Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: UWZo552QT7vuApdi9ycFiVurG9IiKgryNzCm43eerBg=
Subject key identifier: F5:8F:30:E0:69:17:60:79:51:EB:B8:33:B6:71:78:C7:F3:EB:8F:87
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019D284E0678A59A74C9BFBB84EEC05F828F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0F22
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: 6O5BbflBHZS9SWcDuCRDcLypoi4.roa (hash: 26ye9VSXM4sACCZKNcE0QbzJrJJuPyXdsH1u9UE7fPw=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: 6ZMFdPcMl9dsZcq6XDUnws4EepsbkEsIq6p0PL1nlBc=)
3: sxio-JXZNlFkXF8EoRP4tx5DL7c.roa (hash: IdBSRsFLBVFfvelPbMkEHbKxbVg+TQkt4twf6UFXM2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:06:78:a5:9a:74:c9:bf:bb:84:ee:c0:5f:82:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=f58f30e06917607951ebb833b67178c7f3eb8f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:8e:90:3f:46:91:13:50:86:74:b4:d3:55:
fa:18:11:72:34:34:8c:ff:6f:f1:15:0c:20:69:4b:
84:d1:23:b6:1f:d6:e5:86:b8:78:c6:01:58:0b:a6:
e7:13:51:b6:0d:54:1a:52:97:97:b5:d9:37:d2:97:
60:f6:b7:2e:27:90:9c:2e:44:5e:27:ea:27:ad:50:
ad:33:b5:16:21:9b:89:b4:61:c6:c3:19:17:bb:17:
0a:66:f1:a8:0f:e8:3b:dc:85:ae:e3:90:21:e3:38:
6c:0f:5b:3d:41:e1:af:ef:f3:b2:81:5f:5e:8b:e8:
e4:b9:1a:d2:a0:bf:ea:20:8b:2e:ae:0a:3e:28:d3:
4c:66:f2:e6:31:11:4a:0d:8e:1f:d6:35:22:a4:ce:
dc:05:db:c8:72:90:47:b2:61:84:67:68:85:f7:d3:
c4:44:3b:bc:29:d7:45:ce:01:d4:8c:ee:01:21:c4:
99:27:f6:85:ed:fe:78:92:f6:7b:e4:21:87:42:ba:
af:e9:b0:43:d7:66:07:58:2d:a3:f7:b8:7b:5a:e5:
84:7e:06:0e:d6:4a:70:1b:38:53:62:d7:fc:e8:2b:
1c:fc:67:7d:7f:2d:42:fb:9d:c6:51:51:e9:49:af:
fa:b5:e9:14:f0:60:0e:b8:97:d6:3d:ab:4c:25:16:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:30:E0:69:17:60:79:51:EB:B8:33:B6:71:78:C7:F3:EB:8F:87
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:8c:05:9d:70:9b:1a:76:8c:23:ba:a9:9f:a4:1b:90:db:
c2:08:b7:07:43:34:77:5b:82:fa:7f:9a:b8:5b:3e:a5:65:87:
d1:a8:30:40:9c:84:06:79:92:39:9d:9d:99:f8:8a:cb:db:94:
f1:27:77:3e:39:c1:2e:22:ae:05:09:e9:2e:43:c9:27:eb:82:
f4:19:9a:5f:31:ae:33:9b:ab:6f:7b:3f:14:56:72:97:99:f5:
cf:f2:9f:ae:8b:8a:13:46:0e:33:c2:6a:18:9f:5b:23:38:6d:
a3:77:31:6c:61:8c:b9:b5:3c:3e:8f:90:62:7a:69:91:85:7a:
1c:d1:55:7c:f5:55:1f:25:31:63:08:b6:44:da:d5:fa:bd:23:
88:db:ff:ff:be:01:3b:cf:e2:96:97:a9:44:ea:93:0a:ff:5f:
a2:34:42:99:1c:88:a6:3c:0d:a9:b4:6c:cc:80:20:e7:8b:5a:
bd:e8:60:d5:0f:8f:54:f2:97:10:a2:dc:ce:06:ff:e7:ee:d1:
e1:a3:65:57:84:e9:0a:3d:ad:ea:e7:32:de:0d:0d:20:dd:ee:
d4:b8:ea:1f:14:3a:b8:da:cc:13:9a:03:8e:46:3c:67:50:06:
a8:e2:2f:7d:e8:57:40:b0:f1:85:10:9c:2c:5c:59:b7:6b:75:
1e:bd:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:44 2026 by rpki-client