Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
File: r4TKySqfMTSUgaaOlRvFWvUI8uY.mft (raw, json)
Hash identifier: gqCef6oKJQwXTdKQn1TH73rxHYNS68LHKSbW6hLYVJA=
Subject key identifier: CE:C8:5F:D8:15:E6:A6:BD:BA:98:23:A7:6B:5E:7C:46:F7:54:2D:12
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Certificate issuer: /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial: 019D3A5462F2F69750C8A290F442FBDFD213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
Manifest number: 1C
Signing time: Sun 29 Mar 2026 16:01:42 +0000
Manifest this update: Sun 29 Mar 2026 16:01:42 +0000
Manifest next update: Mon 30 Mar 2026 16:01:42 +0000
Files and hashes: 1: 6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (hash: uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=)
2: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (hash: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=)
3: iJxSVbAFop81tRZJNuYo6wfOif0.roa (hash: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=)
4: r4TKySqfMTSUgaaOlRvFWvUI8uY.crl (hash: kvzgvbclkFZA/fxOiSR5FZN5JrHizZRBgcDywWteUMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:62:f2:f6:97:50:c8:a2:90:f4:42:fb:df:d2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
Validity
Not Before: Mar 29 16:01:42 2026 GMT
Not After : Mar 30 16:01:42 2026 GMT
Subject: CN=cec85fd815e6a6bdba9823a76b5e7c46f7542d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:ee:8e:93:b1:2c:e2:9b:ea:af:19:83:15:
71:8a:e3:58:40:ab:1c:4e:ae:06:4c:7c:8a:f3:b5:
d1:a6:ec:f1:66:7e:f3:12:9e:6d:11:ea:74:01:3c:
d9:e7:86:e5:0e:67:2d:ce:c1:1f:5b:0c:ad:54:9c:
81:6f:00:63:d4:86:82:2f:62:de:3f:ce:f9:d4:a5:
0b:8c:46:df:f3:74:3f:28:67:c1:f5:a0:ae:30:35:
9c:fb:56:48:c8:0a:d9:a4:73:70:60:57:77:21:3f:
23:cc:30:93:f1:e2:91:a8:b3:c5:5e:c2:e2:0d:39:
66:98:eb:6e:8c:ab:b5:80:c2:a4:80:f6:29:89:c7:
34:5b:55:fa:ec:e2:2a:76:46:b6:a8:06:2d:ed:78:
65:25:e2:e8:22:0d:69:76:41:f0:5c:3e:a4:18:7c:
21:33:27:8c:4d:5d:8a:f6:b1:f3:30:c1:ec:ce:01:
b8:3f:0d:e6:fd:e4:76:5c:c0:ee:d2:20:4c:41:d5:
b3:1c:07:c6:2c:e5:e4:f9:94:25:ec:16:02:3a:7b:
8f:27:99:43:c9:a9:a8:76:b0:e0:a4:71:2f:da:32:
bd:ca:3a:3c:83:3d:57:d5:89:2a:8a:a2:1b:f7:1a:
48:7a:2e:2a:1a:eb:7d:42:d7:a0:4c:78:ef:d1:ba:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:5F:D8:15:E6:A6:BD:BA:98:23:A7:6B:5E:7C:46:F7:54:2D:12
X509v3 Authority Key Identifier:
keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b5:c1:ad:c6:98:77:56:6e:87:04:df:c3:7e:00:96:0c:64:
ce:51:b5:1b:80:8d:10:d6:89:48:f1:77:67:6f:37:4b:a5:ad:
76:f7:6f:b0:1e:53:7d:09:c9:d5:24:98:62:91:ea:ae:87:6e:
54:3a:c2:25:f0:26:5a:5c:3f:a8:7b:3a:8c:d0:79:e3:40:fc:
16:96:1f:6c:be:6c:63:c6:ff:33:b8:f6:37:bb:7b:4c:42:ea:
b9:3c:35:26:86:a3:fb:ae:80:90:4c:8c:78:e1:af:a8:ca:08:
97:43:df:b8:f8:9c:d8:ca:1a:83:34:73:e2:39:cd:57:dc:4d:
29:b2:20:ff:a2:8d:58:a5:76:f7:ca:a5:2a:67:91:23:e4:42:
be:b7:80:b6:7c:b5:b3:da:0f:66:2c:50:ba:a3:29:f7:94:d3:
c8:f8:1d:2b:b5:68:52:a4:12:66:d4:9f:8f:18:88:90:d3:e9:
45:eb:29:d6:00:59:a6:f2:80:d6:85:5d:32:84:0d:24:3c:24:
16:c7:51:3d:17:d5:f3:89:b5:78:d0:ce:5e:6e:2d:63:c7:2a:
92:be:85:b1:45:a7:bd:22:49:4c:64:9f:94:ec:12:98:b0:4e:
a7:ab:3a:ab:7c:3d:82:c2:e6:b1:da:4e:32:9e:44:2c:58:96:
ce:51:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:33 2026 by rpki-client