Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: tX7qvHsHOgfkPMB1cxQAROQtLnZm6l6IbwXMa04jiog=
Subject key identifier: 0B:2B:EE:EC:D2:85:D1:3E:37:43:C1:2D:34:56:07:08:77:13:E3:A0
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 01A0CAEB61A5499358ABD379442A5ECA0F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 21:00:18 +0000
Manifest this update: Tue 22 Sep 2026 21:00:18 +0000
Manifest next update: Wed 23 Sep 2026 21:00:18 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: CRrMcFNUdQLOz3d+o4VJoDtscqhLWi/4rKtfvRCYaKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:61:a5:49:93:58:ab:d3:79:44:2a:5e:ca:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Sep 22 21:00:18 2026 GMT
Not After : Sep 23 21:00:18 2026 GMT
Subject: CN=0b2beeecd285d13e3743c12d345607087713e3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:da:bd:ee:f4:b5:f3:5d:b6:a7:57:5d:36:
b8:5f:6d:0e:0e:77:52:0c:2e:1e:d0:e0:a2:75:11:
d0:3c:44:6b:4a:a6:02:85:0a:96:e4:56:f5:d3:7e:
b4:32:77:6e:23:ef:ce:ac:ed:60:76:b0:8d:7b:ac:
95:fa:d5:93:0a:db:cf:e4:53:90:e4:5a:e8:3d:e4:
75:49:2d:8d:b0:ba:0f:14:f0:4e:20:80:c1:78:07:
6f:ad:b8:af:86:58:ff:0b:42:4e:22:d8:4b:cd:8b:
8d:9b:5a:f5:4b:05:aa:5c:be:a9:96:fa:94:d3:dc:
8e:84:4f:e7:0d:d6:5a:f7:70:6f:b0:38:04:13:26:
44:4a:8a:2d:e7:42:df:2a:87:41:3b:0b:ff:e3:cc:
e2:0f:2e:16:91:18:21:ac:e0:89:10:f4:43:28:f5:
0e:77:e8:09:2e:2a:7a:b6:c3:2d:ae:82:32:0f:3c:
53:af:a5:cc:97:f0:67:81:19:a0:d1:c2:48:06:05:
a8:39:c8:7d:ec:6e:e8:a3:7b:7c:06:51:87:de:d3:
9a:f2:dd:60:10:72:08:30:ea:e5:e5:5d:30:e0:13:
ce:48:07:f7:76:2d:8f:f9:be:9b:b6:b2:93:54:44:
9c:b5:74:78:d4:1e:71:2e:57:51:5d:b8:19:30:ff:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:EE:EC:D2:85:D1:3E:37:43:C1:2D:34:56:07:08:77:13:E3:A0
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:ee:e6:ba:8b:9b:36:25:a5:6f:2d:b4:63:e4:97:be:81:
3b:fd:7f:b1:db:c8:c2:0d:01:a1:f8:0a:44:23:2e:3d:81:61:
61:39:03:75:f9:80:60:c0:59:85:9a:31:d4:57:a8:02:4b:7e:
d2:14:56:ac:b6:5c:67:a0:da:58:65:68:da:9f:2d:9c:94:8f:
94:81:6a:2f:ed:ba:a3:65:06:12:47:83:09:9c:fc:da:60:ae:
05:2f:c3:b7:96:1b:b4:96:93:94:2b:69:62:33:61:e8:b8:66:
84:d8:b7:46:d3:aa:5c:e0:ff:e0:66:21:f2:c8:c3:3f:00:66:
c6:4e:9a:c9:3b:55:63:ae:a4:86:6c:3d:c3:bb:f1:fd:36:fe:
6b:c1:fe:33:9c:f1:a9:95:85:66:f5:98:fb:36:c9:02:33:02:
56:76:f0:3b:06:2f:f2:30:b8:15:74:22:46:b2:1c:e7:78:67:
dc:b2:c4:99:fd:80:e4:dc:cd:aa:a9:24:13:15:2e:da:15:9e:
e7:7f:ed:24:46:53:0b:5b:f7:ba:3a:fd:d4:23:e9:63:d2:cf:
af:8b:ae:73:20:63:9d:0e:3f:d2:15:79:cf:11:92:d8:b6:96:
09:63:7d:3e:50:72:cd:6b:74:6b:ac:83:d2:e6:87:f6:76:4f:
6a:a6:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:14:56 2026 by rpki-client