Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
File: M_RqsXrvI5qWvee2zLcG9-C2K24.mft (raw, json)
Hash identifier: xUFAvXfbbN9nA7P73qAT+R6BJEsOk4Pws7DQZKAtm7E=
Subject key identifier: 4C:A3:E7:D7:22:B9:43:7A:0B:5E:33:58:71:B4:78:E0:0A:FB:23:55
Authority key identifier: 33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
Certificate issuer: /CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Certificate serial: 019D382E4F9DE9A9AFFC292345BFF7B82AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
Manifest number: 02B0
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: M_RqsXrvI5qWvee2zLcG9-C2K24.crl (hash: sh/UEtK1dVf4SHXc8GxFauD+fxBR8Vwi609Z6nHYhLc=)
2: Z_OPvHfWF8socYEtUmBjgKSXUQM.roa (hash: c2FzX4VntHlUiCiWN/7rahyeWHvhR6mDon/hVfFkBVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4f:9d:e9:a9:af:fc:29:23:45:bf:f7:b8:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f46ab17aef239a96bde7b6ccb706f7e0b62b6e
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=4ca3e7d722b9437a0b5e335871b478e00afb2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:e5:30:a4:76:a8:64:df:b1:3c:69:dc:42:
c9:99:4d:58:cc:94:51:e4:d5:15:54:49:ad:18:c1:
e7:77:da:80:20:7c:fd:f0:74:5b:74:79:17:1e:0f:
21:d6:94:1b:ed:3c:2e:85:8f:bd:1c:46:69:78:32:
53:89:3a:32:73:cd:00:99:32:45:0b:51:a3:cb:cf:
dc:a9:64:60:8c:9b:d2:7e:a9:84:51:c8:31:e5:0d:
17:c5:5b:06:ff:12:67:b9:d0:0b:70:79:db:be:9b:
22:27:bd:bc:f9:e5:7a:1c:b2:27:51:42:8e:7e:22:
f7:80:7c:93:bd:e6:82:be:ea:74:53:5c:4f:14:75:
63:6c:95:f5:89:ba:fa:f4:dc:c2:8a:16:da:e5:01:
ee:52:74:72:eb:9a:26:96:5b:00:8d:41:20:64:e7:
ed:d4:91:c6:f6:7a:01:6d:86:f9:09:43:90:47:e5:
b7:4d:80:8f:26:e0:2c:ab:86:df:f1:0f:24:d4:86:
57:f6:93:05:05:33:ea:53:f6:d9:5c:f2:9f:69:81:
d1:19:dc:4e:ff:bb:e3:36:a3:17:5e:2d:89:84:f5:
b7:d8:9e:3d:f2:47:1a:96:d4:dc:28:e6:de:2b:0e:
06:e6:ff:2c:3a:d9:b1:77:4b:c1:d0:0d:87:52:63:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:E7:D7:22:B9:43:7A:0B:5E:33:58:71:B4:78:E0:0A:FB:23:55
X509v3 Authority Key Identifier:
keyid:33:F4:6A:B1:7A:EF:23:9A:96:BD:E7:B6:CC:B7:06:F7:E0:B6:2B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_RqsXrvI5qWvee2zLcG9-C2K24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/016bcc-ea5b-4e29-81c6-6f07a07d2769/1/M_RqsXrvI5qWvee2zLcG9-C2K24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:da:02:a5:85:f5:54:9d:71:23:bc:99:62:32:5d:f3:03:36:
87:c7:cb:e8:99:b4:34:c7:ac:ec:4b:c1:2c:39:d5:5b:53:45:
05:7f:3c:fe:92:fc:45:b5:6b:4b:e5:1f:c5:e1:4d:ee:47:98:
30:74:b9:0d:7b:33:af:8d:31:65:16:ca:25:3e:51:93:30:04:
eb:74:ea:1d:2b:18:c8:84:46:a5:96:49:c6:23:72:4c:48:b5:
a9:21:0c:f6:5a:82:e8:eb:e0:d1:25:43:1a:92:b4:fb:31:9f:
ea:fa:04:4b:97:84:fa:71:64:33:ca:36:f0:29:a5:ef:01:ba:
4b:cf:05:b9:13:ec:34:07:01:5e:69:1e:ce:a8:ba:db:6c:38:
55:58:5d:43:ee:4a:d4:10:b8:6d:90:48:b7:84:7a:21:ab:7b:
71:bd:0c:b9:1d:b3:63:9a:79:d9:2d:b8:aa:fc:dc:a9:e7:74:
04:ae:c2:69:46:da:18:8c:06:d3:b5:77:07:53:42:1c:24:c2:
10:78:b1:ea:1f:90:ed:ab:62:bd:67:b5:90:47:e7:ea:4a:e6:
f1:76:00:be:99:7d:2f:64:d1:19:6f:fd:d8:0b:7c:ea:11:0a:
30:f1:bb:15:a1:5a:5a:f7:2f:ae:61:cf:10:b5:0b:d6:f6:61:
e8:fe:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:20 2026 by rpki-client