Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: fN7gt6bLJW5AMYJXqDoJYerKSQHpZKwFSh9U6KSXO1c=
Subject key identifier: A6:2F:7E:DB:3E:AE:B2:7A:C3:5C:2C:A1:9F:F3:BA:C3:EE:9A:72:56
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019D269667B97C2F320A25BC3BB6C2B5CC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0755
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: X6hEWLYEdEv1iSF-WMSAOFXzSHs.roa (hash: Nb+VgJ1DjsjNcMb5SIikOaRGsphDI/9jFMQHFL/7b9M=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: j7KJdoJkiOb8Jwq6421Ut63T3tu0lpe5HiYuN+ENu3g=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:67:b9:7c:2f:32:0a:25:bc:3b:b6:c2:b5:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=a62f7edb3eaeb27ac35c2ca19ff3bac3ee9a7256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:4e:0b:52:ad:75:eb:d3:b6:08:c4:e5:58:
9a:4a:8c:47:69:02:36:05:85:b5:c7:a8:dd:b2:06:
26:ef:9c:cf:45:85:90:2b:3d:5a:d8:d4:18:55:0b:
8e:5d:b5:39:ae:0a:45:42:6a:b7:59:a1:1e:0e:4f:
aa:4e:6b:d5:15:b3:8b:86:1a:2d:77:52:af:fd:8c:
cc:84:37:8b:21:11:8b:56:9f:51:f7:95:74:03:5f:
6d:73:45:08:03:f4:33:ee:86:50:d2:7d:2a:b9:cb:
00:78:49:20:a5:5a:17:90:19:12:2f:d7:bc:88:2b:
92:f0:1f:d4:13:9f:dd:de:3c:dd:c1:68:47:94:d5:
5e:f9:e4:ed:e9:76:24:e7:a7:0c:65:ba:52:15:dc:
23:15:bd:9c:96:9a:3f:9d:6d:b4:e6:9c:03:bd:03:
be:6c:2f:12:0c:5d:74:72:72:8f:af:b6:07:76:1f:
56:c4:55:66:b0:6e:07:18:b6:c5:80:eb:b1:ed:79:
dc:fe:d0:d8:30:19:1b:04:f4:77:3e:c1:82:5c:ce:
c5:64:0c:e9:71:36:62:45:ab:7a:af:76:d3:35:04:
1a:b0:76:85:93:46:43:fd:b3:47:1f:28:5b:1a:44:
d2:3e:eb:d1:db:0b:f8:bd:6f:1a:a1:80:eb:5e:c8:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:7E:DB:3E:AE:B2:7A:C3:5C:2C:A1:9F:F3:BA:C3:EE:9A:72:56
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:f9:4a:53:14:3f:f6:0d:38:90:93:39:36:16:db:60:5d:
48:cf:07:21:83:6d:90:bd:aa:11:7a:2b:3f:4f:33:62:f6:7d:
3b:54:93:ee:83:1d:3a:be:72:36:e7:40:2b:a4:ef:42:c3:c0:
6a:ef:c5:e2:41:40:0a:22:8e:31:74:06:f1:c8:88:03:4b:11:
a5:a1:cb:2d:08:f3:67:83:30:60:27:fc:16:5f:40:2c:9e:58:
f7:ed:1d:91:b7:c4:9c:e3:ac:97:b3:3f:10:a7:50:db:f2:c6:
85:51:86:f9:97:01:f7:7f:e8:ca:0f:f5:32:89:9c:12:93:d7:
eb:cc:c3:66:3b:7c:ae:6d:99:c3:8b:d2:5d:b8:7c:69:f8:bf:
38:c1:5d:01:2f:1f:62:1f:9f:0f:bd:70:85:4f:07:21:96:d4:
32:7d:db:d7:e1:fd:38:97:9d:6b:52:fc:9c:e3:5a:b4:21:2e:
97:46:2f:14:1d:e4:48:19:58:4c:e8:e1:55:04:a1:96:99:60:
0b:ff:61:47:6e:2c:03:57:82:e4:b0:b9:c8:96:2a:78:e1:72:
43:0d:9a:6c:45:99:bc:f8:5c:08:00:c0:b2:0a:77:ef:f0:d1:
12:d8:fd:68:c6:c1:22:77:1e:94:6f:e3:8b:84:f6:c0:ff:83:
90:36:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:34 2026 by rpki-client