Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
File: RjUoxUCm1XfC0cwabuoXEks5I4Y.mft (raw, json)
Hash identifier: JBDQanagU7kxiaNN0ins5c7RJfeSkyxFz0bd0hyRbPk=
Subject key identifier: C2:3F:08:F4:A6:77:99:45:33:83:8E:5B:98:F4:49:45:6F:2B:E1:B9
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 019F927F4005D5E38FBBE5F89363EC1B8508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 05:00:40 +0000
Manifest this update: Fri 24 Jul 2026 05:00:40 +0000
Manifest next update: Sat 25 Jul 2026 05:00:40 +0000
Files and hashes: 1: RjUoxUCm1XfC0cwabuoXEks5I4Y.crl (hash: 4/FSU78grxzHn6P+gahMFnsxM/qiRne1NhXBEzkQsmE=)
2: sq_j1691pyhvkH9BoIr0BcNKCxI.roa (hash: i+UMV8SIsi3sQ/GKmfxv9CROSQ0ya0P5Ih29wcl+1k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:40:05:d5:e3:8f:bb:e5:f8:93:63:ec:1b:85:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jul 24 05:00:40 2026 GMT
Not After : Jul 25 05:00:40 2026 GMT
Subject: CN=c23f08f4a677994533838e5b98f449456f2be1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:aa:ad:0b:01:86:da:b1:36:a1:9f:3a:33:
8e:0d:32:15:b5:84:36:62:40:f7:d6:92:31:ca:a3:
81:f2:de:db:5f:1a:10:94:1b:d5:6f:cc:50:55:4e:
63:24:41:8e:e6:6f:cf:30:96:8c:b6:a5:01:8f:c5:
16:82:6a:27:31:23:cf:8f:2b:78:09:a5:c6:01:d9:
54:d6:33:48:e1:df:3a:a7:cb:3a:71:43:91:17:98:
9d:65:17:c0:34:52:52:a6:24:c8:b0:08:30:15:11:
0c:db:6e:3e:f7:16:64:33:20:5e:90:4a:1e:7b:d5:
93:d1:0f:a3:4a:04:ba:d0:e9:37:a1:bf:92:98:a7:
7d:53:08:29:40:dd:4d:2f:02:c0:33:30:12:12:83:
62:0b:fa:04:9d:aa:5e:f7:d3:30:47:77:b1:d1:72:
96:fc:85:e9:9e:6a:17:38:90:2c:c8:78:49:8f:4e:
3b:aa:47:6a:ca:c0:ff:b3:d3:40:89:4a:7a:78:8e:
5e:bf:1e:8f:52:6d:bd:5a:2d:4e:98:19:f5:3d:25:
b0:c0:ac:c1:6d:f6:ba:6c:fa:91:e6:a7:10:61:8d:
a1:73:cf:7f:e0:87:ac:75:a6:b3:e8:38:ec:8e:05:
36:33:b7:a8:8f:4a:2c:7b:d3:ef:72:da:81:2c:ff:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:08:F4:A6:77:99:45:33:83:8E:5B:98:F4:49:45:6F:2B:E1:B9
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:75:33:a9:9e:f5:b1:b9:1a:81:0d:34:65:a6:e7:dc:4c:
68:0b:98:19:0f:ca:71:ca:08:06:ff:8a:31:e6:c7:ed:3a:4f:
03:6a:aa:c6:11:3f:26:35:0b:56:ed:96:9b:b8:11:ee:79:e0:
86:17:86:98:59:e3:11:20:01:4c:80:99:d2:09:a4:39:85:d9:
54:c3:6b:4e:89:8e:99:f4:fd:1c:0f:5a:a8:39:3d:2e:d0:45:
d5:b4:40:8a:17:3b:dd:63:75:d4:45:a9:3d:ea:9c:87:b8:ac:
ba:69:33:73:61:31:81:7b:b2:2f:3e:c4:d4:d2:bb:3b:f0:67:
1f:a0:b0:13:87:2b:93:6b:1d:8b:ff:72:91:d0:34:bd:93:65:
c9:98:2c:2a:a2:c7:eb:13:4c:51:97:7c:21:7c:ab:a4:8c:18:
22:16:dc:dc:f8:43:e2:80:55:18:a0:7a:3b:12:0e:5c:f0:be:
21:d8:69:f4:71:f8:07:f6:50:a5:0f:34:8c:94:19:1b:a0:c5:
a7:de:e7:d5:46:d9:03:95:bc:b7:bd:8e:4b:56:17:0c:6d:13:
5e:74:31:ee:c9:68:35:13:8d:93:01:90:f5:30:f8:44:d6:c3:
87:7e:cf:e4:5a:89:68:80:e1:03:c9:33:f5:1b:11:49:db:80:
76:3a:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:12 2026 by rpki-client