Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: KT8v+Z/CE8OcOxhaL5bZIV8BweLPP/9hL8mdVus5T3c=
Subject key identifier: 35:3F:7A:84:79:6F:5E:A7:2C:8E:FF:FD:AF:F5:65:85:F1:18:2F:2B
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019EC17F6E7504C96F4ED2894B57382E59AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 15:00:14 +0000
Manifest this update: Sat 13 Jun 2026 15:00:14 +0000
Manifest next update: Sun 14 Jun 2026 15:00:14 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: vQv+dDAEuXirSX/Me7ksOveSszJhM1lht9ujCfJbgUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:6e:75:04:c9:6f:4e:d2:89:4b:57:38:2e:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Jun 13 15:00:14 2026 GMT
Not After : Jun 14 15:00:14 2026 GMT
Subject: CN=353f7a84796f5ea72c8efffdaff56585f1182f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:6a:a2:d7:d8:a6:50:a7:72:39:b6:7d:e9:
73:28:9d:a5:de:50:fc:ad:73:34:17:3e:5d:22:cf:
56:37:d8:b9:9a:0d:fb:ca:8a:4a:10:ba:6b:b3:9d:
70:4f:49:ea:c1:4d:0d:f5:4a:60:89:82:07:cd:37:
23:cc:f8:c5:4c:2c:ac:db:6c:ea:f7:66:49:c7:25:
51:fe:c3:a6:22:7d:74:55:5f:5e:4b:13:47:58:32:
f4:be:e4:5f:7a:b3:63:0a:56:e2:74:f2:8e:57:ae:
fa:9c:a8:0b:a7:1e:49:db:52:d3:4b:51:83:6a:fa:
ea:9a:c7:32:7d:a0:37:6a:93:43:41:89:e5:f5:ce:
46:81:58:56:66:4f:5d:5f:e5:82:c6:db:88:99:ff:
89:ae:c5:16:90:02:39:4f:f0:e5:9c:b2:b1:a9:51:
61:be:3c:b8:50:04:c1:89:dd:49:c2:8a:02:40:33:
00:75:8f:53:49:aa:32:c7:e4:bf:26:b5:ed:bb:16:
9a:a1:f1:2d:d2:05:84:de:94:84:b0:19:3e:14:a6:
41:78:80:1f:88:a7:bc:b9:1e:85:23:bb:a0:d9:8a:
83:46:8b:93:92:f4:e6:6d:fe:3e:1f:42:78:99:c6:
e4:17:ca:04:b0:f9:50:69:5d:e0:22:61:33:c7:4a:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3F:7A:84:79:6F:5E:A7:2C:8E:FF:FD:AF:F5:65:85:F1:18:2F:2B
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:40:2c:8b:e3:73:4f:69:b1:e4:ba:f5:8a:2d:81:05:7b:db:
70:de:63:bf:7e:77:0a:4f:18:f6:14:4b:45:31:d5:62:df:8f:
6d:bb:69:00:a7:a3:30:05:3e:d7:4a:51:26:39:77:5c:08:3a:
7d:15:b3:67:27:0b:e0:5a:1c:29:54:42:02:c4:ca:f6:87:2e:
09:1c:3d:f6:1f:8a:24:35:01:6f:15:a5:05:3c:65:d0:fc:50:
44:0e:c2:15:be:15:72:da:68:eb:02:e5:ec:90:c4:cf:63:e0:
96:c6:85:37:b9:04:33:a0:d1:bd:a2:a0:79:ef:e7:51:91:f4:
b7:c6:c9:97:c7:79:25:b0:2f:3c:62:1d:3c:66:43:e0:a5:65:
f9:3a:27:63:26:75:30:8e:be:45:3a:1e:58:b7:04:98:07:91:
e0:a6:fa:a9:82:3c:38:43:c3:31:db:75:02:2e:72:e3:b3:4a:
3e:4f:15:cb:be:d1:35:9d:66:3e:93:a7:83:45:d9:fa:c3:94:
f1:cb:56:10:ae:19:ee:1c:b8:72:da:cc:27:77:36:87:a5:8f:
0a:2b:88:c6:da:6d:64:a9:69:19:95:72:8e:4d:8a:1f:ca:b3:
6f:51:eb:98:40:86:ec:b6:f1:c8:31:07:e6:c3:77:ca:41:bc:
af:79:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:15 2026 by rpki-client