Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: C4X1ANw4aIzanCFChSZcfRNCIZ20caKHo48HZk+ZiHk=
Subject key identifier: 3B:D4:E1:0D:3E:C3:FE:F0:F5:4D:97:F5:1F:2A:A8:60:7D:B4:7E:B5
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019EF79298749E2A33246EA34F7D23A9C520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1977
Signing time: Wed 24 Jun 2026 03:00:39 +0000
Manifest this update: Wed 24 Jun 2026 03:00:39 +0000
Manifest next update: Thu 25 Jun 2026 03:00:39 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: +bEoH2eFqcCbgXPx6qkiFbGN4qdFMfvAQOeriUA8/Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f7:92:98:74:9e:2a:33:24:6e:a3:4f:7d:23:a9:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jun 24 03:00:39 2026 GMT
Not After : Jun 25 03:00:39 2026 GMT
Subject: CN=3bd4e10d3ec3fef0f54d97f51f2aa8607db47eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6d:38:7c:c0:6e:74:ae:ac:28:98:ff:d1:6e:
68:f5:07:c9:ca:7c:da:f3:55:aa:6a:26:66:7f:16:
fe:66:5d:0f:3f:54:8a:07:fc:28:9a:42:d7:16:45:
aa:e3:99:4d:5d:58:d8:77:f3:5d:7b:a1:88:8e:17:
94:a1:e2:15:d3:3e:a9:5f:07:f6:fe:8f:3e:5e:8d:
68:65:1c:81:b5:f2:49:f8:f0:b6:ac:b9:36:c7:30:
46:2d:85:8e:34:99:1d:22:1a:a3:3c:9e:62:7b:1e:
af:e8:e1:e2:40:e9:86:ee:da:c4:cb:b3:a5:a6:86:
6d:6e:81:06:76:0c:67:5a:77:74:4b:69:ee:c1:a3:
d0:55:2b:e6:84:7d:76:1e:b9:88:b3:d0:08:7c:65:
c2:83:6d:6a:78:de:18:8b:2d:ce:cd:71:7c:1f:3a:
60:6d:cc:3c:02:b1:65:06:e8:54:19:6a:1f:e6:a6:
37:1a:1f:25:07:9c:f8:6a:fb:6f:b7:c9:3b:fb:56:
0a:b3:7a:a7:5e:8a:7b:49:99:46:43:aa:c0:ca:8d:
c5:16:97:bd:be:d3:03:c0:06:4a:2c:9c:b1:d8:37:
36:31:d6:47:fc:40:fe:65:fb:44:43:ff:95:37:aa:
c6:75:2a:34:91:80:69:53:a6:cf:12:95:a3:07:ad:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:E1:0D:3E:C3:FE:F0:F5:4D:97:F5:1F:2A:A8:60:7D:B4:7E:B5
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:56:04:6f:b3:d6:4c:a8:c3:f9:44:c5:5d:dc:1b:42:16:ac:
f4:45:aa:50:4f:09:43:ad:bd:20:05:04:81:48:fd:4f:63:c3:
44:87:11:48:69:cd:47:f9:b8:ed:2b:61:b5:22:57:a6:fb:41:
b5:e1:d6:1c:5b:54:83:86:03:b8:6a:80:57:9d:bf:6c:d5:af:
00:91:dd:85:90:b4:71:06:2e:3e:d3:df:7e:13:e6:53:c9:8b:
45:6d:a3:c8:2e:6f:65:c0:7d:f6:f3:99:98:22:6c:72:33:ff:
56:3a:f3:ae:23:a9:03:47:14:3a:97:de:00:e3:46:20:2c:f4:
e4:8e:36:91:c9:e9:fc:59:5c:43:09:dc:53:7a:a2:64:52:12:
a3:c1:87:8b:d5:35:c4:9c:75:36:cf:42:8f:b2:76:9a:3d:90:
d9:6b:28:a9:16:a5:f9:2d:32:aa:0e:95:29:9b:d3:0e:2e:92:
60:81:fb:e3:e4:b5:50:95:25:b1:37:cc:89:cb:f2:78:7f:69:
90:cb:e6:7a:fc:01:c7:88:34:f1:04:9e:6c:45:47:d5:a2:b7:
1d:e7:0f:ff:01:3b:96:95:7e:55:56:7b:06:10:85:e5:02:e7:
9b:ed:bc:bc:ba:2e:bc:44:27:06:ef:71:e1:4c:0c:02:bf:b6:
3a:eb:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 13:19:51 2026 by rpki-client