Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: hAhO/juJ6GQqCzQatJworOUt2voXOg4WJqGD9vdlUPs=
Subject key identifier: 38:C6:E8:6D:7E:C8:19:40:27:89:E7:AF:A7:BF:CC:CC:32:B2:E6:92
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019D38D395569AA1B6F50B9DFE1BE301BDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0D07
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: xA8g4W2EEh9KDlzU5qHjLwuZG97libHXtUGJu3uMRRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:95:56:9a:a1:b6:f5:0b:9d:fe:1b:e3:01:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=38c6e86d7ec819402789e7afa7bfcccc32b2e692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c4:40:ae:64:5f:e5:02:43:e2:1b:3a:e4:94:
40:fc:b0:b3:98:ca:04:fd:5d:05:df:59:85:9c:81:
59:f3:56:48:72:16:54:1e:f8:6c:52:20:69:6f:25:
00:81:c3:f7:df:8c:11:18:36:e4:52:e0:0d:03:76:
a1:2e:07:eb:b4:a5:78:75:96:cc:00:49:16:06:e8:
18:5c:80:b2:f2:39:38:6d:ec:24:74:75:59:5e:cf:
4d:88:e3:87:49:5b:3a:06:6b:dd:17:b8:11:8b:35:
ad:5e:4e:cd:96:cf:12:83:1f:4e:1a:f7:ef:83:4a:
c3:7f:be:a8:de:4d:fa:14:47:ea:31:e9:72:04:b8:
20:50:42:02:0b:af:38:51:b4:1f:ed:09:9d:90:72:
1a:cd:f7:88:ca:f7:cc:0c:3a:9b:47:7e:21:3b:f2:
ae:7b:b5:1d:23:7e:b7:2c:08:2a:d9:e1:dc:ef:63:
47:9a:bb:65:a9:bc:51:95:f9:82:d5:09:c5:31:8c:
ec:29:fd:63:f1:8a:a6:0f:d6:ea:57:13:b1:53:45:
a1:4b:ce:70:5b:4d:03:cf:8b:d6:fd:b1:58:9c:61:
40:ab:56:60:10:57:c9:7b:e3:76:9c:83:9a:e1:b1:
1e:1d:80:82:d8:43:90:1e:84:4a:5b:39:12:a5:8c:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C6:E8:6D:7E:C8:19:40:27:89:E7:AF:A7:BF:CC:CC:32:B2:E6:92
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:df:a8:3b:25:3d:8b:85:c6:80:9e:40:2e:a9:a6:92:af:67:
ba:31:47:e1:72:d0:a7:3c:6e:59:3d:61:1d:05:4c:d0:90:e1:
00:22:89:8b:ef:19:2a:23:ea:09:ca:e0:6e:48:db:15:c8:0a:
a8:db:e7:11:ff:a8:32:92:c5:f4:af:12:3b:75:6b:9e:1e:90:
70:79:67:ec:55:ae:77:a1:b7:a6:d0:92:b3:f8:71:a2:a0:d8:
63:a0:4f:f9:7d:17:60:68:60:78:f4:af:bc:c7:ca:71:dd:20:
b9:63:a8:d1:e9:9b:01:20:bd:a1:c2:70:f8:22:ea:71:12:0e:
9c:b5:16:e2:0b:48:c7:17:34:49:00:61:f7:29:e4:80:bb:1d:
f8:f7:59:f6:fa:e7:f5:9c:9e:79:c1:1a:db:4c:0b:f4:52:5e:
58:72:89:69:14:e3:7d:0d:cf:af:75:4b:a5:79:95:a5:1b:84:
b3:e9:a9:7d:e4:44:8a:9d:da:93:08:85:b1:39:49:60:af:ea:
dc:85:bd:d1:a9:00:eb:77:77:ae:17:74:12:57:d6:c0:0c:ac:
f2:75:37:bc:fa:02:cf:e1:bc:fa:e8:73:64:e6:f7:b1:10:00:
27:93:8a:a3:49:a8:86:a2:90:8d:be:75:72:69:63:e6:2f:dd:
5e:19:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:39 2026 by rpki-client