Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: o+53aykIaANAN1vskSppML358bifybfXq9dfCWxGQjU=
Subject key identifier: F2:62:08:DF:20:2B:1A:54:90:FD:68:B6:7A:54:58:8E:B3:C2:12:24
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019D27E05CA7877AD0C1BB029F3079B4E9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 09E3
Signing time: Thu 26 Mar 2026 02:01:48 +0000
Manifest this update: Thu 26 Mar 2026 02:01:48 +0000
Manifest next update: Fri 27 Mar 2026 02:01:48 +0000
Files and hashes: 1: PSCjCrxrCeT-cWttc-XrOlJtQZw.roa (hash: 2swSqRspsOoUJA6D3XUUWVLXclXLULrNOWbdZ6ShDg0=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: SF5PEBeu5KHCdcKChxnp8A21xFKHqt+IWKOkfGhB/SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:5c:a7:87:7a:d0:c1:bb:02:9f:30:79:b4:e9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Mar 26 02:01:48 2026 GMT
Not After : Mar 27 02:01:48 2026 GMT
Subject: CN=f26208df202b1a5490fd68b67a54588eb3c21224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:06:32:99:ec:00:6f:ab:70:ce:8a:07:75:
72:2a:c5:f1:76:32:e9:78:82:c3:f8:29:4a:3a:c6:
c4:e9:31:34:fa:0c:79:16:67:fc:58:ea:cf:83:db:
8e:ff:09:25:25:68:e8:c6:60:45:83:1a:e6:8f:16:
83:fd:4a:58:b0:60:3b:b2:b7:88:77:a8:19:50:0d:
fd:36:f5:a5:3c:8c:90:b4:0d:e9:a9:ec:31:34:85:
f5:b5:9b:03:a7:e3:21:98:c2:05:ea:5b:63:68:c8:
5c:01:88:dc:52:8f:7e:3c:ce:e5:45:fb:bb:b4:b3:
a0:16:44:00:a5:b4:a2:61:ed:e1:9f:2e:e1:ec:53:
da:98:86:bc:dc:de:a4:6e:b3:01:2b:d2:5c:2f:a4:
cc:16:1e:ab:03:04:a1:da:cc:bc:d3:d4:25:32:15:
9b:3d:34:f2:08:0c:75:48:e0:49:ba:7a:74:10:bf:
ee:9e:29:65:b6:8c:2b:1f:50:68:18:fc:c8:04:1e:
34:ce:46:82:e2:28:c8:05:7c:04:b6:aa:8e:d5:8e:
71:cf:93:51:b5:e0:2c:77:c3:a1:e8:48:f8:95:77:
00:64:f7:a2:6d:3f:5d:7e:a1:56:b8:b1:60:63:a8:
e9:2c:07:29:07:3c:11:29:25:9f:80:09:81:a7:16:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:08:DF:20:2B:1A:54:90:FD:68:B6:7A:54:58:8E:B3:C2:12:24
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ed:8c:8c:c3:8b:38:23:67:4f:d3:90:ea:7c:f5:59:75:6f:
12:3c:09:81:a8:63:e8:d0:0e:c5:7c:23:87:e8:e8:ac:71:0b:
a4:ce:dd:95:fd:78:28:37:99:9b:e2:ed:75:b3:e6:2e:34:b4:
e5:61:23:ff:1b:04:58:c8:96:9b:97:03:61:c6:3a:6d:70:a4:
e3:a0:04:59:67:80:6f:82:f3:39:e2:d5:12:1b:ef:29:11:02:
6d:e6:e0:a2:33:ce:60:1b:32:d7:66:23:b9:99:61:2a:fe:e1:
a5:8a:b5:4c:74:09:3d:4d:38:dd:c6:59:f1:6d:79:6b:44:90:
1d:52:75:8a:fd:31:54:36:34:b3:81:f4:f1:83:24:df:ef:f3:
2a:e1:10:a6:4c:b7:14:4f:22:fc:f6:cc:d3:fd:d0:31:52:37:
c6:67:f9:d5:a8:de:aa:8a:85:ad:71:3e:b1:1d:3a:99:b2:4a:
ee:14:43:5c:47:4a:9a:f2:12:bd:4e:90:4f:a7:6b:0d:be:84:
e4:a6:cb:18:c3:4a:bd:65:d7:ad:11:fc:57:19:ff:01:1c:88:
3c:fa:74:56:13:8e:b7:9a:c5:2d:6a:1b:57:e7:83:10:9c:4a:
fb:fc:6c:8f:17:1f:71:ae:1d:bc:5c:44:4e:d0:5e:c2:5d:07:
b6:8b:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:31 2026 by rpki-client