Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: WJeHopRSvysYBMHUgoxQm47tIO+11DoBaZdHqo5ykOU=
Subject key identifier: F4:95:EB:94:33:BB:F2:0E:02:54:57:2C:A5:3E:FB:8B:65:4F:66:D6
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 019D3752854B747601A218285D2542410DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 120A
Signing time: Sun 29 Mar 2026 02:00:48 +0000
Manifest this update: Sun 29 Mar 2026 02:00:48 +0000
Manifest next update: Mon 30 Mar 2026 02:00:48 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: NAY8JU0NB8+Ju+PByFVl+E+bYjhDeC972PNBNBJqW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:85:4b:74:76:01:a2:18:28:5d:25:42:41:0d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Mar 29 02:00:48 2026 GMT
Not After : Mar 30 02:00:48 2026 GMT
Subject: CN=f495eb9433bbf20e0254572ca53efb8b654f66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:cc:31:ee:ae:f4:4f:e5:c9:22:86:26:51:
b2:0a:d2:7b:d0:d4:1d:d4:cf:7b:e2:8f:c7:21:25:
dc:c3:c1:e6:c3:45:c3:ac:47:a1:2e:b0:2e:b1:2e:
fe:ec:2b:15:f9:65:04:c1:92:7f:f8:34:73:4c:5e:
76:fe:c7:ff:dd:aa:38:54:50:57:68:36:b3:f4:2e:
ff:12:ef:94:83:df:38:b8:8a:57:50:88:c9:29:cc:
18:27:f4:a0:1f:1e:82:b5:72:82:c1:a0:42:05:ee:
26:14:3b:a8:7c:3f:f1:ad:b7:d2:ef:3f:f9:a7:a0:
fa:02:b5:83:89:52:bf:23:52:0e:f9:d4:31:85:a7:
6a:b4:c6:21:a8:8e:06:ea:0f:f9:4e:bf:fc:09:eb:
8f:46:ca:39:26:19:27:99:0d:40:e1:4b:da:30:8f:
0b:ae:cb:91:82:75:6c:e2:34:ad:48:b8:87:45:89:
3c:14:08:da:f4:3f:44:07:ed:ee:82:d6:97:a0:0a:
a3:f9:81:90:f3:20:81:67:88:5f:b5:82:b8:d7:56:
71:ee:5b:4d:9f:5a:5e:b3:0a:b8:f5:7c:b3:19:8a:
bb:9e:9f:3e:dc:57:6e:45:ca:de:99:05:8e:34:66:
42:26:94:eb:72:7b:34:d3:32:98:bb:65:45:d1:bd:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:EB:94:33:BB:F2:0E:02:54:57:2C:A5:3E:FB:8B:65:4F:66:D6
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:67:53:c9:33:7a:40:e8:a1:42:e3:3f:ae:51:b7:7f:99:cc:
f2:72:04:ac:bc:7c:ae:18:18:0d:c1:32:18:80:29:ae:ee:c4:
1a:7b:36:8c:56:26:48:26:d7:66:80:91:1e:ac:8f:7a:96:65:
64:ce:3e:f7:00:be:7f:92:cf:5c:e5:30:0c:ae:5e:51:1b:4c:
c0:ae:de:42:68:51:02:c7:80:c9:73:58:bd:9f:e8:f8:62:0a:
c7:58:32:cc:3f:ce:ee:52:34:a6:d1:36:c5:75:10:03:85:11:
40:32:b9:f7:79:41:f1:ae:28:61:c5:e5:01:33:e4:dd:49:d3:
89:8d:38:44:17:41:e0:90:c7:8b:9b:ee:e8:84:78:28:11:18:
ba:52:f6:2d:fb:38:c8:cb:d1:a1:50:97:e5:1a:ce:15:32:fe:
93:dd:4e:35:d9:df:06:e1:fe:ff:cf:47:12:e1:90:d8:15:c9:
37:bc:f8:f4:de:f3:08:84:c2:d2:44:87:94:04:19:16:82:1c:
c1:6b:2b:f1:0b:ad:e6:13:f9:0d:f9:50:ed:6e:77:86:66:e6:
eb:e4:fd:91:6c:ed:c6:3c:53:c1:d2:b6:18:11:54:ce:01:19:
2e:7a:1f:ed:42:65:b6:8c:46:a5:b1:7b:ff:4e:88:08:ef:9a:
37:47:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:17 2026 by rpki-client