Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: dRcfgsCqitnGcKkdN0Ko0HCDWcqELXctk5XCa16ChX4=
Subject key identifier: B3:F0:3F:62:05:08:7B:1F:17:19:04:35:7C:40:62:A1:FF:93:E6:F5
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019D28BB9CE476B1EA13285A26DB9261C5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 12D0
Signing time: Thu 26 Mar 2026 06:01:17 +0000
Manifest this update: Thu 26 Mar 2026 06:01:17 +0000
Manifest next update: Fri 27 Mar 2026 06:01:17 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: +661XdLAuth3Nkpo4yM61od1UKkw+ZcKkhK5yd+iVOA=)
2: qGBCQCZlL1yzOajHzIypwWxNeWA.roa (hash: p7Sjt3xmkXcVS2g8oPh7NRV5OpfFVXtU6JCEbaI2Bsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9c:e4:76:b1:ea:13:28:5a:26:db:92:61:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Mar 26 06:01:17 2026 GMT
Not After : Mar 27 06:01:17 2026 GMT
Subject: CN=b3f03f6205087b1f171904357c4062a1ff93e6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:d0:9d:9f:15:a8:ff:17:03:18:90:5c:d9:
f7:e6:ec:b0:08:3e:1d:e1:ad:46:df:c7:70:a9:ed:
42:c5:db:26:cd:83:19:da:aa:35:45:b4:94:85:ca:
27:8a:53:cd:79:83:d3:17:7d:fb:6b:6d:66:85:26:
6c:0c:b7:bd:e1:ff:a2:c6:12:b1:cf:5d:ec:50:76:
50:37:d9:ec:d1:4d:d1:6b:ca:d5:a3:cc:53:6e:98:
7f:40:09:51:4e:4b:d4:43:c0:9b:2d:5d:22:a2:e9:
0b:80:40:40:b1:87:29:ec:5b:2a:ac:9f:b4:d5:61:
47:f9:04:fa:5e:60:ef:30:39:96:28:01:87:0d:97:
01:4c:0c:4c:57:51:db:fc:ef:9f:ad:e0:3d:09:c5:
7f:18:2d:63:13:79:32:bf:73:5d:03:19:c7:dc:ef:
1d:aa:06:e4:9e:ed:a8:09:c2:b4:59:5c:dd:cc:74:
1e:28:5b:67:cf:aa:80:8f:4b:7b:61:a3:25:2a:25:
8c:af:cb:21:6b:96:bf:41:a9:e7:a6:3b:64:e2:c0:
f6:79:88:16:74:8b:83:14:06:fc:36:68:80:cd:10:
fe:1d:1e:cb:76:66:0c:f5:9b:0c:9a:6c:9f:5e:0a:
d7:06:d0:de:ec:0f:8c:aa:76:96:93:50:1b:02:e5:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:3F:62:05:08:7B:1F:17:19:04:35:7C:40:62:A1:FF:93:E6:F5
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:5f:1d:58:e5:3f:d4:99:c8:df:64:b5:5d:27:54:df:40:
cb:6a:86:19:54:34:c4:9e:05:81:dd:a8:5d:e6:69:82:03:42:
65:a6:f7:86:31:79:25:1c:b6:ad:a2:6a:79:84:63:4e:74:33:
28:7b:f1:3a:b4:10:dc:bc:40:56:4d:19:38:63:bf:7d:34:eb:
5f:35:24:07:ca:d3:82:bb:a6:88:3e:a1:f9:5d:f0:2f:44:ea:
01:a4:94:2d:49:22:01:03:9e:87:e8:26:aa:73:43:79:4f:67:
f7:63:4f:67:1e:66:d3:b6:83:dc:ed:b9:3e:12:5c:69:36:92:
f5:fc:5d:9e:34:66:7d:27:4d:4b:e8:17:c0:b1:54:b4:50:c4:
09:59:e0:2c:c1:c9:2f:c0:bc:25:33:dd:04:67:e3:db:eb:a8:
1d:0c:06:75:47:fc:22:30:4b:9b:99:83:85:7d:f8:8c:80:0b:
83:58:40:e5:8c:29:72:04:75:0f:0c:c2:0b:19:74:4f:62:60:
5c:85:c1:d8:03:a1:4b:09:ae:57:e4:5a:4a:48:42:82:95:3f:
4c:90:5b:81:0c:47:4e:b6:b5:3a:be:16:7d:37:73:e8:28:46:
6f:f2:80:48:4d:29:7a:54:12:d8:12:ba:cb:b9:96:6c:cb:a2:
fc:22:70:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:52 2026 by rpki-client