Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File: r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier: ZyfoXxdsc6ia6Sj+71PmmfBGuAls4AKeEZo2YHWPwEg=
Subject key identifier: 8C:E7:41:AF:33:34:DF:D6:8B:EC:6E:AE:2B:03:83:3D:59:7A:40:0D
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer: /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial: 019D37C0F19B1C18ABABDCF662B6E46448A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number: 032F
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa (hash: KV414vkbOzOU+S9G8Ie1ETRwhJyk99wklT+FH+pmi/w=)
2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: PRNuquctzFoutf2Z1u3DQ/xpaNLgCuAXdtT1PRkcQ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f1:9b:1c:18:ab:ab:dc:f6:62:b6:e4:64:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=8ce741af3334dfd68bec6eae2b03833d597a400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:6b:bc:96:38:9c:2b:90:12:97:13:ca:62:
19:27:43:d4:d7:ad:68:8e:af:53:38:d8:78:b5:cc:
f6:35:bf:6e:6b:10:ea:a6:72:68:5d:db:0e:cf:98:
ec:0a:ec:9a:a1:41:6f:fd:c1:c7:42:4a:ab:84:a6:
af:dd:ff:87:cd:6d:10:ca:65:a2:42:a7:dd:6c:9f:
8f:ca:3f:22:0e:16:2c:ff:71:22:81:83:18:67:f3:
e0:c1:95:c3:d4:bb:45:f1:4b:c5:15:ad:e5:ec:24:
78:3b:4e:d2:95:ab:2e:37:41:b1:ae:96:40:e0:a3:
dd:43:0e:68:ec:6e:06:8d:ac:0e:df:45:bd:0b:87:
77:d1:81:15:b1:e0:1a:ea:c1:8e:82:ae:8c:1a:1e:
0f:7d:a9:ff:ef:07:00:a1:17:e7:ef:61:55:41:f1:
a2:8d:7d:07:39:0e:1b:79:06:c9:fb:02:fe:02:5e:
eb:90:b2:26:fb:2c:b3:64:7c:fb:a4:6d:b6:19:1b:
e2:41:22:36:76:4b:27:e8:a3:76:0a:40:3a:bd:02:
29:da:d4:14:e0:1d:8b:1a:d3:9b:dc:7c:18:9c:19:
d0:4a:58:33:9a:40:e5:05:6f:66:89:f0:5f:27:1a:
39:05:fa:04:0a:e1:4a:6d:d5:06:51:e3:cf:1c:b2:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E7:41:AF:33:34:DF:D6:8B:EC:6E:AE:2B:03:83:3D:59:7A:40:0D
X509v3 Authority Key Identifier:
keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:fd:17:a1:a5:81:91:b9:2a:53:b9:f4:9e:8d:2b:bc:35:
13:e9:a8:fe:5c:08:2d:ab:d2:17:12:e9:37:77:b8:8f:c9:23:
c2:79:c6:3f:a4:6f:1d:02:76:b6:31:37:9d:c6:42:16:70:f7:
09:a1:4a:af:0f:46:0d:8c:e9:49:3e:66:59:49:96:79:35:e9:
f1:92:c1:b1:25:54:01:0a:e5:69:d3:e4:ab:be:bf:e1:b4:6e:
aa:5a:e5:d5:b3:93:20:8f:70:d1:80:b8:60:df:6e:7c:66:97:
71:a4:1b:d9:23:25:3a:9c:bd:0f:19:79:d6:bf:8f:d7:71:ba:
bd:2b:38:a2:b0:71:0c:b7:a9:46:f9:f6:72:30:7d:fe:46:52:
9b:96:e2:7e:6e:7f:47:af:c7:29:57:22:31:07:6b:85:96:46:
7b:cb:5f:a6:ae:5c:a7:09:0a:e6:60:29:61:2c:fc:8d:a3:15:
6c:d6:88:db:97:43:42:2c:28:1e:c9:07:ba:df:60:34:45:20:
93:a0:01:b2:65:22:2c:aa:31:d1:c5:55:72:7a:66:d9:f3:72:
9b:4f:d3:17:9a:b6:13:61:d8:d2:56:89:c4:77:46:2e:5c:9b:
32:3a:78:d0:60:70:7e:e9:aa:0f:0c:c5:c9:05:8f:9e:41:f2:
de:51:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:18 2026 by rpki-client