Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: LvtAm93H1O1aQDBvaKdQp0SZ2caYCLjFK8WGH17WMow=
Subject key identifier: C5:F1:2F:6F:2E:DC:0A:AB:9A:F2:02:9F:2C:89:45:06:C9:F5:F9:17
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019E0061A899507654FE62B4B32CFE7D63B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 18F7
Signing time: Thu 07 May 2026 03:01:00 +0000
Manifest this update: Thu 07 May 2026 03:01:00 +0000
Manifest next update: Fri 08 May 2026 03:01:00 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: cpEatfRlXT+xeJU3CasXgprh/60NHKTcBsxi26Dnmwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:61:a8:99:50:76:54:fe:62:b4:b3:2c:fe:7d:63:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: May 7 03:01:00 2026 GMT
Not After : May 8 03:01:00 2026 GMT
Subject: CN=c5f12f6f2edc0aab9af2029f2c894506c9f5f917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:5a:b3:85:8d:25:a6:20:07:fc:ac:64:1f:
7f:10:b0:4d:a4:18:bb:a6:65:cb:dc:d8:30:c5:4c:
78:34:43:1b:74:32:40:d4:fb:3b:53:98:b8:af:0c:
50:4d:51:b2:8c:83:14:bd:e5:a5:1e:74:df:7b:ee:
90:2a:1f:9c:73:b1:54:66:07:45:2c:80:be:79:b3:
e9:e5:95:44:20:30:5e:f5:9e:37:f3:47:f6:7a:ad:
7f:c4:54:0e:e4:54:c3:12:1b:43:22:ea:c8:f7:c8:
b5:c8:8b:3e:ab:85:81:51:b7:d6:41:cb:89:5b:ea:
43:ae:68:08:24:c7:a4:bf:fc:e3:66:17:7d:3e:2c:
08:b0:3a:6a:aa:48:ae:c1:9c:c5:4b:db:7b:c5:b4:
e2:33:d3:4a:12:36:a7:66:66:c5:87:cb:fb:32:d9:
10:a0:78:96:0a:83:2b:94:c9:92:cb:c4:e1:06:71:
95:42:6a:db:fc:d3:56:82:83:d7:2c:42:64:b9:80:
65:e2:a5:16:19:8f:f1:95:bf:34:c6:90:be:bd:c2:
5f:6f:8a:03:94:ca:f4:06:6c:d4:83:60:17:d9:b0:
9e:2b:c4:8e:e0:b4:c5:ee:5e:66:2a:15:0d:6b:d0:
26:37:16:4a:46:7e:09:f1:37:0c:ee:42:3e:a6:fa:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:2F:6F:2E:DC:0A:AB:9A:F2:02:9F:2C:89:45:06:C9:F5:F9:17
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:76:c0:4c:6b:ee:86:e9:e0:ed:02:9c:ac:6b:d0:06:84:
a2:55:66:53:f5:b5:dc:f3:11:3d:2f:51:de:99:52:84:41:8f:
9f:05:7d:3a:b1:be:df:aa:89:ef:ad:01:1e:7c:25:72:65:03:
d9:d4:8c:3c:38:17:0f:4a:85:ef:b2:47:ef:94:5a:02:b0:e4:
eb:f1:08:ba:0f:39:b7:cd:a0:7d:65:f6:a0:7c:46:ca:72:1b:
bb:dc:af:2d:8e:e9:de:c6:04:b7:f2:83:02:7d:b2:bf:5a:63:
9c:a3:e4:6a:af:7e:95:a6:25:ed:a4:e3:a2:fb:be:44:b5:79:
ed:e2:81:6d:79:fc:fc:66:ac:80:24:81:6e:3b:35:78:6c:68:
e5:81:2b:fc:61:4d:fe:95:5e:97:d8:fa:4a:8c:3e:17:49:5a:
10:6a:8a:93:8d:1f:69:1a:8b:92:68:55:78:ce:cd:f7:9b:ac:
2e:42:5a:a4:d1:f0:72:67:56:bb:9b:26:e5:50:c8:a3:a6:8e:
2d:90:c8:8c:66:6a:83:4f:c5:5d:2f:ec:b9:74:d2:c5:36:8c:
0f:ec:2c:da:fb:a6:a9:20:79:98:8d:ed:75:54:05:1d:d5:6f:
05:8d:35:c5:f0:7e:92:1f:73:58:a8:e3:da:56:66:b7:88:44:
29:f1:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:31:32 2026 by rpki-client