Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: FmIgZOu3N3G6/lkEr451iRqmUkwiKjEr96HZttKX0XI=
Subject key identifier: 20:13:E2:47:CE:22:8E:33:72:F1:66:83:C3:79:2D:B8:AA:B2:14:FA
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 019F95EE3ED051DA660E69D3C42EF8E3EE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 0DCF
Signing time: Fri 24 Jul 2026 21:00:46 +0000
Manifest this update: Fri 24 Jul 2026 21:00:46 +0000
Manifest next update: Sat 25 Jul 2026 21:00:46 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: zQOU2pKA5NXvAjL79byAWUEZW86cWOK/dVnyoavUDGc=)
2: tkGMYK-FRtNdjWKXGGPcl_0HZd0.roa (hash: nr1Jnpu4QEF6XYpXhVbFfyVrl4MGqSq9qg3cEdw2q4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:3e:d0:51:da:66:0e:69:d3:c4:2e:f8:e3:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Jul 24 21:00:46 2026 GMT
Not After : Jul 25 21:00:46 2026 GMT
Subject: CN=2013e247ce228e3372f16683c3792db8aab214fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:8c:bc:04:b9:ad:62:0e:03:87:9b:5f:ef:
5e:18:27:ba:7e:66:bb:aa:f7:e7:b9:06:92:fd:6e:
81:dd:83:0d:91:60:f9:3d:08:e4:4a:65:42:17:71:
0d:65:36:0d:23:22:35:a7:4c:78:82:f0:ce:1e:67:
76:1c:08:91:11:03:2b:bc:e0:5a:6e:44:70:25:a3:
69:b9:d7:f0:e4:36:f7:1e:60:74:6f:a7:6f:06:26:
04:81:5d:a1:5b:5d:90:26:2f:aa:0d:f8:0d:90:34:
5b:00:0b:f2:f9:2f:9c:1c:06:50:5e:a1:8b:80:f8:
7c:ff:26:ff:2f:6b:a2:ea:06:41:18:fb:8a:0a:68:
b2:53:85:6a:ba:b3:b0:b4:36:41:b2:50:86:33:c6:
8e:c0:bc:75:04:37:cd:cf:b4:45:db:a7:e3:e5:32:
3d:32:39:0e:ed:a5:f4:5b:e6:0d:83:dd:a1:58:29:
22:72:43:db:e0:66:cd:eb:f8:6e:40:dd:18:39:a6:
a9:a2:46:20:7a:b8:85:1d:c2:ba:78:67:c6:d8:73:
11:fe:a3:86:d8:f4:0f:fb:16:2f:4f:3b:ef:51:f9:
31:69:09:df:23:22:6d:ec:67:96:d0:32:89:60:c1:
69:51:9e:63:ba:f3:3b:56:f0:d6:5f:99:30:d6:61:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:E2:47:CE:22:8E:33:72:F1:66:83:C3:79:2D:B8:AA:B2:14:FA
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a3:04:f4:f3:c9:53:93:d5:60:e3:bd:cf:47:18:e4:6c:4c:
0f:54:7a:b6:28:01:38:88:4b:39:ec:be:61:b5:bc:61:b7:69:
6a:57:fc:b5:0c:fc:2d:93:36:0e:30:43:3e:67:b3:ba:06:4e:
35:9c:25:dc:ae:ae:86:7f:14:5c:17:7b:f7:da:0b:62:b7:d6:
7c:14:19:91:c6:cf:16:14:c3:fb:ed:2f:b0:30:20:ca:bc:1d:
14:28:26:65:9a:30:7b:38:9f:41:7b:d6:eb:c7:82:0d:45:70:
35:6f:70:8f:f2:38:45:68:64:09:f9:6c:74:17:6a:d8:9d:8a:
af:75:75:ce:bb:67:f6:a7:b1:77:30:b4:6a:ce:54:99:e8:60:
ac:dd:c7:fb:8f:6b:69:42:8c:f1:ba:b1:b3:25:9d:a1:c9:d8:
a0:23:f9:36:22:30:cd:9c:ba:23:07:94:8c:77:70:9c:79:0f:
b5:66:37:fb:89:25:f3:d4:c3:aa:98:7b:6b:ca:5b:04:40:9a:
e8:2d:23:89:3d:2a:a1:19:cc:35:d8:d5:37:14:61:1e:85:e2:
70:a5:74:bd:50:75:f0:9a:f3:0a:e4:7e:b1:c6:3e:3e:fe:28:
51:73:46:e8:1b:06:aa:ce:db:7a:7d:7b:f8:46:6e:ca:12:12:
e7:b7:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:24:51 2026 by rpki-client