Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: N4xuE1KHYTiW4dEVZnL+3TIMXuHBx/SN0/rF8lRbRNY=
Subject key identifier: 4A:EA:DA:27:78:F8:28:CE:C5:D7:BA:53:77:8F:8A:8B:41:3A:B5:F2
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019D27722A5954F38E81DA2CDFE1734DC358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0CFE
Signing time: Thu 26 Mar 2026 00:01:26 +0000
Manifest this update: Thu 26 Mar 2026 00:01:26 +0000
Manifest next update: Fri 27 Mar 2026 00:01:26 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: 01Pt4uGyXN9EjMud2B6qXcQzP7C7k9hdT7RahoSq99w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2a:59:54:f3:8e:81:da:2c:df:e1:73:4d:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Mar 26 00:01:26 2026 GMT
Not After : Mar 27 00:01:26 2026 GMT
Subject: CN=4aeada2778f828cec5d7ba53778f8a8b413ab5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:90:1f:f0:db:5b:cd:25:48:5b:61:2f:9a:
42:b1:db:f5:96:1a:f7:f3:aa:33:2d:fa:28:b3:2d:
b3:5a:31:c9:db:f3:ba:e6:ee:26:ce:a4:4f:c0:ca:
cb:ca:b4:ac:d3:b6:27:9e:e0:f1:cb:3d:dd:10:1f:
f7:02:bf:ab:ee:fa:ef:43:0c:1f:72:0b:bc:36:15:
30:01:78:2f:f4:b2:86:30:af:11:25:0c:1e:3d:17:
db:d6:f8:05:6c:0e:8e:a7:8b:01:35:e6:8b:eb:8b:
b5:00:e1:9c:46:01:67:01:e1:49:fd:62:1f:6c:42:
fa:e0:b1:50:a1:c1:4a:57:2d:98:88:f9:fc:e5:8a:
0f:34:3d:65:c2:12:81:3a:42:cc:20:27:04:89:33:
7d:2d:0c:46:30:77:a8:f7:c5:bd:20:e2:6d:d9:ee:
7c:5c:f6:a5:b5:b5:bd:81:2c:f6:38:3e:0b:f2:af:
ea:7a:ce:8e:28:f9:4c:7a:6b:53:d1:41:cc:10:fd:
5f:16:8a:88:95:15:77:79:da:28:40:fd:68:24:fd:
4a:cc:90:ce:06:a2:80:86:0e:e2:28:e7:91:e3:ca:
55:b3:67:40:e9:5f:ff:d1:62:44:ad:5b:2b:5f:c0:
f1:0e:96:03:1e:be:fa:11:17:f4:b2:64:e0:25:5e:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:DA:27:78:F8:28:CE:C5:D7:BA:53:77:8F:8A:8B:41:3A:B5:F2
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:4a:3c:64:9c:4a:7b:24:30:38:61:11:d0:e5:ab:54:35:
b9:d4:24:04:80:3b:45:d2:75:f8:8e:c1:e3:86:05:a8:f1:8f:
88:a0:29:7c:e3:15:59:3b:85:65:f8:e8:2d:ee:6f:83:ca:50:
53:77:2d:df:27:74:3a:92:90:4c:11:1e:3d:36:42:1f:c7:43:
62:9a:83:0f:be:3a:3f:da:7f:93:e1:54:4c:9e:93:20:23:b9:
57:f8:13:cd:2a:77:35:3d:29:f5:41:f4:34:28:d0:b9:23:90:
c8:19:d7:26:19:45:89:7c:78:f9:3b:3f:af:ba:2d:18:f7:5e:
0f:63:4a:c1:34:cf:f5:7a:92:36:91:ef:ed:8f:e4:42:ec:77:
c3:ed:bc:0f:e8:98:ec:0c:56:fd:5b:7f:a5:d4:81:b9:bc:e5:
3d:ee:c9:1c:b7:3c:f5:4e:5e:01:e9:40:d3:4e:6d:d7:c0:34:
c4:84:a3:6b:ab:65:7e:d7:b8:69:1f:b9:3d:a2:71:bc:84:c2:
c0:7b:12:a7:05:4e:68:e5:37:b3:9f:79:9e:0e:b0:00:bc:8d:
15:4b:8d:1a:6b:61:df:d8:82:59:6f:cf:7e:0a:14:4e:ad:b6:
a0:58:af:5d:e2:c0:78:6e:5a:7a:d2:2d:c6:d6:c5:1f:11:14:
6c:20:b6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:18 2026 by rpki-client