05:b1:83:77:4f:17:53:3b:a7:66:af:04:e5:39:
60:2a:d3:d8:ba:d3:4b:24:f1:22:23:84:96:56:ad:
36:b8:b8:25:ec:14:7f:49:e7:e6:8f:ad:b3:6f:d8:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:11:90:2B:60:FA:28:8B:8B:95:67:53:A5:89:4B:82:9F:C6:BF
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ce:4d:d4:48:e2:67:64:4a:60:75:68:36:4f:f6:a2:17:f9:
79:73:f3:8d:4b:a0:ea:0a:b3:3c:a2:2b:bd:6a:8c:54:56:98:
ce:17:bb:d7:bb:ab:a6:c9:4d:48:18:7e:a5:d0:d4:01:55:d8:
61:1d:f4:fe:0c:16:6f:e6:86:0b:f5:c2:3e:94:71:a1:8b:4b:
46:23:e2:6b:3d:d8:b3:a3:52:cf:0c:72:87:c1:59:f3:29:88:
56:eb:bf:5c:fc:0f:ff:45:16:6c:84:90:c0:81:96:c6:a2:69:
a0:ad:88:a7:71:fa:9e:21:27:f0:42:fb:c5:a1:3d:6c:ba:6d:
59:37:76:8b:49:04:9e:89:58:a4:b0:67:4a:20:19:87:63:af:
76:75:b4:d3:e5:89:e8:55:d1:16:54:13:72:20:1a:d9:9e:c4:
ce:07:ef:24:81:6d:bd:36:b6:7e:b0:b9:53:2a:23:d8:27:aa:
fc:27:62:8a:0c:f2:89:b8:3f:af:1f:c3:ca:1d:a2:74:c6:a2:
0c:a2:9c:08:44:52:60:3f:01:a4:fc:56:84:fc:de:02:74:a8:
53:9e:46:70:1a:34:3b:dd:b7:7f:8a:27:60:a5:7e:79:b5:8c:
7f:68:0d:e6:12:cd:40:27:01:f7:1d:5c:8d:7c:4a:33:c9:33:
d2:8b:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:34:05 2026 by rpki-client