Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: dom1QZxiDmggTWLmvfMyqoMhigxEcIXkfzZCHKGlUP8=
Subject key identifier: 07:CF:F7:91:36:F1:40:7C:DE:E6:FE:17:7B:D1:49:7A:C4:69:BB:F2
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019D31F56D8AF09282278653D24F1F81B917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1894
Signing time: Sat 28 Mar 2026 01:01:01 +0000
Manifest this update: Sat 28 Mar 2026 01:01:01 +0000
Manifest next update: Sun 29 Mar 2026 01:01:01 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: nmqwmB/Jg+g1wU8Hu2M2nWrpKF8pqoX1Wrt7xJMcI2U=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:6d:8a:f0:92:82:27:86:53:d2:4f:1f:81:b9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Mar 28 01:01:01 2026 GMT
Not After : Mar 29 01:01:01 2026 GMT
Subject: CN=07cff79136f1407cdee6fe177bd1497ac469bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:f4:25:be:30:69:e8:75:76:64:1c:be:63:
b0:dd:a7:8d:e5:1b:2b:f0:63:4c:f1:a9:72:b9:7a:
1d:7f:80:97:2f:91:82:79:9d:a4:87:46:32:ac:b7:
aa:75:2c:07:8f:e4:e4:d8:14:b1:4d:25:fa:cd:35:
be:f3:3b:1b:ff:bb:09:91:d5:2d:c8:be:df:00:c8:
8a:56:77:78:51:ec:7f:ba:a0:07:70:b1:f5:ad:23:
30:25:4a:97:d5:20:c2:6e:57:fe:ff:ba:70:36:27:
84:cf:fd:bd:54:5f:8d:e7:57:61:3b:fe:99:2b:7c:
2b:69:5a:4d:4f:f5:72:ab:0d:71:6f:a0:54:63:5b:
78:04:78:26:12:e9:d7:e2:67:a2:13:44:cb:38:29:
6c:54:76:70:87:7c:15:bb:50:23:9a:a8:6f:32:ea:
87:37:8e:03:e3:ef:15:1e:65:b6:be:6b:a8:d0:d5:
fe:c3:d8:26:08:7f:5f:30:b5:d6:48:2f:d5:55:99:
51:48:cb:79:0b:68:e4:dc:68:e4:0b:f0:54:d2:56:
a6:54:1f:18:78:88:dc:f8:dd:b3:e1:26:f8:70:83:
b0:30:d2:86:57:11:46:68:2b:6b:23:43:61:2a:66:
9b:85:4d:31:be:2b:16:78:9b:e9:78:b0:6c:16:8d:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:F7:91:36:F1:40:7C:DE:E6:FE:17:7B:D1:49:7A:C4:69:BB:F2
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ab:a3:a0:fc:98:19:21:af:bf:95:9c:7f:67:ee:46:bb:c0:
18:18:26:a3:2f:27:bf:2a:36:a7:51:bf:cc:1c:4e:ad:9a:c3:
02:95:bb:0c:4b:26:7c:1f:cf:46:59:6f:92:2d:1f:ca:be:5b:
3e:74:7e:a0:51:4b:12:bb:97:2b:07:4d:74:17:fa:02:70:77:
22:ca:f3:75:30:5a:2b:72:4d:9c:45:75:ea:ed:b6:48:f6:cf:
e6:45:4c:c3:17:60:d0:a0:65:ec:de:bb:21:e5:fe:63:82:50:
88:43:e2:94:40:cc:2d:01:8e:fd:89:b3:a7:0a:f1:de:73:3f:
11:6b:d7:68:66:90:dc:79:e5:b9:16:0e:f3:40:0e:eb:30:ac:
1f:d7:55:6b:1b:48:a6:7c:53:71:43:f3:cc:48:cc:d9:59:6f:
f4:86:98:91:1e:35:66:7f:89:81:95:75:40:1c:c0:8b:e7:d6:
e4:7e:96:61:36:3f:95:ef:a8:a4:bb:2a:6c:cf:0e:b4:47:71:
83:b9:06:73:d1:69:1f:d8:76:74:0d:6e:37:d4:d1:26:f8:b3:
e8:cf:52:1c:3e:b3:43:d7:1d:17:1b:46:fb:97:63:0d:c3:08:
c3:89:c0:f7:56:32:da:18:77:75:bf:21:ce:30:53:79:34:6f:
1a:f9:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:26 2026 by rpki-client