Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: MSIEb480q59I4+ev2D1/AJTbM1oZhslDFo3Y5UmBZOI=
Subject key identifier: CE:E8:80:AD:C2:FF:67:EE:76:2B:2D:7A:7B:EC:FB:C7:3B:41:99:F8
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 019D265ECE696FC864544566A1BFB93D6FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0DDB
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: BwAU6dqt09Y9x5g3/o+y9q2uM0gCkDapV33OupMnKjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ce:69:6f:c8:64:54:45:66:a1:bf:b9:3d:6f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=cee880adc2ff67ee762b2d7a7becfbc73b4199f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:05:18:85:39:81:5b:0c:4a:33:b9:f5:90:
5d:d0:a9:00:75:38:4e:eb:c6:62:57:e7:10:0d:98:
56:e2:70:c3:66:64:69:c4:9e:d2:75:be:4f:27:92:
e7:bf:ba:97:e6:38:b3:d8:12:61:81:1e:23:55:a9:
72:27:11:88:b7:3b:ca:a5:26:c6:0e:c9:f0:f2:1a:
0b:44:d7:3a:42:2e:bb:da:48:4f:10:00:15:f3:9b:
27:47:a1:1a:62:33:44:85:8a:e0:4c:14:eb:e8:c4:
8c:f8:0e:fd:ae:71:9a:e1:e1:86:4c:f1:5e:47:06:
34:15:9e:ee:b7:9a:d2:5e:ab:ab:66:f8:4b:e5:5a:
06:6b:32:72:d6:b0:04:df:a6:67:6b:7f:99:df:37:
7f:ff:a8:8a:31:47:31:6a:ff:23:fc:87:bd:44:3a:
11:30:ec:d9:e6:c1:b5:96:c6:0b:27:1d:82:85:c9:
c5:da:19:dc:1c:95:31:52:e9:03:7f:12:82:d2:79:
c4:5e:a2:65:8a:bb:44:25:12:0f:a6:8c:67:4d:1e:
b4:3b:79:fc:c9:a5:f4:cb:19:2a:3f:36:d6:6b:f0:
fa:7e:21:c5:b1:7c:14:3a:40:4b:bf:37:2b:b0:80:
7a:06:4c:d7:1b:8f:a8:39:40:72:0b:4d:23:f1:4a:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:80:AD:C2:FF:67:EE:76:2B:2D:7A:7B:EC:FB:C7:3B:41:99:F8
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f7:dc:c1:d8:73:29:49:cb:3d:7a:66:ed:58:62:a2:40:e1:
6f:c6:54:28:58:ae:f7:fd:9b:33:2c:3e:8b:e1:32:39:e2:ae:
0c:a3:1a:d8:e8:8d:42:c5:c6:ec:10:76:de:ca:0b:d5:56:e2:
04:97:de:65:b2:36:4b:ea:72:32:7e:11:f4:27:37:5d:ab:97:
70:46:c7:64:5c:3c:b6:c2:cd:57:14:ab:e6:66:8b:b4:55:c5:
19:17:73:f3:de:3b:b7:10:9c:5e:87:a9:36:4e:98:00:2d:f8:
8a:47:67:40:78:48:4e:1a:87:54:89:c2:ce:3d:b3:4e:25:06:
be:d5:ac:1e:fc:89:34:fb:f8:a9:0d:94:33:6b:78:18:10:fd:
11:11:1e:4b:92:13:f1:f3:df:2c:33:07:2a:43:fc:1d:57:59:
8a:1f:c1:d7:cc:8f:09:dc:1a:65:3a:d6:fe:ec:d5:34:14:8b:
bb:ef:47:b5:c0:83:07:14:c5:4a:98:f0:aa:10:06:a2:0e:e2:
67:ab:ef:12:f0:07:1e:80:3c:e2:2a:7f:b8:98:b2:bc:ef:54:
3e:bb:3f:75:e0:8a:56:62:19:8a:82:7d:5b:af:4b:aa:80:98:
0f:59:35:b3:26:3f:88:e8:18:0f:f3:22:4e:b6:c8:c1:94:d4:
70:71:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:51 2026 by rpki-client