Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: 3hfvIS7fskodNX9PDGewyKiz0xyROT/5AlYP7i35bqc=
Subject key identifier: 42:15:E7:39:60:77:9C:7B:0D:72:70:5C:A7:84:AE:4B:AE:CB:BC:05
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 019D9A07243499ADD0BE1DFED6579967E38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: oKi8STF3MOXHpZkralk2hu28VfFCl58lwb2B2mSedvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:24:34:99:ad:d0:be:1d:fe:d6:57:99:67:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=4215e73960779c7b0d72705ca784ae4baecbbc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:5a:ea:34:38:94:f1:ea:be:04:85:61:7c:
97:d3:56:6d:19:a7:e5:9c:75:8f:b0:ec:46:ee:13:
08:9c:a6:2f:a4:89:f4:96:4b:68:00:9a:c7:45:01:
58:e9:c1:12:d2:85:fb:70:d3:b9:8f:a5:05:ba:d4:
1a:b9:89:62:99:f2:25:82:77:25:90:e2:9c:b9:55:
88:3b:b1:41:47:88:99:65:e3:ed:a4:35:1e:c5:13:
9c:7c:eb:df:26:05:b9:d2:df:3c:8b:0f:57:46:6e:
e9:06:b4:79:07:c8:88:b6:c0:03:3d:39:73:dc:15:
85:94:5c:e0:b9:61:2a:ed:0b:ef:5d:b2:d0:3c:ec:
63:d6:05:a6:65:be:34:a1:e4:86:13:c7:92:6f:2b:
a5:de:ff:7d:1e:9d:a6:bd:29:ec:89:f4:ae:82:df:
23:76:ed:e5:7e:ee:4f:52:0d:e1:15:aa:1e:ed:58:
3a:4c:b0:c0:73:4e:96:b2:45:aa:3f:1c:ae:74:ed:
a4:9f:fe:41:58:cf:e8:98:58:14:af:d4:4c:df:65:
f0:7d:75:b4:fd:01:91:b8:46:36:89:87:85:be:79:
3c:7e:29:13:e1:bb:05:6f:91:3d:29:93:2e:cb:cd:
f0:2a:1e:23:f0:c4:c8:b6:25:2e:9a:fb:85:af:97:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:E7:39:60:77:9C:7B:0D:72:70:5C:A7:84:AE:4B:AE:CB:BC:05
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:fe:f4:ae:69:19:df:13:26:70:27:ac:06:29:e4:30:07:
ee:30:fb:62:4b:e4:aa:c2:b0:61:0c:7d:f4:fb:c2:a5:e0:0a:
ab:67:35:c3:bb:c8:e8:42:32:9d:c2:0e:2c:a9:3a:bc:81:b2:
72:a0:09:7a:15:f1:02:cd:1a:eb:1c:c3:46:0a:41:a6:33:e5:
8b:bd:31:f6:54:66:32:cc:14:45:93:ef:f8:56:3d:27:62:6e:
ea:f6:db:8c:b3:58:b1:f6:94:cb:ca:14:5f:4e:76:ce:2a:3c:
3d:91:ed:0c:f0:77:12:76:dd:b4:3d:e4:4f:61:ae:6a:51:82:
cc:b6:8c:0a:c6:33:b8:a5:85:45:55:62:1e:65:71:c8:2b:af:
37:cd:10:32:ec:5d:c1:70:76:5e:5f:47:fc:7e:27:37:a1:89:
66:53:b8:50:41:89:98:39:54:33:f1:6e:2d:ab:2a:e9:5b:fd:
4c:29:ef:e9:3a:72:04:18:a9:1c:e4:c3:eb:ae:3e:fd:0b:73:
96:57:08:73:97:95:b7:37:95:0b:6e:f9:2b:55:a3:92:83:51:
e2:ce:b2:ce:42:cf:be:4c:b2:6c:94:fc:b5:b7:2e:57:46:1f:
ac:b0:04:96:b8:4c:e3:59:e1:ec:14:c8:a0:58:33:9c:06:9a:
c6:09:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:20 2026 by rpki-client