Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
File: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft (raw, json)
Hash identifier: NAmcS98rBul1gq5DWP04Fvrl3E85KGtMnAJL/GN7BhE=
Subject key identifier: 62:26:92:70:BD:37:4D:F2:A0:6D:C8:BA:58:94:4A:11:D8:3E:D6:14
Authority key identifier: AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
Certificate issuer: /CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Certificate serial: 019D2B4E7E3659C000A6718E6DE28100467D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
Manifest number: 0329
Signing time: Thu 26 Mar 2026 18:00:57 +0000
Manifest this update: Thu 26 Mar 2026 18:00:57 +0000
Manifest next update: Fri 27 Mar 2026 18:00:57 +0000
Files and hashes: 1: r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl (hash: tLd3ey0zVPvgYBxh6nx4hhClWoVboQ+h3Y5ftiAvMBA=)
2: vSoBznDbkikChHtY3NKyw5nmxlM.roa (hash: rSKQo5evduX7uHTKdQHTDx+TSA/wtivZWu5lTBpqgRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:7e:36:59:c0:00:a6:71:8e:6d:e2:81:00:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84e3d23ff60b829e146ebdab4a0ae61de0f4fb
Validity
Not Before: Mar 26 18:00:57 2026 GMT
Not After : Mar 27 18:00:57 2026 GMT
Subject: CN=62269270bd374df2a06dc8ba58944a11d83ed614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:74:97:51:8b:f5:24:18:6d:52:63:ad:50:
69:ab:25:9c:a9:b0:af:b3:2b:4d:45:f8:cb:ab:e4:
0c:7f:8e:71:be:77:90:ed:ce:75:1e:93:0d:36:70:
b6:6b:37:04:7f:1a:31:80:de:2f:bb:a7:1d:d7:f5:
83:10:fd:5c:8a:cd:60:c0:e9:0d:3a:07:6b:42:df:
d0:c7:74:39:07:4c:cd:bc:b7:fc:ae:4c:08:49:7c:
03:d5:01:8f:f4:e6:4b:64:67:5c:7f:57:65:e1:1e:
94:5c:78:2f:8b:b6:3b:6b:a6:11:2a:b2:b8:f1:1b:
f6:80:99:ed:b6:0d:58:47:1d:60:db:14:fd:74:a2:
d8:60:c8:fd:a1:6b:ee:13:0a:6b:e5:45:c6:04:fa:
55:61:73:c3:db:ec:b7:5d:10:88:00:6e:74:02:d4:
dc:49:f3:aa:bc:1a:60:d6:e9:b1:80:4b:b0:4d:0c:
e0:e0:20:3e:80:d5:fe:7c:ca:84:3f:1a:d7:f6:65:
9b:98:1e:b2:ad:28:15:e2:18:f0:69:d1:c8:ef:3a:
b0:4b:48:c4:ae:83:1f:bd:39:f5:31:a6:3d:ad:26:
93:bf:be:a4:99:0b:99:75:da:ea:e6:19:69:91:45:
cd:d0:34:cd:0f:4d:a1:5f:ed:3d:8a:71:1f:f5:33:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:92:70:BD:37:4D:F2:A0:6D:C8:BA:58:94:4A:11:D8:3E:D6:14
X509v3 Authority Key Identifier:
keyid:AF:84:E3:D2:3F:F6:0B:82:9E:14:6E:BD:AB:4A:0A:E6:1D:E0:F4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ba2391-05a1-4bcb-a61d-e5d8e3750009/1/r4Tj0j_2C4KeFG69q0oK5h3g9Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:4c:2b:2b:ab:02:d1:b1:03:5d:d4:07:1f:75:05:f1:32:
c8:40:cd:08:11:bc:26:d4:b8:c4:03:03:d3:96:1f:f3:b4:08:
61:c1:87:51:cb:d0:59:6b:80:24:19:6f:16:a5:39:b4:7f:cb:
b3:f0:89:84:ac:f4:15:7c:6b:99:ed:fc:fe:73:44:68:ce:f3:
a7:41:a1:23:5d:01:13:8c:e4:71:80:e5:63:1c:e6:97:02:25:
ab:84:a0:e7:e2:55:f6:bd:f0:6c:39:61:7e:c7:76:12:16:c2:
9d:09:8d:eb:0b:7d:13:ae:d3:ad:d0:c3:b6:92:64:41:21:49:
5c:50:f6:8f:fa:3b:ca:01:6a:20:d6:be:af:42:7e:d0:a7:e8:
2f:fb:76:bf:e7:79:10:30:26:23:a9:bd:fc:d9:9a:22:f3:2e:
e5:2b:31:1d:38:52:8f:a4:76:25:de:e2:f9:91:d5:70:7a:35:
43:89:eb:94:74:bd:3a:30:14:96:f1:ae:91:bc:9b:98:d9:70:
38:71:ee:89:b4:44:8a:81:b4:d9:9a:42:47:c1:78:95:88:c3:
e1:92:92:3d:83:66:c0:a2:69:c3:4a:37:2b:00:14:7f:03:77:
2e:88:b1:33:d3:0c:82:9a:39:7f:d7:29:ca:a3:bc:ad:d1:43:
22:63:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:19 2026 by rpki-client