Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: T5OLzZ6QzxsJvQQBO/pHr/8WRNt+mvbxdjX0WJ00Xyk=
Subject key identifier: EA:D5:75:41:C2:04:F3:DD:CA:7B:94:19:94:B6:CF:3D:BE:E1:35:7A
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019D262871D7FC4AD9FB46C3AD0B05A9E5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 1061
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: oQ8m+WSsqQu0VcXxxZoATxarrESI/mbQAfHfEEdBobA=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:71:d7:fc:4a:d9:fb:46:c3:ad:0b:05:a9:e5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=ead57541c204f3ddca7b941994b6cf3dbee1357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:c1:22:a8:0c:4e:39:0a:7b:75:01:b5:9e:
02:3c:19:a4:4e:57:19:02:42:49:6b:88:c1:24:4d:
54:4c:7a:27:bc:6a:d0:66:d6:44:e9:d9:ee:a8:31:
ac:76:f3:67:23:ae:7d:3f:24:52:b7:c2:4a:30:90:
ff:8c:71:df:ad:71:92:50:55:a9:5b:d0:7f:2a:ae:
2e:f1:6c:32:57:11:b5:5f:20:54:0c:40:9e:f7:01:
70:1d:26:7c:12:46:3b:5e:32:c8:d6:b1:18:51:3c:
90:52:75:97:2b:91:d1:db:85:4c:97:4b:80:fe:59:
5f:f0:d3:1b:1e:97:17:0c:b9:d5:2d:31:54:51:78:
a7:92:1d:eb:62:09:d9:f3:25:22:d9:19:4d:a1:a3:
81:e6:98:2e:2f:6e:19:84:30:70:b9:b7:65:e5:3f:
84:a6:75:a3:59:70:d3:a0:e4:da:96:49:3a:f1:fa:
55:2d:7c:ea:c6:d6:2e:ea:ff:ac:98:1f:e6:79:57:
b6:2b:7f:96:88:11:5a:76:95:38:6c:8d:f8:e5:8e:
f1:68:73:73:2a:52:d3:9c:84:4a:e6:ba:35:53:dc:
2e:26:0f:20:df:09:5f:14:a4:13:44:b4:f3:c8:b1:
3a:26:1c:72:c9:84:67:9c:64:06:6b:4b:c8:7f:1e:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:75:41:C2:04:F3:DD:CA:7B:94:19:94:B6:CF:3D:BE:E1:35:7A
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:de:0d:95:42:b0:83:33:34:36:cf:e4:33:50:f0:48:34:49:
23:4a:92:f5:68:73:ed:0d:f9:20:7f:5f:90:c5:29:15:d6:d9:
4a:97:a5:dd:02:cb:09:6f:8a:94:bb:2d:dd:bd:45:ce:48:3c:
97:14:0d:2b:3e:bf:9a:3a:10:d9:16:e7:bc:4e:85:d7:93:d9:
13:84:ee:6d:23:db:b7:94:ab:a0:82:c0:d5:91:1e:7e:ab:05:
35:33:b9:71:64:02:a4:b0:10:35:b2:52:a3:ed:fe:60:9b:84:
d5:6d:b4:3c:7f:5b:6b:1d:9a:74:47:ae:80:3a:43:4a:c7:b5:
33:09:37:3a:1d:de:aa:32:05:a2:97:a0:0a:cf:e1:9b:e0:28:
99:f4:e2:83:7e:66:3d:17:1c:19:b0:3e:53:6e:5f:ee:bf:5b:
a9:8d:b4:be:7d:4c:3f:d2:16:9b:47:f0:4b:2d:c2:f2:36:f5:
90:8d:7c:14:73:ab:fb:a8:5f:05:1f:e1:a0:80:39:fd:ce:1e:
10:12:6f:f3:07:c5:05:9e:7b:1c:8b:1a:61:f4:0d:d6:bc:ba:
0b:61:eb:45:e5:3b:eb:66:06:b4:43:3b:80:dd:38:69:61:89:
7d:4c:13:26:31:82:31:f0:ce:3b:15:96:53:c8:11:c0:54:df:
4c:a3:fe:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:52 2026 by rpki-client