Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: TCcAIg/0hTGGWAXI+asmQGNtNVEFPpdfvOfMElr8k48=
Subject key identifier: FF:4A:AF:53:1C:E5:1C:DC:F6:83:E8:76:BB:B8:79:AB:C7:D7:C4:3C
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 019D382E18C6F9BA1FF82AE943B337E15318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:38 +0000
Manifest this update: Sun 29 Mar 2026 06:00:38 +0000
Manifest next update: Mon 30 Mar 2026 06:00:38 +0000
Files and hashes: 1: fC4IphJDgaxk1ozoGhU8BmcLrhg.roa (hash: N7XoWkcB3kC5IT0irHQ74vIvhnjeo/y052R9T7FnOyU=)
2: h1Jq-BmhzVw08USZWDlg7KtmtsE.roa (hash: jeo43FpLi7UDUw/M2WnglTYY40DIOY19X0q2leeHc1M=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: x74FOePPJeYlGp90X2o4FrrflsoJQF2nARygbFkbH8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:18:c6:f9:ba:1f:f8:2a:e9:43:b3:37:e1:53:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Mar 29 06:00:38 2026 GMT
Not After : Mar 30 06:00:38 2026 GMT
Subject: CN=ff4aaf531ce51cdcf683e876bbb879abc7d7c43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:a1:a1:38:10:e0:e9:bc:f1:4f:bc:a8:bf:
1c:8d:ec:ab:02:e7:9f:54:23:a6:13:c4:83:65:39:
45:46:e8:ea:24:96:c5:1e:0e:a4:97:c9:e6:ee:a8:
29:4b:d9:7f:ad:27:73:0b:ed:eb:39:de:88:4a:99:
e5:f0:e4:27:e8:c2:c0:eb:8f:dc:af:72:a3:07:a4:
b5:5c:26:20:d8:c7:93:38:e9:ab:86:3c:dc:23:43:
98:fa:0d:9d:ef:b7:95:28:47:ea:21:14:cc:1a:c6:
83:5b:e4:51:9a:09:fc:95:f3:07:54:3b:4f:05:36:
41:20:30:ff:30:87:71:39:15:96:43:c0:a2:8d:46:
8f:a9:c0:6d:12:c9:9e:b8:ab:3d:32:9a:55:8e:f5:
a3:be:b8:7a:d3:9c:3e:8d:a8:9f:37:a9:3b:cb:8f:
70:00:42:76:a3:f7:3b:96:b1:1b:9f:22:d4:09:bb:
70:72:48:bc:ee:f6:f7:50:4e:88:f3:b3:32:ef:30:
0e:ff:c0:7f:d1:bb:40:2a:46:e6:e0:fb:3d:3c:f7:
72:d2:4f:aa:b2:88:a6:be:4a:7c:67:15:5f:4d:71:
a7:b4:03:a4:5b:d7:c4:e7:d5:a4:4f:f9:82:f2:5c:
a2:30:44:54:5b:d9:7c:b8:c3:ba:4c:8e:93:d1:68:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4A:AF:53:1C:E5:1C:DC:F6:83:E8:76:BB:B8:79:AB:C7:D7:C4:3C
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a2:65:91:b4:43:b7:a2:4d:9f:e5:fc:0e:bc:e9:ad:b9:b4:
12:29:03:d7:6d:65:19:37:fa:7a:47:c3:97:e8:82:cc:80:bc:
dd:39:88:59:b3:2b:27:5f:7a:c9:58:56:f8:bb:c7:c2:b9:c8:
44:6a:2d:92:b1:eb:ee:bb:0f:f0:04:a5:34:d9:00:3f:86:cd:
5b:7d:c0:59:65:26:b1:96:5d:89:70:56:e6:53:cc:80:b6:2b:
41:07:e4:1a:5b:6c:b4:6b:8e:10:d9:59:b3:f0:bd:c8:a6:31:
85:f7:f8:99:fe:af:6a:b1:71:78:60:24:ea:0c:fb:49:85:ac:
93:85:ed:06:54:18:5f:f7:3e:87:fc:a4:e8:5a:48:e6:4f:6b:
59:b0:16:c7:b6:06:e4:a7:53:17:bb:26:dc:14:1f:9d:f3:63:
0f:00:7c:41:e3:75:7f:43:c3:42:38:a6:1b:f7:88:7b:9c:19:
66:64:17:2f:13:a1:7a:20:65:89:5f:e9:ed:76:1f:62:94:a5:
38:ab:99:8f:49:f9:56:e9:08:f6:a7:9f:93:e1:bc:65:7c:3a:
26:d7:b5:67:e9:20:77:c6:58:9a:bc:34:41:22:e2:4e:ab:8e:
94:7e:9b:05:96:dd:2f:29:85:f7:17:d2:ba:6b:42:77:de:a3:
c3:e2:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:34 2026 by rpki-client