Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: omXx34MhCEFx6+jnz+iEjkVZzSxixmrRdeeNiwbVdiY=
Subject key identifier: CA:54:D3:20:AE:77:A0:94:24:09:12:2A:A5:7A:72:6E:23:C2:0F:AD
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 019D265FADC22237D0A3D26516ADAE7F7170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 0326
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa (hash: KV414vkbOzOU+S9G8Ie1ETRwhJyk99wklT+FH+pmi/w=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: i88ywAjw//08Yi3JN+7VfIeOL6CarabwrHRN+Ch20f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ad:c2:22:37:d0:a3:d2:65:16:ad:ae:7f:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=ca54d320ae77a0942409122aa57a726e23c20fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:71:f2:a8:54:ea:73:6e:8e:51:44:3a:0d:
33:61:a9:4e:78:8c:62:2a:20:44:8b:9c:b4:7d:22:
ee:00:0f:a5:54:11:48:10:3c:ec:6d:a2:a4:93:12:
d3:a9:cd:d8:fe:49:f2:ed:23:e0:58:33:81:f0:03:
1b:8d:70:73:57:86:ea:c6:31:14:e5:44:7a:df:d5:
22:02:fc:ce:e0:4f:6d:6e:27:ab:ed:f9:e3:cb:2b:
d9:0d:f4:a1:42:e1:d8:04:d3:84:82:7c:e1:60:17:
ec:5b:e1:0b:58:90:74:3a:17:1b:9c:3b:e6:a6:de:
68:fd:d7:e1:3c:f7:cf:fb:85:fd:56:47:5c:f0:96:
21:f7:a9:96:46:17:85:d1:79:2f:8b:47:15:5f:2f:
6d:f4:77:2b:bd:55:34:58:0b:2f:ae:49:87:f3:da:
27:a9:93:71:11:36:d3:c2:cb:fb:82:c9:f7:42:40:
b2:5c:e3:74:ac:5c:87:f0:ac:7f:4f:f0:7c:fb:69:
f5:1b:f9:94:b4:0c:8c:c2:78:cb:93:d0:06:41:ea:
90:1f:ad:b7:4f:ee:15:57:4c:06:a2:b7:a5:2c:c3:
c2:75:ac:e8:18:a6:d9:d7:4f:a4:57:d8:d0:ee:81:
f6:65:0f:ee:61:e1:d2:d9:ab:96:d3:20:a1:de:bd:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:D3:20:AE:77:A0:94:24:09:12:2A:A5:7A:72:6E:23:C2:0F:AD
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5c:86:10:6f:be:1e:1d:69:1f:38:56:4f:f0:35:e8:f3:fb:
3d:ee:5b:96:3f:41:b2:f2:cf:2f:39:d3:bc:d0:34:08:70:a5:
3c:a9:b6:84:fc:e2:bc:ae:e9:7d:94:58:43:a4:d7:c3:f8:3c:
7a:e4:de:22:fb:8b:df:9d:99:2e:51:69:18:3e:2b:89:03:9b:
36:49:9a:2a:40:94:21:40:de:a2:c0:f8:71:cf:ee:1c:ed:11:
de:5b:f2:b7:02:ea:bd:d4:dd:0e:43:d4:9a:62:48:cb:2d:8d:
0d:9e:80:6d:94:3e:7b:45:47:cf:68:42:24:00:d9:5a:29:29:
c4:c9:53:5f:35:91:a2:96:a1:f6:54:05:fb:1c:59:79:03:43:
a9:42:58:0a:d0:0f:99:35:6e:f0:71:51:28:2c:55:22:81:8f:
41:b3:16:bb:1e:f9:d8:3d:77:b3:b9:6d:f4:00:35:9a:a2:ba:
c5:95:ed:20:c7:8f:74:ac:76:86:48:2c:50:08:c2:dd:5f:13:
2d:12:5a:6f:ea:35:50:d4:c2:71:65:65:70:e1:55:b3:41:52:
9d:10:aa:5d:77:5b:c3:89:a8:60:46:a1:08:c8:5b:06:79:39:
e5:f1:3a:50:21:75:f5:f1:61:0e:01:87:ab:60:d2:29:84:0b:
3f:04:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:42 2026 by rpki-client