Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: A8eAc14ekpE8oUn3i/HYDDhIQ93szFLE2zYjanFhGMw=
Subject key identifier: D3:B0:33:09:EE:31:0D:BB:2D:AE:03:A2:A1:F3:FB:3E:AC:EE:AA:BA
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 019CABA1D21410633EB3112FAD12CB7803C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0EE1
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: 6O5BbflBHZS9SWcDuCRDcLypoi4.roa (hash: 26ye9VSXM4sACCZKNcE0QbzJrJJuPyXdsH1u9UE7fPw=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: SNKBTWAHPdGX3nt/tOY51GDwGpg7EaHn3mWxQ6BI1MU=)
3: sXfD3GZEDhtnNXynD7Nankbaowk.roa (hash: YcBK9LcuHzUfe+SoI1z9LJ0sH4FuDfMNMwbWld9O/UI=)
4: xcCn7bpLcGcdxCMsOA8QybzdKwI.roa (hash: TfAAGdS5mybmlpPgNCVRXMdD51STpNvxZH6lBCg8X70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d2:14:10:63:3e:b3:11:2f:ad:12:cb:78:03:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=d3b03309ee310dbb2dae03a2a1f3fb3eaceeaaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:0e:2d:f0:c7:e4:1e:e9:89:17:b0:ce:fb:
77:03:b8:50:aa:83:b5:75:5e:9e:c7:cf:32:aa:05:
88:37:78:6a:c0:9b:89:f4:61:2b:b5:7a:3d:ec:f0:
05:37:f2:f8:27:b5:15:de:d1:3f:9c:ca:f5:2c:5f:
2d:b6:dd:b2:dd:1c:6d:08:a0:b7:4b:58:e4:7e:54:
9b:a5:1b:e2:ea:8e:76:ff:3a:a8:b8:4d:8b:76:9c:
cf:0b:63:d7:c8:78:f0:b1:50:7a:6b:f8:7e:09:ff:
0e:25:bc:80:dc:34:e2:10:2a:a6:74:af:f9:6c:55:
70:40:8a:10:ad:2d:3f:3c:9f:88:b3:a7:bf:4f:94:
e5:85:34:b6:f3:f5:8e:0f:fe:a3:59:42:42:b1:a9:
59:d2:ce:b6:b7:0a:63:61:d8:54:f4:12:d1:46:f3:
e5:79:5a:a0:4f:c0:d2:ae:6b:25:d6:0b:9d:00:14:
73:f9:6a:9f:41:cc:a6:0f:86:e7:40:83:41:f1:dc:
d1:53:d2:9b:56:82:51:0d:02:3d:a4:ef:b2:32:c1:
b0:04:93:28:a6:dd:55:fd:47:10:88:f3:da:19:93:
f4:f8:f1:63:ca:18:8c:40:14:8c:13:27:b2:ce:f6:
6c:29:df:e4:4d:d2:ef:b5:a8:5c:41:d5:88:61:1f:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:33:09:EE:31:0D:BB:2D:AE:03:A2:A1:F3:FB:3E:AC:EE:AA:BA
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ac:f5:ac:b8:36:68:70:56:56:76:25:ee:16:c1:d7:e7:94:
c2:a8:0d:84:ed:1a:52:b8:dc:47:c6:c6:a7:4c:47:4c:97:79:
30:20:c8:91:01:a7:ad:dc:0f:38:e8:3d:f7:fb:12:ab:8a:4c:
70:38:41:e8:f9:40:4b:e3:89:41:c0:a3:91:54:a1:b2:9a:62:
8b:f2:22:15:52:06:e0:22:04:8b:f0:bb:da:14:d8:a2:3f:69:
bd:25:ca:9a:c7:81:30:51:5c:fd:b8:02:eb:69:a2:e2:c8:37:
7b:83:eb:b6:25:96:be:38:ab:0a:16:eb:91:79:c7:a8:3e:d6:
40:b0:85:cd:6d:73:dd:f9:ec:fe:4d:f7:2a:c3:12:55:88:ab:
12:ee:e2:8c:2c:ad:83:35:61:5d:d4:48:18:9e:a6:62:7b:e9:
20:05:91:73:53:a0:59:04:63:1a:bd:da:6d:9c:98:24:e9:13:
23:dc:ea:50:b2:c7:7b:09:f9:9e:a8:06:eb:8b:10:a3:74:b8:
6c:1d:7d:9a:b8:53:c3:c0:8f:13:b1:a0:47:33:cf:79:c0:c5:
3c:93:c2:38:0e:35:61:68:69:64:22:59:da:79:3a:32:3b:70:
19:f7:1b:e6:3d:1b:a1:6c:d1:91:b4:fb:a3:a3:73:f5:d2:6d:
61:45:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:23 2026 by rpki-client