Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: cbBo6Gll+pkapoA+lLjO6WipsDvX9n3/8/YN4fcszp8=
Subject key identifier: B0:3D:1E:9B:7B:33:52:47:8C:2B:90:47:91:E2:7D:51:84:FE:CC:A4
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 019D25BAB11187F3657BA62204059BE5448E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 05D5
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: OY4puzEeNBWUGoO9yYsK50Eq3S+cSTWspEmvTrKKN4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b1:11:87:f3:65:7b:a6:22:04:05:9b:e5:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=b03d1e9b7b3352478c2b904791e27d5184fecca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:eb:1a:09:b0:85:a5:c9:d2:ae:60:25:8b:
2e:7c:60:7f:de:56:0c:79:14:51:91:15:0a:42:a9:
68:63:23:ff:dd:b3:69:d3:04:11:7e:06:22:fd:af:
96:16:58:6b:11:09:91:4a:67:43:65:34:e1:84:7b:
fa:78:d1:9e:86:ad:d0:e9:e3:fd:bf:e9:d3:28:75:
cf:18:ed:81:69:33:cf:1b:68:69:77:cb:32:a8:b3:
ee:8f:16:5c:2c:ba:f4:22:a5:89:23:5b:0e:2a:5e:
f8:24:5b:f8:37:76:d6:62:d7:a2:ef:dd:97:39:b5:
07:f5:af:3b:a9:c9:2b:e4:a0:fb:32:d7:95:13:35:
52:e2:f8:60:06:23:88:d1:46:81:2e:73:51:f0:fc:
bf:fd:62:38:4f:71:23:d3:3e:6f:e6:6e:4b:78:4a:
65:d8:6f:ca:4f:18:90:ef:3a:81:80:7e:90:9b:4a:
48:33:fa:d4:ce:88:90:0a:77:5d:87:a8:df:7f:4b:
6b:27:e8:aa:aa:9e:c2:f9:ac:42:5b:19:32:65:6e:
0c:75:ec:74:ac:27:03:4d:8a:c6:4c:d3:96:0c:4b:
ca:3b:26:19:77:9a:7d:3e:4f:82:f7:59:83:3c:e2:
df:c2:77:5a:f0:81:7f:8d:32:73:9b:41:2c:dc:ec:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3D:1E:9B:7B:33:52:47:8C:2B:90:47:91:E2:7D:51:84:FE:CC:A4
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:02:5d:41:e0:19:0c:ce:3f:43:27:17:63:a1:5d:bf:b3:57:
6e:51:44:96:cd:ce:eb:4d:83:3b:50:59:4b:7c:1d:db:a5:27:
bb:34:10:e9:e3:e4:d4:26:61:20:23:0f:ef:7b:03:8e:49:a6:
e5:5e:d6:b8:85:1a:89:e9:b4:5e:3d:d3:2c:ea:b1:51:ca:06:
84:8c:18:50:49:1d:65:68:0b:0d:cf:33:57:79:ed:23:40:e0:
e7:8f:ac:25:3c:af:fd:c8:15:7a:d6:08:3c:ef:28:bb:0d:37:
a9:ab:0f:9a:88:ad:51:30:ba:37:47:6d:08:c9:0b:ff:1d:40:
c8:f3:d4:01:05:2c:bd:19:e2:a5:91:d6:04:c7:df:89:9e:59:
6a:6c:d5:b9:96:85:d1:1f:05:5a:c5:c4:27:b4:d3:e8:ef:97:
b1:6d:74:3e:2e:97:f8:44:01:8a:fd:2d:78:10:ef:48:83:53:
ef:c2:8b:00:ab:a9:2f:d9:29:1e:8b:6d:61:c3:b1:c8:9c:45:
ca:d7:ab:c7:ed:fa:fb:31:d1:5c:59:2f:b9:48:fd:bb:bb:78:
9a:ec:23:af:05:1b:de:f2:67:4b:4c:d1:ec:a0:64:eb:0f:8e:
41:ec:82:e7:51:1f:2e:8d:2e:e8:58:7a:9e:ba:e2:67:41:55:
d1:49:cd:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lurERh/Nle6YiBAWb5USOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGZiNjZkN2U4NWJiNGFkMDhjNTA5MmYwYmI4MDYyOTJi
YTBlMDgwHhcNMjYwMzI1MTYwMTI1WhcNMjYwMzI2MTYwMTI1WjAzMTEwLwYDVQQD
EyhiMDNkMWU5YjdiMzM1MjQ3OGMyYjkwNDc5MWUyN2Q1MTg0ZmVjY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfbrGgmwhaXJ0q5gJYsufGB/3lYM
eRRRkRUKQqloYyP/3bNp0wQRfgYi/a+WFlhrEQmRSmdDZTThhHv6eNGehq3Q6eP9
v+nTKHXPGO2BaTPPG2hpd8syqLPujxZcLLr0IqWJI1sOKl74JFv4N3bWYtei792X
ObUH9a87qckr5KD7MteVEzVS4vhgBiOI0UaBLnNR8Py//WI4T3Ej0z5v5m5LeEpl
2G/KTxiQ7zqBgH6Qm0pIM/rUzoiQCnddh6jff0trJ+iqqp7C+axCWxkyZW4Mdex0
rCcDTYrGTNOWDEvKOyYZd5p9Pk+C91mDPOLfwnda8IF/jTJzm0Es3OwM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA9Hpt7M1JHjCuQR5HifVGE/sykMB8GA1UdIwQY
MBaAFEdPtm1+hbtK0IxQkvC7gGKSug4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWIt
YWZlY2YyMmVlMTE1LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWItYWZlY2YyMmVlMTE1
LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQJdQeAZ
DM4/QycXY6Fdv7NXblFEls3O602DO1BZS3wd26UnuzQQ6ePk1CZhICMP73sDjkmm
5V7WuIUaiem0Xj3TLOqxUcoGhIwYUEkdZWgLDc8zV3ntI0Dg54+sJTyv/cgVetYI
PO8ouw03qasPmoitUTC6N0dtCMkL/x1AyPPUAQUsvRnipZHWBMffiZ5ZamzVuZaF
0R8FWsXEJ7TT6O+XsW10Pi6X+EQBiv0teBDvSINT78KLAKupL9kpHottYcOxyJxF
yterx+36+zHRXFkvuUj9u7t4muwjrwUb3vJnS0zR7KBk6w+OQeyC51EfLo0u6Fh6
nrriZ0FV0UnNLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:27 2026 by rpki-client