Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: JAHk/ZdAQlSqF928cFI+aJT+XqMMfcbc7OaY8fN2018=
Subject key identifier: 76:49:CB:0F:88:3E:F3:4D:54:D4:F3:78:AF:F5:2E:E6:2D:A5:21:4B
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 01A0ED0BAC351202B4CADEA6E6C9C12CA839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 0794
Signing time: Tue 29 Sep 2026 12:02:40 +0000
Manifest this update: Tue 29 Sep 2026 12:02:40 +0000
Manifest next update: Wed 30 Sep 2026 12:02:40 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: QPi73kXEihfq6QM0y3ayYtUikYPZjn/lM10gUGA0O+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:ac:35:12:02:b4:ca:de:a6:e6:c9:c1:2c:a8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Sep 29 12:02:40 2026 GMT
Not After : Sep 30 12:02:40 2026 GMT
Subject: CN=7649cb0f883ef34d54d4f378aff52ee62da5214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:4d:98:2e:a5:da:a2:b8:66:46:6f:51:6f:
52:6f:66:8d:c8:18:f5:52:7a:86:d4:e5:bd:c7:a0:
25:4f:b7:6a:78:42:74:dd:fe:36:48:b6:29:09:ef:
9d:d9:33:29:f7:d6:ab:93:a5:f0:c9:7d:4c:a7:d1:
9a:e9:08:23:0c:ce:6d:a7:6f:52:86:fa:9f:68:f7:
aa:f2:c0:0f:fe:f6:45:1d:09:46:53:7f:2f:f9:fa:
70:cc:b9:ae:95:e6:01:7e:fd:30:71:27:25:51:15:
3e:43:19:f4:33:ec:f5:a8:ae:cb:20:d0:4c:e1:a2:
8f:ea:ff:0b:a9:be:c4:2f:cd:a4:69:56:b4:a7:ba:
ee:bd:88:1d:ba:ca:92:79:f7:88:31:c2:cc:61:47:
fc:3f:4a:77:e3:67:25:09:fd:c0:5e:57:bc:15:cc:
b9:0c:61:e3:de:fb:0b:05:ca:27:cf:f4:d0:14:30:
84:d8:aa:95:c5:89:e8:bd:56:27:84:e6:b0:b3:79:
db:b7:af:04:97:e6:3d:7a:f6:48:5b:12:85:6a:6d:
bd:c0:d9:51:fb:e1:69:00:cf:2d:24:ed:e7:39:8d:
fd:e4:06:a4:81:29:c0:fb:b9:f5:10:b7:53:d8:7d:
09:05:af:15:60:8f:00:4e:79:d2:aa:70:1a:49:6d:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:CB:0F:88:3E:F3:4D:54:D4:F3:78:AF:F5:2E:E6:2D:A5:21:4B
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2c:72:bd:25:73:00:8f:f1:e2:4d:38:ea:43:0b:dd:c8:c8:
9d:c3:31:7e:fc:82:96:b2:e9:75:c5:2f:10:51:cc:7a:48:2e:
9c:ce:93:07:07:a1:41:cd:a2:2f:23:f2:c6:72:54:e8:73:6f:
5c:8d:b9:49:5b:a4:db:14:02:22:77:c3:87:11:b7:80:40:51:
cb:e7:63:1f:43:95:ea:ee:d2:59:67:2e:c5:90:69:b7:8b:28:
30:23:64:17:25:d3:5d:7a:2d:2c:59:93:47:83:ab:a6:d3:1f:
c5:ce:68:bb:65:0f:64:61:08:e2:c3:6f:3d:a5:34:d1:ab:87:
58:72:fb:d1:76:44:c9:a8:1f:d5:0d:c6:bd:a5:53:b6:94:59:
20:da:5f:34:05:0b:5a:4b:ee:6c:55:d3:36:64:8a:10:c8:2e:
f0:ab:08:c6:79:f4:c9:3d:fd:49:23:ac:a5:9c:8f:26:21:40:
10:a3:f7:dc:47:a7:4f:97:e7:8d:cd:03:fb:bc:b3:b7:e9:98:
aa:81:dd:67:7a:2d:4b:d5:6a:de:35:9d:a9:17:db:a9:f5:d9:
e2:07:96:74:06:a0:e1:18:2b:e8:94:dc:9f:c0:c8:03:87:68:
c1:41:cb:68:82:e0:3a:a8:0b:34:02:ca:34:2f:ad:66:04:3d:
4c:12:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:50:20 2026 by rpki-client