Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: rB9Gg2BxFnkvid72c3misQ92ycjsnSi//det4t5Ehgo=
Subject key identifier: 34:06:C2:DB:98:BB:83:A1:A7:F3:3D:43:4C:84:9E:53:35:CB:FF:49
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 019D2A3BFDBA6CC4E33D127191DBD8878D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 13:01:07 +0000
Manifest this update: Thu 26 Mar 2026 13:01:07 +0000
Manifest next update: Fri 27 Mar 2026 13:01:07 +0000
Files and hashes: 1: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (hash: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: MXTVkzsAWZxMli0neINCMTwmQ43lArjnhGbh1H3iabg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:fd:ba:6c:c4:e3:3d:12:71:91:db:d8:87:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Mar 26 13:01:07 2026 GMT
Not After : Mar 27 13:01:07 2026 GMT
Subject: CN=3406c2db98bb83a1a7f33d434c849e5335cbff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:e4:34:1e:2c:d6:36:2b:7e:d9:9c:cc:e5:
a6:2f:d3:12:be:2b:b4:1c:22:5b:42:d8:51:1c:21:
0b:50:33:fa:14:e8:1f:a2:8e:aa:9c:1b:f4:01:37:
e9:bf:2a:b4:0e:98:75:fa:b8:93:bc:70:87:60:14:
b9:20:12:81:e0:92:15:9a:32:c4:2c:df:bb:2d:28:
24:b6:c1:c9:70:23:14:93:fe:28:f9:e8:20:e5:c1:
50:4c:0a:ca:c8:d9:1e:72:c4:39:4d:43:ad:11:fe:
65:48:67:df:4b:ee:16:11:72:d9:53:fd:eb:6e:62:
cf:31:ae:30:28:17:3d:53:82:39:6f:c5:e7:3a:1a:
82:76:83:61:9f:4c:e1:e9:94:4e:e1:1c:26:33:ab:
13:e6:61:22:a0:70:d6:24:3e:02:6f:46:75:ac:9f:
90:89:10:d1:d1:cb:9c:65:ae:cb:34:4a:5f:ac:92:
a3:c0:a6:7f:4a:6b:f3:7c:0a:23:92:15:de:44:f7:
dc:29:84:80:29:ef:79:b2:c9:df:4d:90:89:2e:13:
db:52:1b:ea:cf:b7:eb:ed:e5:44:70:c9:f2:47:84:
9d:ae:56:ad:6b:2b:f1:8c:0c:0b:be:0d:19:26:7e:
db:78:a2:d6:5f:dd:0e:c4:1b:1e:8e:a2:6d:2d:7e:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:C2:DB:98:BB:83:A1:A7:F3:3D:43:4C:84:9E:53:35:CB:FF:49
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:50:1c:e8:47:da:45:c5:0d:e4:7b:a9:3d:98:26:71:a9:1e:
02:68:99:90:14:3c:a8:9d:d8:e0:04:84:d6:8b:70:a8:46:e4:
c3:e6:48:4b:e4:ff:ab:72:97:f4:17:8a:ea:d0:7c:0a:e3:d1:
92:39:57:b7:5c:65:37:a1:58:9c:4d:7f:99:24:be:5f:96:d7:
d5:41:ad:ec:3e:8e:0d:1e:eb:fe:c1:2f:79:76:7f:bd:d2:b4:
1f:14:25:86:a2:c0:3d:58:0f:8a:f6:92:08:2c:05:ae:54:29:
22:46:ac:ad:ec:19:a2:6c:26:3c:12:97:76:21:7b:06:1b:e8:
0b:9d:60:40:2e:1c:b1:f4:28:2d:9e:da:8a:64:ac:62:8a:c0:
0b:b4:9c:c2:2a:67:4e:5c:fb:75:49:14:8a:2e:d4:77:81:43:
67:42:f8:4b:d8:4b:fb:19:f8:e7:3e:38:1f:ae:5f:dc:d6:60:
92:b8:f2:cd:92:a6:f2:c6:75:1b:da:71:be:c2:9e:0a:85:58:
20:3a:41:d1:6e:f5:ee:d2:29:77:72:00:b9:35:6c:46:c3:c2:
23:82:4a:b2:fc:16:81:87:5a:e5:5e:9b:00:c6:19:5f:f0:9d:
0b:e8:bd:d5:c2:64:3c:1f:ee:69:2f:65:61:a7:31:9c:54:6f:
89:2b:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:33 2026 by rpki-client