Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: /tADJxi68Bx27dAv3X1THsNkXyRFTRIEepeddTrSR/4=
Subject key identifier: C7:01:EC:05:8D:ED:F9:CE:D1:E5:D2:98:88:ED:18:25:1B:7C:AA:08
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 01A0F29EDF7E0E436064480CA1B1798F9414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 1A0F
Signing time: Wed 30 Sep 2026 14:01:33 +0000
Manifest this update: Wed 30 Sep 2026 14:01:33 +0000
Manifest next update: Thu 01 Oct 2026 14:01:33 +0000
Files and hashes: 1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: 5CsYOHYA6Cdd7tPaKnR2JFiKFcSMMPCwtxe6CQSyroM=)
2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:df:7e:0e:43:60:64:48:0c:a1:b1:79:8f:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Sep 30 14:01:33 2026 GMT
Not After : Oct 1 14:01:33 2026 GMT
Subject: CN=c701ec058dedf9ced1e5d29888ed18251b7caa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:78:fd:c0:e8:fb:42:6c:be:60:58:5d:25:
29:25:3d:ee:a7:76:f5:15:0a:a4:20:6c:05:4f:3f:
c1:7a:fe:0e:fa:19:2b:0b:61:17:97:61:82:7d:08:
5b:6f:9e:a1:ad:69:73:5c:16:49:19:4c:7a:00:de:
09:f1:35:ae:6f:e7:41:c6:9b:da:f5:f3:df:ec:cb:
46:13:b3:b2:88:e1:c4:0a:28:44:fe:33:c0:d0:89:
e4:dd:31:ed:73:db:87:83:6c:a7:13:e9:3f:bd:23:
85:fd:5c:f9:7b:56:e1:cb:d3:12:38:00:28:0c:7d:
97:14:5f:3d:76:55:1a:19:46:1f:cb:78:94:06:15:
10:c6:64:30:8e:dc:2b:ef:24:ee:3e:65:80:d0:53:
87:09:ec:cb:6c:29:ae:41:57:ae:ea:cd:e9:24:de:
c8:81:13:64:42:f7:29:b8:65:eb:7f:f7:2b:3d:9e:
15:91:bc:74:db:fa:31:05:9f:18:ba:54:f8:70:a2:
bf:a5:7c:ce:00:c6:1a:9f:c6:58:67:a9:4b:70:0f:
a6:0f:4c:4f:94:78:8d:f2:93:8c:67:3b:52:58:c7:
b0:ae:f9:d3:4e:09:6e:7f:52:86:af:d6:d6:05:69:
dc:aa:46:e6:43:0d:d0:0b:07:d7:d2:b6:10:94:8c:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:EC:05:8D:ED:F9:CE:D1:E5:D2:98:88:ED:18:25:1B:7C:AA:08
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6a:36:a0:17:56:55:a7:82:ac:0f:ca:19:90:9b:ee:e2:7e:
68:8d:9c:e2:32:be:aa:de:58:2b:7e:cd:85:41:ab:94:27:e9:
a5:fe:17:c7:7a:07:8d:91:28:1c:88:71:eb:b4:e7:54:4d:bb:
16:23:d6:9c:69:b8:90:08:a2:df:ce:6b:35:be:b4:0d:0d:be:
b9:1b:d0:00:7e:ef:2a:a5:8c:39:aa:9f:9a:23:99:2f:da:14:
ba:b3:a1:da:84:68:8c:4c:f9:bb:9c:20:dc:32:13:c2:2c:05:
19:a3:f4:2c:fd:10:a9:fb:fe:6e:bb:e1:fd:e7:f7:af:07:48:
f2:62:38:3a:6c:dd:e3:90:12:9a:bc:d5:86:e0:2c:23:78:29:
a2:81:d5:5b:3f:ce:c6:de:96:97:70:d4:6f:86:f8:eb:14:40:
55:92:2d:e7:c2:a1:fe:b6:5e:40:f7:ec:5b:a6:ca:2d:a9:e9:
17:4b:27:93:50:2c:1f:a3:0a:65:27:e8:da:ac:7b:fc:46:24:
b4:d0:a2:76:63:0d:5e:89:13:4c:e4:06:dc:b9:a2:e1:d7:0b:
75:fd:98:22:4b:7d:c6:40:e7:f3:01:4f:67:01:09:9b:d9:d3:
42:7a:48:3c:c4:c3:cb:b8:74:52:71:a0:0b:db:92:30:1a:52:
40:e0:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:41:56 2026 by rpki-client