Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: 2loqoZf0l2AWEVupayaEPAwfmNKyhq1gZjUQpWampzU=
Subject key identifier: 64:1E:B8:90:AE:A5:27:91:60:9A:13:BA:52:7D:4F:7B:F9:21:FF:EB
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 019D25F150A70AEAA3CF4D5A7A4624856CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:04 +0000
Manifest this update: Wed 25 Mar 2026 17:01:04 +0000
Manifest next update: Thu 26 Mar 2026 17:01:04 +0000
Files and hashes: 1: AyrzSBhcVdLjrtpgaPtvfCo2cgk.roa (hash: FPSdxwJlvKxB9usaAhQQLpbdSK3miP+bPkK1Uge0pAo=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: 3HcM3/+LDFOIc6SPMTWHwuBk5/O8GnPN5XNL4NY5Rnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:50:a7:0a:ea:a3:cf:4d:5a:7a:46:24:85:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Mar 25 17:01:04 2026 GMT
Not After : Mar 26 17:01:04 2026 GMT
Subject: CN=641eb890aea52791609a13ba527d4f7bf921ffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:00:de:18:5e:a9:a6:2c:c8:a3:0b:fd:30:
97:04:e8:9f:89:46:07:56:ad:de:38:d8:92:6f:27:
09:eb:3c:35:02:70:23:3d:e6:1a:8f:86:17:cc:12:
e6:f6:27:90:a7:0c:6d:8f:aa:18:ff:1f:c3:4e:83:
5e:c6:6c:af:76:63:04:af:95:c6:8c:38:08:50:8e:
01:3e:d0:33:ba:77:07:7b:0b:e6:5e:f6:da:a8:bb:
97:22:a2:95:b5:eb:f3:a0:9e:06:bf:12:7e:6e:54:
a1:7b:b5:71:9f:b5:6d:9a:a6:e1:86:cc:d2:d1:1c:
e9:32:a0:c9:db:ef:6b:c4:5e:96:40:47:89:ee:67:
84:12:8c:25:2e:3e:fc:b1:67:18:3a:88:c4:4e:c4:
47:f9:86:36:1e:04:f3:3b:11:ef:62:1a:b4:02:2e:
7f:c8:67:e9:bb:b1:e4:18:07:0c:1d:29:3a:3b:f4:
a4:97:e9:d7:17:11:84:92:fd:54:21:2b:2f:72:69:
6e:fc:48:cc:34:bc:15:74:9a:c0:16:77:d3:86:ae:
04:82:d2:f5:d9:ef:6e:fb:4b:75:75:44:71:c8:dd:
52:f2:9f:a8:ff:8e:2a:ba:02:35:83:3f:71:19:02:
d7:2f:44:6b:df:20:d6:98:27:af:e5:6d:2c:74:4a:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:B8:90:AE:A5:27:91:60:9A:13:BA:52:7D:4F:7B:F9:21:FF:EB
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:a3:5d:a5:9e:47:30:78:06:31:10:8e:e6:a6:b3:cb:b2:
80:e2:41:1c:f3:d5:4a:b7:7d:5f:f7:f5:ba:7e:7c:cb:a4:82:
14:e5:09:02:78:9e:c9:da:cf:13:2f:54:6e:66:f1:be:aa:75:
24:c8:11:f0:ff:96:5d:b9:4a:1d:32:02:96:b2:f9:f7:2a:a1:
45:2b:20:78:28:a8:20:93:f1:f4:8d:ee:8a:9d:92:db:9b:fd:
b5:cc:9a:ef:a9:fa:ff:d2:8c:0e:26:6e:23:24:da:90:76:d9:
36:02:89:f8:85:16:01:34:07:23:dc:7b:a6:93:2a:61:87:2d:
2b:b4:6d:79:8d:2b:eb:cb:11:cf:ed:16:a0:1a:01:80:8d:e3:
f5:5c:9d:ae:3a:2b:09:3a:a6:12:60:59:14:0b:36:f3:d1:86:
28:ce:fc:bf:8e:48:04:0d:74:5c:3a:57:70:be:82:d5:3b:32:
35:3e:ce:1c:73:9e:d7:a3:98:3e:eb:9f:8a:61:f5:d7:e8:84:
4c:de:23:60:c1:7f:fe:15:47:af:09:99:75:3e:d4:50:51:04:
35:6c:fa:e2:a4:e0:fe:7a:13:e5:cb:9c:c1:21:c6:ee:c7:25:
8f:d2:37:3c:6b:05:a1:85:96:4c:8b:7f:78:c0:2d:38:09:af:
0b:25:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:03 2026 by rpki-client