Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: ymMi5+E4tMGxJUxEplPHySGwvtGFfk1/sF6TxqSv+t8=
Subject key identifier: 4A:94:DE:E1:CC:83:A5:2C:28:ED:95:E4:7E:DD:55:71:B2:E3:56:67
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 019D265F72A27E63C39BD4432E5CB67D033A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 1758
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: WIVUX3mi5d114/S/JHU2Wizpt+rDoZ7+0jjMBSKLE2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:72:a2:7e:63:c3:9b:d4:43:2e:5c:b6:7d:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=4a94dee1cc83a52c28ed95e47edd5571b2e35667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:c6:ff:10:be:f7:4f:81:c7:d5:76:73:20:
81:4f:74:cb:26:86:5a:f0:07:1d:17:22:7b:7f:4e:
3f:25:bf:b8:f9:ed:0d:97:c3:a1:40:7e:05:9d:d3:
61:12:32:41:d2:45:e5:a5:18:cc:42:5f:94:2d:a2:
1e:d5:7a:1f:7d:92:35:de:a9:be:29:a8:77:d4:18:
7f:45:57:49:40:35:94:c9:77:df:eb:fc:79:43:8b:
d9:e1:19:cd:f2:14:ef:45:51:9b:b9:51:04:35:e8:
99:ca:5d:ff:17:6e:d3:1e:07:89:18:b2:72:2b:0a:
b3:27:70:b0:72:df:c8:f3:9d:cf:7f:90:be:b8:6a:
3f:40:0e:9f:c9:c3:64:9c:b9:12:ec:d8:68:a8:a1:
dd:63:77:af:d5:fa:94:33:ba:35:6a:76:55:73:38:
ed:f3:d3:ab:2a:d2:98:86:35:92:43:a6:95:eb:7a:
74:b3:45:c1:eb:9c:56:51:5b:37:c3:53:13:31:94:
f6:d9:5a:4b:3b:42:54:59:48:02:49:e2:ce:89:e8:
99:36:8d:c1:91:a7:53:b2:32:0c:b2:4d:26:a0:4b:
5d:16:5d:ad:a1:d5:a3:77:5d:86:2f:d0:a9:8f:cb:
fd:e1:1d:5a:10:b6:2d:07:16:33:bb:33:47:a6:15:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:DE:E1:CC:83:A5:2C:28:ED:95:E4:7E:DD:55:71:B2:E3:56:67
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:74:e3:ba:c9:85:6e:3c:50:72:4c:8f:06:a1:f0:ed:c7:db:
01:74:45:60:cd:5f:ea:1b:a6:a1:8b:5e:4b:30:16:f5:72:df:
13:ec:2b:c7:e8:9c:04:18:6f:f6:b9:07:7b:97:20:8e:1c:a5:
b0:f6:b1:14:f7:f3:59:87:b2:04:7f:d3:78:05:a3:61:81:50:
e0:9b:bd:39:1c:82:61:5a:43:9d:de:9b:2a:c3:38:10:6e:0d:
9e:0b:ed:39:07:c6:69:68:f7:d7:87:b2:48:4a:26:ef:7b:d9:
9d:13:73:1d:cd:23:7d:f6:8b:de:f6:32:15:0b:3b:2d:a1:a9:
00:4a:a1:8a:e3:c1:d8:24:29:cb:3f:f9:6d:39:5a:71:b8:83:
6d:7a:eb:6d:1b:04:9b:f9:b2:5f:11:ef:cb:39:82:8c:93:a9:
27:18:1a:c1:10:3a:b2:19:f5:8e:99:29:32:4c:a3:4c:cd:b4:
bc:35:a7:e5:04:b6:48:dc:b3:0d:13:2b:9f:6c:51:cc:16:72:
89:ef:b4:65:ee:8a:9a:08:13:32:d0:18:fd:2b:c2:cc:1d:43:
c0:5e:86:94:3d:fa:3d:0e:c8:64:f2:99:8b:14:25:e0:f5:0f:
bd:63:43:86:4b:0e:36:2b:0c:21:21:04:9b:1d:1f:b7:d2:51:
8c:d8:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:04 2026 by rpki-client