Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: sYkNY2/TzhmtEXMulx+bEayjIuTTjGgT4XjybYgcWiE=
Subject key identifier: C0:2C:48:E9:04:7E:AD:D1:AE:1A:DA:1D:57:17:C5:95:26:99:61:79
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019ED42AE1E9D720DE397D9A2486058DC09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0DDC
Signing time: Wed 17 Jun 2026 06:00:40 +0000
Manifest this update: Wed 17 Jun 2026 06:00:40 +0000
Manifest next update: Thu 18 Jun 2026 06:00:40 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: 1eOrR/NmyMbW0LmNNHgc7mHiUv3cs0Ns2eQv8Y2jQjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2a:e1:e9:d7:20:de:39:7d:9a:24:86:05:8d:c0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jun 17 06:00:40 2026 GMT
Not After : Jun 18 06:00:40 2026 GMT
Subject: CN=c02c48e9047eadd1ae1ada1d5717c59526996179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:88:03:e4:a2:d6:e8:4b:b8:45:e3:57:ea:
1a:aa:af:bf:a4:79:94:26:9c:e1:31:84:1e:90:27:
72:08:9a:d6:20:97:c8:c7:a6:16:4b:40:c4:e1:06:
06:40:b2:da:4f:26:a4:83:f1:b6:2e:90:54:cd:8c:
ac:c9:3d:be:3b:49:e8:06:77:cf:25:d8:da:a2:d4:
17:3c:f4:3e:b0:36:1b:5c:01:4e:dd:bb:30:7e:29:
1c:44:13:2b:6e:96:26:42:b3:37:1a:00:f1:04:60:
d4:d4:3e:ae:05:d6:aa:4b:a5:ed:15:d5:2b:d2:cb:
f7:77:ef:db:bd:ef:9e:54:a3:b5:6e:3c:d5:55:f5:
2a:4e:df:42:1b:cb:d2:8b:66:48:58:89:56:36:03:
2a:3f:79:62:a6:ab:f0:55:ff:9f:80:5b:0d:65:a0:
fc:e0:c9:66:98:62:19:9c:9e:d1:b0:63:6f:9f:77:
9b:ed:13:4f:84:de:bd:a9:cd:6e:be:dc:2a:14:6c:
36:b6:34:83:f8:2d:12:5a:1c:73:ee:1d:6a:2c:c5:
ce:ba:88:fc:29:07:68:ae:20:ab:55:d8:9a:20:99:
76:c8:fe:1e:8a:e8:8d:a8:21:0b:91:bd:3e:10:85:
d5:2c:b7:54:da:70:b2:67:8e:ef:8c:55:b7:15:73:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2C:48:E9:04:7E:AD:D1:AE:1A:DA:1D:57:17:C5:95:26:99:61:79
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:d3:55:92:b4:5a:2d:12:b5:7e:08:bb:1e:0d:ad:b1:ec:
0c:9f:6b:67:dd:06:da:77:7d:76:d4:8e:77:a3:e7:56:82:93:
34:70:c5:f5:83:bf:3e:e0:4a:c3:78:69:d3:85:10:34:0a:98:
bf:e2:76:9d:a7:28:8e:af:a0:04:66:6c:1b:98:d1:65:6c:ee:
8c:28:e0:db:85:de:c0:c6:e7:14:44:ec:be:d9:32:ac:18:a5:
fe:98:bd:59:4a:ec:a1:5e:8c:ab:f3:92:ef:af:1a:78:47:4a:
11:95:2d:b3:6b:ca:b6:7c:fd:60:a0:f1:2c:d1:06:f5:d5:ac:
79:85:54:79:04:9a:a1:cc:1f:4a:e7:7c:73:c0:01:85:15:e7:
44:1d:ad:00:5a:5f:12:a6:7e:62:80:78:e7:86:57:e2:27:79:
a6:0d:e1:48:4e:87:22:99:77:93:e8:3b:98:9a:b5:2a:b7:90:
dc:c3:28:81:65:62:64:41:fd:6b:9e:45:8e:0c:25:97:57:d8:
70:5f:12:dd:96:ae:ad:b7:43:e1:11:25:15:95:5e:9f:13:62:
98:4c:a3:a5:b2:cd:b5:cb:da:c6:57:3e:79:6e:fd:c2:9b:a6:
de:d1:13:a9:1e:1a:76:d9:33:33:26:10:6b:66:8f:9f:d8:c3:
e5:d7:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:30 2026 by rpki-client