Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: bCCWX0x+7Ce4ep+rb/QY9dMmc42Lv4B4iI5BOa3yBAA=
Subject key identifier: 21:F3:27:7E:90:90:36:DF:8A:9B:D8:53:09:E9:8F:1E:4D:BF:74:52
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019D27DF750258198AF1ED53CBB77B3489C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0ABB
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (hash: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: eKMJ+1xg0sNffeKONS1xdS+xNF2/AWuSvNgOx8AnANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:75:02:58:19:8a:f1:ed:53:cb:b7:7b:34:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=21f3277e909036df8a9bd85309e98f1e4dbf7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:ee:5b:88:04:d9:61:80:91:51:93:d8:d3:
97:df:57:ba:c6:15:9e:27:22:90:16:b7:81:d4:ee:
2d:6a:48:b1:0c:14:c8:bc:20:f4:1e:22:b1:ee:e2:
0b:16:3f:13:38:08:26:a1:75:84:6f:a1:34:b8:d2:
c7:42:21:5c:0b:d8:e6:d7:89:76:41:55:13:5b:7c:
a6:38:92:12:2f:aa:09:71:96:7a:5e:2c:85:f4:87:
5e:d0:74:1d:46:04:10:6b:1e:6e:93:d2:57:00:ce:
6a:ff:62:62:45:f0:bd:f1:ef:8d:73:b6:7f:ab:65:
8b:0e:e6:99:98:4c:2f:9d:95:19:5f:dc:e7:76:fc:
23:dd:b4:13:ef:41:bd:cd:8d:bb:8d:09:14:27:2c:
44:cf:1a:ef:6f:b8:4b:0c:d3:a0:40:24:2f:e7:5a:
97:e1:a1:b9:d2:1f:8d:7f:19:f4:ee:4b:5d:89:96:
b4:fe:9d:ed:66:d9:73:89:13:99:bf:7e:51:c8:63:
db:86:0e:88:1f:fb:79:92:d1:cf:dc:f6:04:e4:2e:
04:4f:b3:94:ce:94:87:0b:39:4a:bd:d2:8a:45:fd:
d7:e6:1b:37:a1:2c:60:de:df:79:55:67:ff:33:85:
13:b3:4f:7b:c4:f2:e4:a2:8f:f5:c1:10:c7:8d:34:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:27:7E:90:90:36:DF:8A:9B:D8:53:09:E9:8F:1E:4D:BF:74:52
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:34:31:e6:f3:57:e8:3a:d2:a8:9a:75:bf:b5:6e:7d:13:
09:fa:82:c7:49:3b:32:d0:24:07:80:57:00:94:2c:f7:25:0a:
40:0d:25:4e:f8:e6:fe:47:60:b4:a6:90:dc:2b:2d:fd:7a:04:
da:90:1a:cb:3f:0b:17:88:81:da:c6:5d:15:1e:ca:71:20:73:
b8:da:03:d4:9d:a5:3e:fb:29:b0:5a:a8:4d:23:1f:e8:10:f5:
73:f0:0e:cd:13:77:ec:e0:9a:40:06:08:22:ef:8d:0b:5a:79:
e4:c6:55:57:dd:5f:c3:09:26:06:51:ae:90:78:52:f8:fc:29:
07:0f:f1:09:01:ff:5e:74:43:69:f6:4d:5e:35:1f:82:96:4c:
77:be:4c:1a:3f:01:a6:ea:0b:05:fe:fe:ac:78:8c:4a:70:4e:
73:16:7e:37:2d:03:d8:38:de:fb:36:8a:de:e8:98:b2:d7:de:
b2:61:a1:49:f7:42:cd:3d:07:a7:7f:e6:b1:95:1e:50:cd:ed:
6f:c3:bc:a2:38:3d:b0:ad:a3:3b:36:bd:9d:b5:47:ef:ff:95:
28:19:27:7f:f7:29:a9:30:32:5b:7e:38:c6:41:d0:04:75:8c:
f7:22:30:ca:b6:95:a8:50:72:00:ac:2c:e1:8e:67:19:20:b3:
14:72:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:54 2026 by rpki-client