Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: VUG0qBlPEiZs71T1od7oJGrZPaoatK2CWoZjMSMx1zM=
Subject key identifier: 83:FC:BB:50:28:4C:5F:36:4A:61:33:CC:F7:1E:FD:E0:CA:BF:B7:40
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019D07420899F695C3844BDF3ECBCAE0C0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1876
Signing time: Thu 19 Mar 2026 18:01:01 +0000
Manifest this update: Thu 19 Mar 2026 18:01:01 +0000
Manifest next update: Fri 20 Mar 2026 18:01:01 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: hpf45Mq+OT4nbsOiY3Py+ZzeWjS4B6ktQDceHmH1j34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:42:08:99:f6:95:c3:84:4b:df:3e:cb:ca:e0:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Mar 19 18:01:01 2026 GMT
Not After : Mar 20 18:01:01 2026 GMT
Subject: CN=83fcbb50284c5f364a6133ccf71efde0cabfb740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:32:29:e6:88:e7:af:d5:97:d7:59:16:5f:
7d:83:2c:b3:b3:73:a5:92:64:15:2e:ab:18:90:4d:
92:70:ab:a6:f6:90:cc:76:98:fc:94:f2:9b:93:f6:
4b:17:bf:bc:18:2d:7b:d0:ac:a5:96:a3:e8:57:1d:
ff:71:87:bd:1f:d1:2a:23:b7:57:90:2c:45:05:60:
8f:39:a7:b8:0d:66:53:7b:07:ca:e9:06:85:00:1a:
1c:7a:b8:7d:34:9e:9e:58:cf:6d:a4:49:a2:43:fb:
17:5e:c2:be:02:e6:64:3b:8e:58:3d:9c:d2:2f:2f:
e0:8a:ef:7e:89:68:57:1f:87:eb:6a:41:a3:41:b5:
fa:c2:66:45:c4:43:09:03:1f:10:8b:ca:ab:b0:38:
57:83:e7:44:59:eb:9b:9f:e7:37:23:ae:da:ee:7d:
8b:c3:51:86:05:bd:6c:48:95:50:f3:d0:78:40:83:
59:91:28:47:8b:5c:d4:51:45:f4:1e:2a:5f:34:c2:
a4:0f:d2:1a:99:e5:65:60:58:3f:57:fb:4f:39:14:
fd:55:8d:3f:b0:b0:f2:bd:e8:6c:72:e4:d0:09:39:
bf:0c:94:25:23:2e:ac:f0:76:93:e8:b9:a4:d1:c2:
96:98:19:23:0c:6b:76:b6:8e:74:b4:08:b3:87:41:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FC:BB:50:28:4C:5F:36:4A:61:33:CC:F7:1E:FD:E0:CA:BF:B7:40
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:7a:de:96:9b:2f:2e:81:33:02:e9:fd:7f:fe:11:f8:20:
bb:72:fa:f4:e8:b0:d3:67:72:6b:a9:63:a2:dd:60:6c:fe:a5:
87:76:ca:bd:28:03:51:cc:64:c7:05:3a:4f:a6:99:a2:f4:c8:
4d:7f:5a:71:7b:3f:f5:c9:ca:71:b3:bc:22:4d:fd:61:49:b0:
ed:68:fc:01:3c:5e:90:87:68:f8:2e:a1:a4:bb:04:ef:35:4e:
9d:17:55:2c:f8:91:bb:3d:50:73:27:ed:a4:0f:cd:a2:86:f9:
d2:fa:34:5a:2a:ec:3b:b7:49:f3:a2:07:67:f2:22:c4:9d:42:
77:84:ae:a3:d1:c1:84:d0:4a:c1:6b:ba:6f:48:17:d1:15:a3:
6e:78:db:1a:75:ac:43:56:15:11:f1:60:19:b2:d5:96:48:43:
f2:61:c8:00:60:6b:0d:c7:6b:bf:aa:28:9a:5d:37:8f:d7:61:
39:e9:57:a6:fa:27:9a:68:02:af:00:d3:b7:85:ef:0d:f1:c7:
91:8b:51:34:73:b0:22:2d:a6:92:51:e2:8f:64:e3:6e:ef:24:
2e:20:b4:d6:41:3e:82:fd:4b:8a:52:f4:60:95:99:5b:97:d3:
73:82:33:cd:03:73:7c:71:21:03:c9:1f:54:de:01:24:e8:ea:
82:55:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:36:49 2026 by rpki-client