Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: 9iepQ0oULwI7qYIO6m9vzWuY3tBPntvUaAAl85ZByJQ=
Subject key identifier: 4D:FF:43:EF:28:09:9B:4F:3E:E8:6D:82:C5:6A:3E:D5:7B:16:9E:1D
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019E1F48399D8A549799A79117755FE44D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 03:01:27 +0000
Manifest this update: Wed 13 May 2026 03:01:27 +0000
Manifest next update: Thu 14 May 2026 03:01:27 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: GXJKYUGNCncI7k431Kft90uEAOzZ0v4ax92RvaEnzmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:39:9d:8a:54:97:99:a7:91:17:75:5f:e4:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: May 13 03:01:27 2026 GMT
Not After : May 14 03:01:27 2026 GMT
Subject: CN=4dff43ef28099b4f3ee86d82c56a3ed57b169e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:c1:59:01:03:36:d4:4e:ca:6c:6c:2e:9d:
eb:3d:3d:72:e5:9a:84:c4:b7:d2:7a:83:b8:c5:07:
e3:c5:94:7e:7f:4e:72:66:b3:50:ac:f8:68:36:b5:
d5:aa:90:bf:4e:b7:fc:b9:c3:a5:27:fb:76:c4:7f:
91:5c:ff:7a:70:4d:bf:f3:fb:ff:4d:9e:6b:e3:a5:
40:8b:a5:ac:bf:02:9e:ae:b8:8d:55:8e:d1:3e:1d:
dc:70:81:9e:09:69:68:a1:26:54:53:7c:20:03:53:
05:10:13:30:ae:18:98:ea:45:85:6c:df:11:2d:f3:
3e:c7:f4:2d:35:76:4b:a8:ce:1f:33:64:71:f2:ec:
01:00:cd:ea:ca:ac:87:e4:2e:9a:ba:f1:e7:e3:93:
a9:b3:8a:38:43:8e:dd:19:2e:d4:e3:a8:09:e7:f6:
66:09:ed:33:ca:a9:ee:22:90:02:1e:f4:0f:55:9d:
e5:f6:38:26:83:be:89:0c:59:b0:c3:c0:d5:49:62:
60:3c:e7:39:cc:0e:ce:e9:5a:8d:77:55:ed:e4:83:
74:a6:a8:ac:01:56:9d:1a:66:02:cb:bc:76:81:be:
bc:97:20:5c:52:a9:27:22:e8:07:2a:5c:d7:53:7b:
7e:01:e0:96:c8:d7:6e:26:9a:5a:10:4a:fb:76:3a:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FF:43:EF:28:09:9B:4F:3E:E8:6D:82:C5:6A:3E:D5:7B:16:9E:1D
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:38:f1:75:2e:1f:af:c5:b0:16:c0:6c:5c:9f:9e:e3:77:97:
ff:6b:2a:5f:60:36:49:76:45:9a:56:3c:37:70:84:f6:14:cc:
41:07:23:60:d2:ff:fc:f3:7d:bb:56:a4:ca:b2:94:be:22:76:
b8:4d:9f:27:f1:f9:e8:53:bc:db:10:d5:8e:cd:d2:96:93:c9:
7b:ef:4b:42:ed:4a:78:88:ce:91:d8:75:9c:8c:0b:77:ea:02:
65:be:14:eb:7b:a4:38:56:10:e7:84:f8:e5:e3:9f:4e:be:70:
41:b1:43:8e:1d:3e:92:54:85:f4:b3:de:6c:58:40:ec:b8:92:
57:86:79:1f:8f:b3:c9:71:87:6f:8b:e3:44:2f:76:f5:6f:ce:
40:2e:a6:78:33:5d:db:2e:4b:a1:0b:69:35:bc:cc:6e:0a:21:
90:a0:6d:36:8b:b8:e6:fd:8a:20:82:8e:f4:68:25:4a:17:f2:
71:16:73:24:20:a1:92:2b:52:21:b5:90:b7:1e:eb:dd:76:1f:
f9:49:fb:7c:bd:91:34:b8:0a:55:19:7e:28:b2:40:2c:b3:58:
8a:1f:e8:2c:9a:12:0c:5a:ab:fe:73:4d:56:6c:7d:b9:b8:89:
bb:0b:a1:6e:62:58:fd:cc:63:b1:4c:0d:ab:ea:e1:7c:19:5a:
47:64:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:15 2026 by rpki-client