Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: EH7L1tbXDftCcv+OjfLAuQ1OxQ5agXV0RWIDP4+YRuM=
Subject key identifier: D8:16:F7:80:C5:78:DB:4A:88:4D:3B:A4:3F:5A:58:C0:0F:E5:F5:0C
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 019D37C0B9051413AB6A6E5D69445D18F97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (hash: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: Rz7iHVsQKN3peJIc8HyaZ2WPLupUdmGcdutSKHcS8PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b9:05:14:13:ab:6a:6e:5d:69:44:5d:18:f9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=d816f780c578db4a884d3ba43f5a58c00fe5f50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:6d:17:f8:33:2c:67:b9:50:bd:bf:29:1f:
fc:f6:a1:83:39:de:89:58:2d:6b:be:70:7f:79:ff:
fd:8d:a6:f6:cf:dc:18:e5:29:94:30:a4:01:14:fa:
07:81:28:82:e9:55:31:80:86:a0:6c:09:c5:8a:ab:
b4:e3:ad:cc:57:9a:fa:11:28:9b:40:11:bb:29:4b:
1d:6d:bd:fa:a1:68:74:41:5b:a2:19:1c:dc:d7:90:
94:e6:2f:4f:3c:db:2a:7e:91:7d:e5:77:e4:5d:41:
73:8d:c9:27:b0:ea:86:5b:d6:c9:f5:da:a3:34:35:
e2:4e:16:a9:72:96:6f:b1:64:ba:3d:33:be:46:ba:
04:81:a1:49:52:17:9b:63:5c:1c:0a:3f:70:29:b3:
21:4a:6d:e4:dd:63:5f:a6:05:d0:ac:ce:d9:9f:cb:
72:95:40:b5:99:b5:24:5c:47:29:c8:7f:b0:b8:eb:
93:d4:be:c9:31:89:72:2a:92:1a:e3:9e:58:86:9d:
58:36:24:14:d6:48:5d:61:af:0e:0a:33:54:94:76:
ca:2e:25:52:6b:7f:4f:c1:d6:be:53:95:78:d5:1d:
d2:b1:96:f7:a8:12:54:ef:d9:d1:74:3b:2a:9e:be:
9c:7b:4d:01:a9:b2:9b:0d:4e:3a:54:07:57:58:2c:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:F7:80:C5:78:DB:4A:88:4D:3B:A4:3F:5A:58:C0:0F:E5:F5:0C
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6c:b8:ed:cc:25:9b:bf:c9:db:92:47:32:12:f0:63:e7:49:
ec:5b:00:a4:56:78:d8:2c:39:b4:fa:86:e2:cf:c9:a5:5d:5e:
54:4b:68:4a:b3:64:d6:62:9c:0d:c2:2a:b2:ed:03:bd:d5:24:
b2:ab:45:8a:e6:7d:0d:ea:81:7a:29:b1:dc:33:3b:8f:68:62:
00:1e:fd:e3:e4:cb:8d:09:79:31:aa:b7:75:19:c1:15:e8:57:
bf:28:cd:92:b0:06:18:79:21:b5:82:5f:f4:38:1c:a6:f7:42:
ca:31:67:48:e1:8d:f7:c1:9f:f9:5b:27:1e:0d:f7:11:31:65:
64:10:e4:9c:df:6f:ec:23:20:93:f0:2d:e1:ec:4e:d9:aa:e4:
21:63:20:e7:a6:8c:7d:bb:f9:e1:14:86:94:84:39:cf:63:0d:
4f:8f:d9:52:66:97:12:67:31:da:8a:9a:b1:2c:f1:de:08:58:
e8:a0:a2:a2:14:e4:17:24:67:6c:4f:90:36:cf:fe:e6:2c:20:
43:70:6d:f2:f1:66:57:d8:8d:f3:da:5b:89:bc:b3:f3:45:f1:
50:45:46:99:9a:4b:01:2d:fc:11:72:67:40:cb:28:65:99:d6:
94:88:bd:6a:4d:89:b2:08:28:45:ce:61:f2:11:56:b0:44:80:
ff:62:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:49 2026 by rpki-client