Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: 854m4DJghJmkBF6aPemse3XtwxEvugjOYl9HEcgqsYA=
Subject key identifier: B5:60:CD:F0:73:9C:87:7B:75:CB:6E:20:8B:49:E8:7D:27:30:FB:9B
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019F92ED0E11F7ABB27766ACB00FE217D2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0897
Signing time: Fri 24 Jul 2026 07:00:36 +0000
Manifest this update: Fri 24 Jul 2026 07:00:36 +0000
Manifest next update: Sat 25 Jul 2026 07:00:36 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: 4rTqumUKR56fmTV7Ph+jwKXQ0TAE+a5Km2/HNRp6wiU=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:0e:11:f7:ab:b2:77:66:ac:b0:0f:e2:17:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jul 24 07:00:36 2026 GMT
Not After : Jul 25 07:00:36 2026 GMT
Subject: CN=b560cdf0739c877b75cb6e208b49e87d2730fb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:34:f3:ba:68:8b:ac:18:ff:e9:23:b4:85:60:
33:cb:d8:b8:24:f8:e5:fd:41:c7:0d:0c:01:0c:f7:
99:e6:ec:d6:9b:aa:e3:66:35:6e:cc:02:d5:3e:54:
6a:56:eb:e8:b0:35:7f:b4:70:09:b0:63:36:de:40:
69:04:46:e0:38:ea:bd:4a:10:91:30:41:2d:d8:c3:
8f:fe:ac:8e:b8:ae:59:ea:de:dc:ba:cf:23:93:1d:
41:3e:0a:94:f1:e2:e4:2b:05:31:94:5e:07:03:56:
f7:03:a7:45:04:b3:30:37:93:20:9d:c8:9e:6d:ba:
e8:e7:3a:d3:4e:46:d8:87:62:67:5b:16:17:ad:15:
f1:a7:02:39:90:07:57:a2:cf:9f:ff:0d:1b:e5:25:
08:e7:49:57:94:f7:a2:54:d2:34:89:a0:c6:73:29:
51:32:34:a1:a4:af:dc:f1:2d:28:60:78:df:c2:b4:
8d:4a:d8:45:44:75:e1:b4:e2:87:83:fe:28:e5:9a:
e8:cb:94:35:34:c1:15:ec:25:5b:ee:4a:59:4d:bf:
19:98:16:61:fe:1c:9a:b1:d8:25:9a:eb:1b:05:78:
c7:bc:ab:aa:9e:14:2a:61:b8:7c:c5:3d:07:5b:e4:
53:e2:46:65:1a:08:1a:46:66:2d:94:0a:92:48:8f:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:60:CD:F0:73:9C:87:7B:75:CB:6E:20:8B:49:E8:7D:27:30:FB:9B
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:e5:5e:57:b4:22:0a:30:9a:be:0e:92:69:5f:43:3c:75:
d5:fd:9d:a3:f7:f0:33:ae:f5:ff:5c:54:ea:58:0c:05:f5:f5:
e0:1f:f6:9f:0c:42:ef:fe:3e:38:21:32:f3:55:eb:62:65:60:
54:52:5d:13:12:37:cd:b9:7a:8e:41:19:ed:b6:52:2a:b1:3f:
b6:ae:c8:fe:f9:03:fb:24:f5:92:f1:5b:8e:1d:df:19:4f:2e:
07:78:f0:13:81:ec:9a:84:c8:4b:ab:d8:b8:51:15:fd:02:87:
bd:a2:c5:3a:29:42:f3:cb:7d:da:07:1e:5b:75:c7:d2:14:06:
1a:23:c8:fe:93:a8:e9:1a:51:47:c0:45:0f:63:4c:6a:88:7b:
a5:18:fb:e7:99:33:54:96:7e:7c:7c:4d:a7:6b:ff:a0:b6:a6:
2e:73:5b:23:2d:90:bc:2b:c5:f2:79:0f:fa:61:cf:6c:7e:06:
52:2e:ea:58:e7:41:91:69:52:fd:6e:22:0c:ff:3e:83:a3:1d:
5c:ee:d9:d5:d8:17:21:fa:ca:f3:99:c8:7e:03:89:b5:b9:1a:
0d:c5:3e:62:b1:92:c9:41:c2:e0:36:61:34:fb:c9:dc:24:a4:
93:fe:43:98:9d:79:95:23:3d:f1:0b:25:3c:54:0d:7a:23:fd:
f3:4c:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:42 2026 by rpki-client