Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
File: rjrbWMEIuLsT5DwV7qPHiZtko6o.mft (raw, json)
Hash identifier: K+UvuhHpRezWKroNNn7AG6hOgh8hX5qKZwCtY+Lbe7U=
Subject key identifier: F8:BF:9A:0A:38:F2:AE:67:09:1F:E5:A9:42:3C:94:AD:35:EA:E0:A8
Authority key identifier: AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
Certificate issuer: /CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Certificate serial: 019D28BB70AA297EA5304FD2148A0441FC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
Manifest number: 0D79
Signing time: Thu 26 Mar 2026 06:01:05 +0000
Manifest this update: Thu 26 Mar 2026 06:01:05 +0000
Manifest next update: Fri 27 Mar 2026 06:01:05 +0000
Files and hashes: 1: 6Xa6Oj1TguzeA_SQbiZ2-KR-l9w.roa (hash: yZGWLtJQG1fe7kFdqMH4OaCwstlt/mm4AHRs9oE0umw=)
2: rjrbWMEIuLsT5DwV7qPHiZtko6o.crl (hash: 7LCsh1j6b91uHV0zIdxiKPSu4BJYLkexSrnv/ArVVpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:70:aa:29:7e:a5:30:4f:d2:14:8a:04:41:fc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3adb58c108b8bb13e43c15eea3c7899b64a3aa
Validity
Not Before: Mar 26 06:01:05 2026 GMT
Not After : Mar 27 06:01:05 2026 GMT
Subject: CN=f8bf9a0a38f2ae67091fe5a9423c94ad35eae0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:27:67:89:16:81:fc:d5:73:ae:ef:08:74:
bb:88:84:59:fc:e4:db:b1:b3:0e:22:a4:ff:9b:e1:
30:0a:fe:1a:7b:c2:81:c0:f2:da:bf:26:ed:87:e7:
66:01:ea:1b:44:27:10:0e:1b:2f:f7:c3:d2:f4:21:
05:4c:de:98:25:20:01:7b:e8:68:82:b5:36:10:f3:
e0:30:d9:b4:b5:ad:22:42:cc:15:19:44:c2:99:02:
a4:b6:67:bc:f3:d6:c2:eb:62:3d:ab:51:82:17:8e:
7a:c3:7e:5a:e6:65:c7:05:88:f9:03:14:bd:25:5c:
02:c5:71:a8:b0:e6:04:1c:03:e6:f3:23:cf:40:56:
2b:d2:5a:73:ac:25:ad:ea:f2:6f:d3:f8:59:05:5c:
e4:35:ae:76:dc:17:f5:88:88:71:3d:51:b3:18:1a:
7c:94:08:9c:46:4a:8e:06:56:13:ad:68:72:dd:65:
c5:f5:85:e7:cb:1a:2e:8c:01:4a:8a:01:01:67:fa:
eb:aa:b0:23:c1:03:6e:9b:bd:e4:6f:b4:23:d5:c9:
c2:a3:04:c5:e9:16:63:ea:fa:d3:c1:eb:7c:50:d4:
f3:5c:2c:ad:37:70:6a:31:0a:97:06:6e:cf:12:4c:
36:71:26:23:90:c0:c9:3d:b0:6b:78:e7:9a:c9:ad:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:9A:0A:38:F2:AE:67:09:1F:E5:A9:42:3C:94:AD:35:EA:E0:A8
X509v3 Authority Key Identifier:
keyid:AE:3A:DB:58:C1:08:B8:BB:13:E4:3C:15:EE:A3:C7:89:9B:64:A3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjrbWMEIuLsT5DwV7qPHiZtko6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d81aa2-8a55-40db-96dc-8fbb5128a2c9/1/rjrbWMEIuLsT5DwV7qPHiZtko6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:72:ae:bf:7b:4d:81:8b:51:88:f9:dc:75:f8:e1:bf:cf:61:
fe:af:be:3f:9c:56:0a:63:b9:cb:8c:cd:3c:5a:03:81:63:0b:
fe:79:17:00:ec:f1:a9:e9:e2:64:ae:35:34:47:7a:74:29:17:
fa:64:97:23:bd:bd:97:33:7c:33:8f:22:bf:e2:63:c3:41:d7:
68:bc:21:66:78:ce:ea:7c:0e:20:69:69:35:25:cc:d4:c3:53:
b7:8b:a7:fb:58:f2:c9:e5:0c:30:f2:43:30:dd:d9:4a:14:ab:
c3:1e:0b:d5:f1:ec:aa:c7:be:b9:b0:63:f4:16:2d:76:29:7d:
ef:f9:3f:5e:6d:4d:71:7e:97:9c:d6:a1:45:92:6a:dc:75:95:
e3:02:8c:b5:fe:41:bb:3c:31:bc:21:15:d7:d7:b7:74:87:2b:
19:82:72:09:e6:32:05:40:b0:8c:24:f8:1e:be:af:e9:81:b3:
1f:e9:e3:a7:e1:ce:e7:f6:7c:17:89:57:9c:c8:5a:c6:9e:b9:
1c:bc:ef:9b:d9:77:ce:34:d7:7f:d6:77:22:3b:fd:33:06:8b:
fa:72:b8:37:0c:91:e6:d9:72:62:ab:a7:3b:bc:d4:e0:fa:7e:
1a:4f:ad:c7:31:b7:91:7e:ca:26:e9:cc:b7:dc:9e:0b:8d:07:
19:8e:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:19 2026 by rpki-client