Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: XkcxCcSFVlW0IuyT5c+lPfmbPZWZIBLYCxwBHsYnz2M=
Subject key identifier: 11:76:78:14:AD:5E:DA:23:BC:B8:B8:A5:54:CF:1C:A6:FD:72:36:F7
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019D371B6001D7763CCB1053BA75B04272A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0F2A
Signing time: Sun 29 Mar 2026 01:00:34 +0000
Manifest this update: Sun 29 Mar 2026 01:00:34 +0000
Manifest next update: Mon 30 Mar 2026 01:00:34 +0000
Files and hashes: 1: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: 8OYcREcDSYLCca1u86Wk8QJpRhPqYnGbR1HX/d+bkPI=)
2: sxio-JXZNlFkXF8EoRP4tx5DL7c.roa (hash: IdBSRsFLBVFfvelPbMkEHbKxbVg+TQkt4twf6UFXM2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:60:01:d7:76:3c:cb:10:53:ba:75:b0:42:72:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Mar 29 01:00:34 2026 GMT
Not After : Mar 30 01:00:34 2026 GMT
Subject: CN=11767814ad5eda23bcb8b8a554cf1ca6fd7236f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:d5:40:f0:bc:9c:14:fc:f5:72:5a:32:e4:
74:dd:c2:f7:af:cf:50:3e:67:d2:5c:d8:13:89:8b:
9b:49:99:b4:f1:df:4d:40:d5:6c:cf:34:5d:df:0b:
fd:5b:b7:2b:cc:3b:86:f1:09:93:df:e8:35:ab:8b:
4e:49:97:1a:e4:c1:8c:d7:9d:fe:79:1b:fc:32:42:
a2:b1:fe:6b:b1:2a:71:ca:ab:8f:04:db:45:33:8f:
89:77:7f:4c:68:b5:0a:22:62:01:50:5d:db:2a:35:
aa:74:85:60:f7:10:59:6e:78:a4:50:82:e7:fa:72:
d1:54:45:9e:2e:6f:ed:7d:02:ea:29:d6:1b:93:fc:
e4:d4:9b:dc:28:7a:c7:a5:78:d9:e1:5f:79:3c:0c:
98:df:0d:e9:ae:1f:33:b5:02:d7:9b:e4:93:73:e1:
a0:42:a0:42:1f:49:62:bb:5a:36:89:c5:ac:3a:17:
43:bc:b7:21:64:6a:5f:7a:de:f6:1a:8c:e4:e5:01:
cf:4f:4a:50:48:98:3a:73:de:e1:3c:62:06:aa:34:
a4:51:f1:96:c8:17:ee:b5:91:d9:d1:c9:23:25:b2:
fe:0f:55:40:bc:58:ff:9d:4e:a0:15:ec:95:08:2c:
91:ee:a3:00:23:45:d1:fd:be:5f:86:e6:0c:02:c1:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:78:14:AD:5E:DA:23:BC:B8:B8:A5:54:CF:1C:A6:FD:72:36:F7
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d7:4e:0e:41:20:00:54:cc:0d:32:92:54:87:04:89:6c:ab:
6c:f8:cd:7f:cf:a2:74:fe:1e:e6:d4:07:ec:e5:04:68:52:e9:
cd:f0:5f:fe:f3:9e:1b:4b:b5:5d:f7:78:05:78:e7:14:9e:cb:
96:df:23:97:a1:88:8d:b9:7c:6a:a5:9f:cb:21:cc:50:54:94:
76:a2:93:20:bb:02:69:f7:a1:78:6b:a5:1f:c2:57:0f:02:ab:
0a:d6:7f:25:b5:f9:f7:31:ac:50:dc:c0:d2:ac:50:a7:e4:66:
ad:85:a6:6b:95:9a:18:83:23:3f:67:7e:a4:89:72:66:9d:d5:
8e:64:81:1d:69:96:2f:db:57:db:4b:23:a0:76:dd:53:c7:14:
ab:d3:54:6a:c0:97:02:7b:1e:77:6d:fe:17:36:98:cf:c4:96:
25:8c:11:c0:83:3e:2c:27:a9:62:df:f3:e1:e1:f7:2a:dd:15:
2a:16:d9:37:e4:8b:a6:0f:63:c6:28:46:e6:69:24:b7:02:b1:
3d:6c:e2:c2:6e:98:dd:4f:3e:6f:c0:d9:97:be:07:75:2f:d2:
cf:ad:8c:06:b7:2b:e7:13:5b:d7:cc:29:47:af:10:47:f7:85:
99:35:3e:2a:0a:d2:91:f3:e1:ba:3e:fd:cf:fd:3d:b1:d6:ef:
dd:a5:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:27 2026 by rpki-client