Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: byksu1afgtp3kBXYbIuGmGnfa2uJye84ySVbNA9/e3I=
Subject key identifier: 20:2F:0D:D7:2E:43:7C:6C:26:1C:18:81:79:0A:83:A6:DC:F1:E0:61
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 019D2772352E6AEC1D03EC20F4A55EC14498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 05A0
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: 2v4LRviSKgPekXsEpho1/OcL5sm1PrHYNLnLm1ITTnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:35:2e:6a:ec:1d:03:ec:20:f4:a5:5e:c1:44:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=202f0dd72e437c6c261c1881790a83a6dcf1e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:53:0b:d2:cd:59:d1:02:be:28:b8:03:da:
61:60:d2:fb:99:c3:17:16:7d:ee:42:f5:ab:39:8f:
df:5d:ca:bc:eb:f7:da:c6:2f:4e:c4:df:03:5b:a5:
ea:62:dc:ad:ec:5c:5b:3b:fc:ae:58:02:98:bc:bd:
8c:34:11:37:33:a3:cf:e1:a8:be:5e:f0:e0:d4:ad:
af:6d:ec:ae:33:a8:19:a6:e6:16:ea:70:5d:d8:14:
42:78:12:06:cb:15:d6:e3:d4:bd:63:19:1d:7d:77:
59:0d:4e:9b:75:48:29:91:7d:ef:87:d9:a0:6a:e3:
43:db:f7:e9:47:d8:23:cc:26:1b:cc:82:b0:52:a2:
71:42:f4:a0:dd:10:0f:63:13:2b:d9:53:50:23:6d:
cb:da:ca:1b:c5:e5:82:8b:e0:bd:e1:af:b0:a5:06:
a8:df:42:de:c4:f8:79:d6:f4:24:00:3a:65:ef:f5:
c3:d8:46:e0:ba:4a:77:c2:4f:e9:86:32:11:3c:34:
a3:92:eb:50:ff:14:c8:60:4e:f4:b8:41:33:cc:76:
a3:f7:85:bc:97:79:90:04:66:75:92:24:5d:14:6a:
65:82:29:7c:e3:f7:89:14:af:ec:56:84:3f:18:6e:
dd:47:6e:7b:21:3d:cc:ee:4f:99:42:74:63:58:e2:
16:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:0D:D7:2E:43:7C:6C:26:1C:18:81:79:0A:83:A6:DC:F1:E0:61
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e8:22:d7:cb:9b:32:d0:91:18:3c:6f:97:f8:c4:ab:e3:38:
22:76:c2:cb:92:e5:74:07:b7:1b:11:f6:bb:19:b7:01:2c:d0:
e4:c0:ce:dd:74:3f:c0:43:22:1c:58:9f:67:d2:61:1e:46:fb:
b5:98:42:28:86:c4:08:a7:c5:01:29:72:cc:f4:fc:5e:39:33:
a3:06:44:ed:25:da:6d:f5:9e:e9:9f:1f:9a:b1:b4:e4:b3:9a:
c6:cb:3c:9d:67:86:f9:b8:52:2a:20:42:f1:6d:da:3b:7d:4c:
c1:93:3d:60:3f:5d:de:a3:b1:82:e6:2e:5b:4f:22:d4:29:74:
51:f3:71:e2:2e:47:eb:33:6b:9d:ab:97:03:2a:e5:aa:ea:8f:
f3:4c:35:c9:db:e6:7a:7c:46:c9:ef:ec:31:82:1a:19:28:68:
a0:86:1c:b8:00:1e:fb:6f:b3:bb:2d:68:13:8a:f3:ff:37:ad:
4f:f3:47:0e:50:ce:5b:ab:71:e4:b5:17:d5:a1:0d:93:72:1e:
9a:0d:bd:a3:aa:d8:39:ef:e7:c2:f0:7f:a0:e6:2a:c0:25:52:
28:a3:80:8b:93:cb:ea:17:f2:96:ac:80:a9:79:ec:87:31:6b:
56:51:18:09:a1:ee:51:b0:28:ba:b6:b0:6b:f5:ee:42:49:7e:
72:53:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:32 2026 by rpki-client