Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: tsGI8oEX2njVypBXmzPqv6USgcHeC98R1Xh+7aGcTSI=
Subject key identifier: F7:0A:51:A7:AB:AC:79:4A:21:61:B0:88:F3:FF:3F:26:EF:A3:CC:A2
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 019E1EA2DF216C95DB1CA26145EC19FC6531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 0620
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: YhX2VZSrlE8toeIoxVao6V6bJgVLjeJHHUm7XeYOVpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:df:21:6c:95:db:1c:a2:61:45:ec:19:fc:65:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=f70a51a7abac794a2161b088f3ff3f26efa3cca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:9a:46:d4:85:b6:40:2b:39:01:d4:b8:ea:
74:eb:72:41:d1:ab:88:74:54:8f:cf:2c:e7:a7:78:
5d:11:fa:a5:3c:72:da:56:6d:47:7a:cb:9f:12:3a:
56:c8:ef:62:fb:2c:1d:13:49:10:28:6a:5c:c6:66:
2e:cb:fd:cc:ab:56:42:62:f0:2d:9f:f2:e4:0e:6e:
3b:27:4a:ac:a2:ca:e1:81:a1:f8:6e:31:05:94:04:
1f:79:90:8b:44:cc:93:cf:61:23:cd:f3:40:b7:3f:
5d:fb:ae:bb:b1:15:33:ed:e9:56:d8:cd:a1:8b:b8:
7f:da:a6:27:42:65:e2:5b:2e:d1:ab:e0:a1:28:3e:
e1:b2:80:76:cf:d0:5c:ed:18:8d:ea:1b:11:3a:9e:
c4:3b:b2:41:de:20:16:3c:89:07:b4:fa:2c:96:3b:
26:13:62:23:d5:0c:48:22:51:47:70:1e:19:a8:31:
e8:63:2f:ba:48:31:6b:7e:d5:e6:fd:5b:8d:70:b5:
39:f2:cf:7c:fd:9f:81:f9:da:78:8f:8c:73:06:55:
fa:21:f6:e6:08:a3:52:a6:79:08:a7:4a:d8:72:a6:
d7:c7:8e:fa:51:46:98:33:56:e7:31:7b:2b:27:98:
aa:e6:61:fd:1e:8d:3a:41:7f:a4:96:c5:4b:ce:00:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:51:A7:AB:AC:79:4A:21:61:B0:88:F3:FF:3F:26:EF:A3:CC:A2
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:2c:8a:83:6a:1b:53:62:b1:26:2d:0f:dc:e2:d8:f8:7f:
50:7c:c9:0a:09:09:1b:c7:ef:a3:b0:53:90:c4:b5:1a:a5:32:
40:12:77:89:21:7c:37:3a:85:2d:49:09:6f:fa:4f:84:79:bd:
00:67:74:d8:b0:3a:3e:13:4d:92:09:39:3a:6d:3d:f5:1e:09:
18:f9:7a:14:4a:fc:fe:74:20:04:a1:7a:e0:ee:37:a8:12:50:
b6:d2:e4:b4:76:06:9d:61:6c:52:4b:4c:36:91:27:62:53:29:
89:f0:b1:bc:98:af:ab:9a:2b:e0:1d:ee:59:6c:96:c7:b4:35:
11:92:2f:b0:33:62:f5:b9:c1:02:e9:70:01:30:d1:e1:84:11:
bc:fa:ca:ed:ba:e2:49:f0:38:6a:eb:b2:10:25:a4:85:ab:3c:
af:a5:0a:e9:ca:16:e3:f6:13:b4:3c:d9:a0:e2:87:1d:35:ea:
5a:89:b8:3d:1e:65:15:af:6f:75:af:c5:51:19:44:1f:46:d5:
a2:c2:2c:4b:c9:e2:4b:37:56:3c:82:90:89:89:5c:88:a0:65:
f9:38:c9:c3:59:ae:7f:9c:3e:32:1d:36:08:ed:9d:c2:55:62:
8e:d7:83:8d:be:61:f1:a6:9c:b6:9d:08:79:e5:de:bc:4b:d8:
57:78:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:44 2026 by rpki-client