Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: /tdy1QHoXAIPqBRVyVfPnidnxVATccoiKbjX2Nz6pM4=
Subject key identifier: 41:72:2E:CC:1F:BA:8E:20:75:63:DD:0E:3D:23:51:AE:6F:D6:91:43
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019E31F2B54C1048A66F0D4AF706916041FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0D88
Signing time: Sat 16 May 2026 18:00:50 +0000
Manifest this update: Sat 16 May 2026 18:00:50 +0000
Manifest next update: Sun 17 May 2026 18:00:50 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: KS+r7qnZB3JmuJzP9S+60HhycP2jYBhUACW1vVuBdAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:b5:4c:10:48:a6:6f:0d:4a:f7:06:91:60:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: May 16 18:00:50 2026 GMT
Not After : May 17 18:00:50 2026 GMT
Subject: CN=41722ecc1fba8e207563dd0e3d2351ae6fd69143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:82:73:92:91:0e:dd:37:78:01:58:2c:9b:
2a:7b:c4:ed:c8:aa:55:5a:1e:17:0f:6b:0c:cd:2e:
75:b7:66:26:30:b2:3d:19:3b:07:79:1e:1f:c7:d4:
36:6f:54:80:8c:98:54:cb:79:9a:03:9e:39:65:8d:
42:4e:34:39:74:d5:00:d8:f0:34:7b:c6:0b:82:ba:
2b:80:49:c0:68:e3:23:0f:bf:89:eb:be:24:4e:ce:
cb:13:76:0e:5a:4f:6d:a2:4e:5f:16:d8:f4:82:d1:
24:aa:e0:fd:94:84:c0:09:cc:bb:5d:7c:dd:ca:a4:
13:f8:ef:00:ee:4b:d4:72:c7:9f:5e:0f:6e:6c:17:
3b:63:7c:8f:1b:0b:57:13:3a:80:99:fa:77:9d:ef:
cf:58:39:aa:80:b6:a7:e5:a2:99:a3:1c:ed:f7:48:
25:69:25:a4:c2:71:23:b2:7f:90:d9:4d:54:61:d1:
02:c1:66:94:2c:f3:1a:13:69:a2:73:48:20:c9:c6:
e6:8f:f0:79:20:7c:81:97:87:b5:8c:dd:cb:37:e6:
ca:eb:a2:70:21:8e:0c:25:56:ee:dd:7a:dd:50:c9:
e1:8c:1b:11:aa:a1:ca:5b:14:84:85:bc:fa:bb:6d:
31:13:d2:fa:6b:db:7b:dd:0b:89:05:69:52:cb:cb:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:72:2E:CC:1F:BA:8E:20:75:63:DD:0E:3D:23:51:AE:6F:D6:91:43
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:ac:ab:62:17:51:8e:19:9b:f4:82:41:6f:55:6e:f9:25:
69:3c:23:22:16:01:b2:f7:79:d9:ab:48:1d:5d:7d:f6:7b:a8:
d3:63:5f:46:d2:b5:6b:06:bb:69:07:b7:53:7b:06:fe:b1:c5:
27:14:06:a4:34:cf:f6:69:85:3c:a1:28:e7:e6:81:a0:61:b9:
30:65:df:2e:88:9c:e3:f6:94:1f:1b:0b:f5:e3:15:29:23:41:
5b:bb:97:2c:6f:9d:39:1a:01:83:c0:65:3b:49:c6:ce:73:b9:
56:6c:73:fc:31:e1:05:e5:ce:46:32:83:82:69:08:3f:f1:f6:
35:a8:16:42:9b:63:71:03:1f:4e:9e:06:29:00:d8:da:88:18:
a8:c7:4a:82:54:7f:74:23:70:0d:99:4e:39:b2:28:76:a4:1c:
67:59:4d:1f:7a:e6:87:80:a2:a5:67:a4:d2:ba:71:c5:f4:34:
97:b3:94:de:f0:b3:f3:5c:8d:1d:ea:dc:63:26:5f:96:db:56:
51:6f:a6:15:29:67:c6:dc:94:85:38:a4:37:ff:44:1c:a8:bd:
43:39:59:4b:e2:22:52:9b:51:06:ba:6f:55:2f:9f:de:f8:35:
07:1e:df:e6:bf:b6:34:9e:34:1f:9b:0e:7f:46:91:c1:63:9f:
68:a7:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:13:52 2026 by rpki-client