Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: 6hYNHwvgRhqvXTFhQHRjpBJJZtnnjJiojHYoR54d73U=
Subject key identifier: 55:5C:96:E1:2C:FE:7E:88:37:F2:6E:FD:A9:1A:A4:7D:5C:39:41:27
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019D254CAC6E584096D5B8B261C643524382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 1643
Signing time: Wed 25 Mar 2026 14:01:14 +0000
Manifest this update: Wed 25 Mar 2026 14:01:14 +0000
Manifest next update: Thu 26 Mar 2026 14:01:14 +0000
Files and hashes: 1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: 7m7Qt/yzQiORvk/UbixOgQQpcxlF9snbHHBrPTK/hhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ac:6e:58:40:96:d5:b8:b2:61:c6:43:52:43:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Mar 25 14:01:14 2026 GMT
Not After : Mar 26 14:01:14 2026 GMT
Subject: CN=555c96e12cfe7e8837f26efda91aa47d5c394127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:59:07:00:95:ea:63:41:39:8f:1c:fc:f5:
eb:36:30:f0:19:6b:3a:3a:be:dd:8a:53:39:f0:0d:
06:29:c8:0b:54:97:81:1f:9d:91:6c:77:42:91:b1:
35:0e:1f:3e:c6:a2:63:f8:4c:6b:16:5a:8f:8a:d3:
12:45:f3:72:7c:08:51:2b:a8:d8:f7:02:42:ef:e6:
8c:2b:d9:c3:0c:cd:7a:01:ed:86:50:2e:f5:d1:50:
9d:64:b7:62:17:92:49:69:54:b3:1a:dd:ca:63:d3:
d4:1f:d0:81:d2:57:a8:8f:16:62:91:94:8f:a9:93:
0d:dd:a0:82:c3:6f:46:be:aa:5f:94:52:b8:52:d7:
6a:0d:bc:2b:b9:c3:7d:99:31:a8:6d:a4:ea:d6:c3:
f8:55:6d:78:bb:7c:61:ce:fe:d4:d9:10:4c:c0:a6:
82:9f:e0:07:86:f0:33:48:64:60:21:d1:57:ae:8b:
35:8f:a1:c5:47:5c:f1:3a:64:ba:bc:3c:e4:61:46:
a0:f6:ed:e5:c8:1c:e5:5b:3c:f7:f5:23:6b:a5:d4:
05:6e:0f:9e:75:88:64:b8:f7:ba:e6:af:66:a5:e8:
8d:30:5e:fb:c7:90:3e:4d:48:a4:d0:3c:a7:85:ba:
75:f5:bd:a7:c8:5d:3b:e6:66:e0:80:b6:a1:ea:82:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:96:E1:2C:FE:7E:88:37:F2:6E:FD:A9:1A:A4:7D:5C:39:41:27
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:8a:32:de:01:3f:15:65:85:fc:3f:31:76:3d:a7:3d:13:
a7:1b:22:a1:34:af:8b:01:48:09:a2:6b:6a:b7:0d:97:08:83:
5e:59:a9:0b:a1:74:b2:70:05:d3:d6:3a:71:05:2d:d6:63:49:
00:86:e4:25:aa:b5:f3:07:c0:ad:e8:00:da:ac:c7:de:36:c5:
e1:7d:82:3d:bb:41:de:5f:fb:18:3e:b8:74:a3:7e:58:49:45:
91:96:4a:78:06:d6:fb:b8:b0:3b:a4:02:d8:ac:70:10:5c:76:
ab:13:af:61:48:fa:2b:3c:d7:d6:34:be:03:c5:5e:b0:70:38:
77:71:50:15:77:01:5a:d6:c6:4c:ff:65:bf:04:a4:12:d7:08:
b5:08:b5:f5:d6:ce:01:bf:94:f1:cc:b5:22:a9:5f:db:9a:2c:
09:d9:3f:90:ca:26:c8:38:34:11:24:46:0a:c3:e5:f3:8c:bb:
69:99:bf:17:2e:3c:51:4a:a2:b6:49:42:17:94:e3:ea:a2:3f:
8f:d2:c5:4d:66:7f:5e:b5:f7:06:62:9d:94:1a:df:d9:93:28:
6d:ec:b1:ac:82:8b:86:d1:b6:f3:0e:5b:48:bd:7d:09:f7:4e:
66:be:61:f7:92:27:85:6d:c9:51:db:d3:b3:ac:d6:c9:f6:57:
77:e5:a9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:56 2026 by rpki-client