Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: uMcycDLAuXbIB1pwuyu5V7OIDc5Twu4CSiUmDvTG9SA=
Subject key identifier: DA:60:9D:2D:95:C4:C7:AB:C2:5B:28:E4:E8:C3:37:4A:F1:F9:12:02
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019FF86C03CB2D5E2284223744F46F81C132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 19FC
Signing time: Thu 13 Aug 2026 00:00:56 +0000
Manifest this update: Thu 13 Aug 2026 00:00:56 +0000
Manifest next update: Fri 14 Aug 2026 00:00:56 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: MH4kxP6cXPGptHuNsti2ukmfrOMUU5DiqIDNGoBekBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:03:cb:2d:5e:22:84:22:37:44:f4:6f:81:c1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Aug 13 00:00:56 2026 GMT
Not After : Aug 14 00:00:56 2026 GMT
Subject: CN=da609d2d95c4c7abc25b28e4e8c3374af1f91202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:ac:f9:54:06:2e:15:0a:ea:47:4a:64:02:
e8:60:b4:a5:3d:7d:8e:69:37:36:8f:cc:70:2f:4a:
be:28:d6:97:93:47:b8:43:fe:eb:30:77:c9:b8:20:
14:22:03:3d:52:71:ae:5d:39:54:e4:7c:69:ab:5d:
1e:8b:e0:3e:1e:7d:8d:34:4b:b4:66:c3:ef:d2:6b:
91:64:c0:99:3f:89:73:91:3c:04:90:98:4f:6f:ab:
c2:e9:9b:b9:a0:b5:66:ec:d8:32:0e:60:9e:0c:b3:
94:64:c9:f4:21:d4:a5:b0:db:25:3e:44:73:da:2f:
0f:9b:06:8b:4c:65:d2:36:b8:c2:d0:57:d2:c2:b2:
28:fb:2b:48:b2:0c:30:a1:9b:9f:57:7c:c0:32:8b:
79:ae:d7:ad:69:3a:4a:4c:fd:f8:19:6e:67:e5:c0:
3e:5b:fa:fa:fe:5d:de:d2:15:e4:63:19:67:3f:18:
f8:18:50:8f:53:0a:65:9e:39:4b:61:a4:b9:1d:98:
b5:e7:5c:69:4e:34:71:76:3e:2b:d1:e4:3f:75:ee:
3c:5b:d5:3d:7c:27:0b:b9:85:47:73:7b:a6:69:85:
c4:5b:86:53:55:0f:de:60:ca:bc:18:8a:2c:88:11:
bf:04:06:ab:ca:93:74:b9:24:bf:29:24:51:2f:46:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:9D:2D:95:C4:C7:AB:C2:5B:28:E4:E8:C3:37:4A:F1:F9:12:02
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:83:ba:b4:ad:bd:42:f1:3e:97:64:99:54:45:ce:63:26:
ee:6e:cc:d6:aa:cd:02:43:a8:fd:4e:ec:5c:e7:f6:29:52:d7:
c0:aa:f9:84:18:8d:4d:ca:e6:08:c4:0d:b5:e2:d0:1a:6b:fe:
39:f6:3d:af:59:3b:c1:ba:f3:32:37:16:5c:46:19:3d:5e:b0:
db:86:8d:b5:10:cf:94:cd:6e:06:b8:01:ac:34:28:21:48:1d:
35:a9:29:91:96:d9:c2:08:d4:a3:f8:1f:c1:f9:fc:4f:66:5d:
48:e0:1a:83:33:91:1f:ef:1a:a5:83:19:49:da:74:9d:bf:05:
15:26:ab:5f:d1:f0:27:f2:07:92:20:cd:fb:f6:a3:bd:db:8f:
3e:8a:3d:7a:af:0b:8b:ef:8a:5b:89:53:c1:38:bf:23:ed:58:
78:ce:31:c1:b1:40:01:31:b0:71:f1:cc:13:ee:e4:32:91:10:
0a:e2:21:5a:2e:a7:ca:28:63:18:78:d9:ee:8b:05:40:4f:8a:
af:7f:83:9e:e8:ea:4f:23:4d:e5:97:9a:1c:d7:fb:81:f6:6e:
b5:7a:bb:0d:d1:a1:fd:8e:ea:5f:fe:6d:6b:d6:a3:74:15:97:
c3:e7:2f:bc:3f:05:39:eb:fd:1c:ab:6e:26:b7:1a:58:f6:fd:
ca:a7:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:41 2026 by rpki-client