Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
File: r4TKySqfMTSUgaaOlRvFWvUI8uY.mft (raw, json)
Hash identifier: S65b1TiGm65sMHcevoOdjOpi6gUX7XFzPSfe4vNeFCs=
Subject key identifier: B9:45:E1:BF:95:C1:48:B1:14:B0:37:09:35:57:B6:95:B0:39:EB:E9
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Certificate issuer: /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial: 019D251609939309DE05512C4FDE421114C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
Manifest number: 11
Signing time: Wed 25 Mar 2026 13:01:34 +0000
Manifest this update: Wed 25 Mar 2026 13:01:34 +0000
Manifest next update: Thu 26 Mar 2026 13:01:34 +0000
Files and hashes: 1: 6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (hash: uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=)
2: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (hash: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=)
3: iJxSVbAFop81tRZJNuYo6wfOif0.roa (hash: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=)
4: r4TKySqfMTSUgaaOlRvFWvUI8uY.crl (hash: TWcKThEifPtR6RcqLplxrO9VPi0Qop9LMcl3y3Oh82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:09:93:93:09:de:05:51:2c:4f:de:42:11:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
Validity
Not Before: Mar 25 13:01:34 2026 GMT
Not After : Mar 26 13:01:34 2026 GMT
Subject: CN=b945e1bf95c148b114b037093557b695b039ebe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:fd:18:f7:f2:9f:49:39:5f:6a:93:15:d5:
3c:09:68:bb:4d:ff:5d:52:f9:bb:38:4e:0f:3d:bd:
e5:d1:83:33:22:b2:1c:93:04:34:94:75:05:15:93:
43:26:ec:65:22:63:c1:2f:3d:b3:52:39:d7:ca:42:
8a:c1:ad:7c:46:fd:9b:20:fe:b4:70:7d:8d:5a:c8:
af:13:a2:29:c9:f8:81:9c:30:d4:47:f5:8f:32:2e:
2c:54:e1:10:29:e2:ef:cc:ed:09:e2:0c:76:c8:74:
d3:3f:a6:47:12:34:ee:1b:70:ee:a5:67:e0:83:0d:
2e:c5:1e:6d:cc:c4:ac:38:fb:4d:e7:4b:db:83:ae:
d6:97:f9:34:6b:03:03:36:a0:e7:95:e6:d0:ce:3a:
cb:d7:ac:88:4b:f6:57:17:9d:3d:29:37:e6:97:e3:
98:7f:95:f2:97:4c:e9:34:6e:32:1e:4c:bd:db:5c:
f2:fa:87:c4:51:8e:cf:05:d5:e5:75:c7:d9:59:23:
59:d9:a3:db:50:86:16:2e:0d:6a:6e:b4:1a:50:fc:
5f:cb:8c:2f:06:43:00:a2:7e:90:62:02:f9:a0:10:
e5:3d:1d:df:3f:da:ac:6f:15:82:36:7e:cf:e6:5d:
4d:2e:38:36:aa:18:4a:3b:07:ce:96:32:c0:e4:53:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:E1:BF:95:C1:48:B1:14:B0:37:09:35:57:B6:95:B0:39:EB:E9
X509v3 Authority Key Identifier:
keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:e3:71:ed:9d:32:e5:2b:db:dc:4a:d6:92:82:79:96:c6:
bf:86:ba:fa:68:2c:9f:e0:1f:40:9d:36:d0:86:5a:32:a8:d8:
f6:24:2e:97:b7:cf:7e:01:30:67:0b:49:8f:9a:07:af:3a:c8:
27:44:46:61:c8:71:e4:e1:ec:c6:8f:e0:4e:51:6b:f8:2b:31:
0f:fb:eb:be:61:8f:67:20:65:e6:e4:fd:6d:2e:1e:20:cd:50:
6e:20:9a:0c:bd:14:fd:c1:6e:4b:43:84:99:93:55:8f:dd:33:
c2:4e:d6:b5:e8:a6:c3:4b:e5:0f:55:46:2e:3e:9e:79:5d:e4:
8d:7a:cc:e1:a0:53:37:51:ef:b7:d2:1b:4e:13:60:ba:66:76:
73:fe:07:d0:4c:1b:5b:fa:24:7b:3d:bb:5c:de:31:fb:6a:f7:
d7:60:a8:4f:4a:fa:fe:1a:23:ab:79:12:b7:27:d4:e3:44:52:
03:3a:20:37:2d:f6:6d:0e:51:c8:40:95:96:2d:14:b8:2a:ec:
a3:f0:3f:64:6a:60:7f:ed:64:ca:a4:65:0e:b2:c2:79:18:6e:
af:e9:ab:1b:b1:5f:e8:4a:03:c0:41:48:f0:f3:32:0c:c2:df:
60:4f:a8:40:53:86:8b:a9:6f:6e:27:0a:74:f1:0b:ef:d2:88:
05:6f:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:45:14 2026 by rpki-client