Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: FEQEOKf5NNuGPRr6saPyVKTD9FrPx5cQCEFq9a9xOUg=
Subject key identifier: 50:2F:DB:4A:69:D1:4F:C3:AC:54:80:59:C9:FE:4D:EB:0B:A3:7D:C6
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 01A0E9D2796744FA89E15AE05E114965D228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 21:01:20 +0000
Manifest this update: Mon 28 Sep 2026 21:01:20 +0000
Manifest next update: Tue 29 Sep 2026 21:01:20 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: /5pPGauNlW4JTnv0IKw/6GX3DSeS19feRbYxft7mWBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:79:67:44:fa:89:e1:5a:e0:5e:11:49:65:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Sep 28 21:01:20 2026 GMT
Not After : Sep 29 21:01:20 2026 GMT
Subject: CN=502fdb4a69d14fc3ac548059c9fe4deb0ba37dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:85:4e:0c:1f:b3:48:0e:a4:68:fc:2a:2f:
e3:72:37:43:2c:fd:1a:b6:23:b9:58:1f:20:0d:df:
ed:5e:01:8c:a5:7f:76:5a:a7:ac:dc:38:91:56:ca:
1d:7d:30:ba:d3:f1:a9:91:26:1a:e0:85:6f:0a:96:
31:20:92:74:c0:cf:75:5c:23:9a:1c:24:f4:01:23:
1a:09:9a:ce:ad:5b:e1:a0:ba:64:d9:b7:25:10:3b:
b7:fb:3d:fb:61:fd:58:ff:8e:f2:49:70:ca:f9:60:
ef:24:33:6a:3f:04:e5:ee:71:14:60:f6:d2:26:27:
b0:e9:f0:8e:30:60:23:b7:18:57:9a:4f:ef:0c:c5:
d6:b2:73:c0:d6:6a:68:1f:b6:ef:6b:0e:bb:be:28:
ab:5f:fc:83:70:2c:fe:69:e2:53:94:73:c0:6c:53:
c1:15:b9:1a:20:90:19:ea:bf:eb:dd:9c:e1:6f:fc:
90:fa:1d:6e:af:15:d9:82:cb:9f:76:ef:ed:df:92:
57:8b:aa:ef:39:ec:fc:21:d0:d5:c6:b2:aa:31:ea:
7b:ee:89:5c:cc:a9:50:2a:3e:ab:6f:a7:60:0d:20:
1c:3a:c2:32:c2:ae:5f:35:f7:d0:37:bd:c9:b9:17:
81:21:0d:23:f0:5e:c1:91:1a:00:b1:2d:f2:00:aa:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2F:DB:4A:69:D1:4F:C3:AC:54:80:59:C9:FE:4D:EB:0B:A3:7D:C6
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:c4:e4:e7:52:45:a2:cb:39:d7:cf:6f:0e:74:08:5c:f3:
b0:c3:3e:05:24:d2:e4:c4:e8:d3:e8:99:08:e6:c5:e1:66:a3:
e9:6c:9a:25:56:93:28:f8:24:f9:c7:11:67:d7:33:c9:47:01:
b8:80:67:b2:b7:21:9e:b2:bb:ac:0f:06:05:b1:09:08:f8:e2:
65:b2:86:c0:95:c1:2b:f3:25:07:b4:02:b5:22:2d:96:4a:7f:
65:e5:d6:46:00:51:b6:a1:df:8d:d8:a6:41:42:cd:cc:b5:41:
af:9e:2c:6c:e8:e9:ce:9a:49:20:93:e6:38:9b:d2:91:5c:01:
cf:49:fe:76:69:ca:9e:0d:b0:0f:fa:9d:ab:f0:f3:eb:41:f8:
21:a1:56:79:cf:08:62:1d:77:46:c4:2c:61:d2:37:09:7d:ef:
e8:dc:35:28:56:70:b8:2b:da:dd:fc:03:4a:5c:be:c2:cb:ef:
09:7c:b6:22:9b:96:b7:60:f7:17:a3:ab:8f:dd:96:0e:1d:64:
b5:ba:b2:eb:21:98:24:2a:48:ca:e1:4e:4c:f9:5f:3e:3f:c9:
94:66:9b:a0:f5:e3:9d:ad:2f:0c:99:55:be:00:9a:6a:5a:db:
9e:aa:e7:a9:1f:35:6b:18:8c:a8:93:b0:85:fc:41:fb:86:b0:
e0:e7:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:52:49 2026 by rpki-client