Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: /RLQvItmVxXiHh+BzOjEDJGDR0mZweMAc3QVOaXencQ=
Subject key identifier: 81:0E:70:A7:B0:29:80:64:D9:5F:0E:E9:2D:B0:C3:88:4C:F7:41:D5
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 01A0C8FD0104A883EE0F2CFF7BF62CA8A36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 12:00:19 +0000
Manifest this update: Tue 22 Sep 2026 12:00:19 +0000
Manifest next update: Wed 23 Sep 2026 12:00:19 +0000
Files and hashes: 1: LYpO44oDt4tOlK8yUSkscCnfDII.roa (hash: 0GGttcYEmqh3s56t6CYD+skb80VlgJ3XabCZlShA2RI=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: NlqZ6CcW/jbJ9tHLyloTQjK1SO5hphdwO+2vOeRcoBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:01:04:a8:83:ee:0f:2c:ff:7b:f6:2c:a8:a3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Sep 22 12:00:19 2026 GMT
Not After : Sep 23 12:00:19 2026 GMT
Subject: CN=810e70a7b0298064d95f0ee92db0c3884cf741d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:b5:91:f2:8c:5b:cd:88:14:40:83:68:ed:
14:c0:61:f9:5b:7a:a5:0e:c1:0f:63:b5:77:23:42:
9a:b9:ae:8e:16:b9:10:74:b3:2d:4d:fd:5c:8a:eb:
a9:8a:81:d1:e9:04:29:f4:85:c4:7b:c1:35:f2:b0:
9a:45:39:2f:e6:01:93:84:87:3d:bf:6d:dd:9d:7b:
0d:56:91:34:2d:73:91:2b:99:b7:b7:08:77:ca:6a:
ec:7e:62:7b:11:d0:0a:b5:ac:2e:7f:51:87:24:8d:
49:1a:9a:73:48:10:e8:3d:0e:03:a4:15:16:c6:5f:
84:05:be:00:d4:8e:ed:89:d6:a2:d5:85:70:fc:b1:
29:6d:e2:c7:21:48:34:e9:16:c6:07:2a:81:f8:88:
6b:93:24:c1:7c:6e:9c:f6:b7:01:1b:3e:1b:2c:c1:
eb:a0:77:b7:88:2b:68:ef:eb:05:93:26:e1:24:6c:
68:0d:95:bb:e8:6a:55:62:3b:d1:4e:53:0c:6a:e5:
02:a4:5f:90:3d:58:ab:b4:fc:6a:7e:98:46:49:48:
bf:d8:dc:75:b5:31:76:ee:c5:61:50:48:d6:0e:c0:
a2:ab:be:b9:28:30:56:e7:1e:50:66:59:ad:f0:b6:
59:9e:a8:70:cf:1b:13:05:ed:d2:ee:d4:f9:02:27:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:70:A7:B0:29:80:64:D9:5F:0E:E9:2D:B0:C3:88:4C:F7:41:D5
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4d:29:7b:b1:65:9d:e0:22:53:91:04:03:13:e6:d4:ee:e1:
bd:ee:d9:77:37:10:45:fc:4b:4c:54:ba:10:47:06:05:25:23:
fb:47:dd:0c:73:d1:d9:a6:74:23:2a:2d:eb:f1:1d:82:5e:6d:
73:fc:92:db:e4:45:a2:92:4d:52:b7:ff:92:59:78:7d:dd:a1:
d7:f0:cc:9a:9f:7b:39:57:1a:b5:5b:b1:6a:1e:f0:33:c6:5d:
75:e8:86:7e:97:aa:4f:d5:5f:bf:fb:75:04:cd:bc:38:bf:9e:
cf:9b:74:d3:0c:b0:c4:e6:78:23:54:90:ab:83:79:5a:49:99:
2c:ca:a6:fb:aa:a4:5e:e7:c0:0c:e1:c6:06:44:7d:5e:a7:c9:
02:8d:29:e9:c0:0b:e1:7b:6e:a8:6e:0a:50:8c:25:87:47:fb:
19:9b:15:04:95:f1:ed:c8:48:8a:44:a8:89:40:2b:24:f9:56:
61:ff:d9:ca:3c:8b:9b:40:a5:7d:26:59:28:74:a1:38:15:47:
1c:7a:55:7b:85:a6:1f:12:8c:98:10:72:84:70:23:df:49:d8:
5c:ca:cb:64:a0:9a:53:3d:f3:16:a4:a3:eb:09:6f:08:6c:4c:
03:d7:4d:36:08:fc:69:8e:76:37:5f:9d:01:c8:48:46:cb:f4:
79:00:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:35:02 2026 by rpki-client