Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: vOHMX2xb+DF3hmk2UWEmKxdHf0EJ+exJL7U68LXp8Kg=
Subject key identifier: 2B:80:FD:D2:9A:D3:D9:C3:EB:DC:31:56:53:18:D6:C1:72:04:66:79
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019D3940A3E345E24B5A2FD32647E154C211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 1205
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: M2T/cJ3MVFlun6mXJFeCyZnzue8v+kVA3Esp6WOq81Y=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a3:e3:45:e2:4b:5a:2f:d3:26:47:e1:54:c2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=2b80fdd29ad3d9c3ebdc31565318d6c172046679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:94:17:2d:29:e5:a4:f0:1e:89:29:cc:85:
ec:0a:5f:eb:42:d1:80:6b:e6:88:97:94:2b:c1:64:
8c:af:3c:36:42:4d:93:ce:95:3a:30:dd:d8:20:4d:
60:1f:5a:9d:0b:5d:ad:b9:4a:80:b8:0a:10:b6:ab:
54:28:90:6f:f9:26:41:8c:bb:b6:02:75:0f:c4:34:
a7:5c:85:0a:b6:eb:e8:c2:db:5a:76:ef:01:2f:eb:
ce:85:7a:67:09:ba:0d:62:cf:48:b7:37:70:00:90:
70:d5:52:41:fa:7e:b5:fe:c1:f0:18:b0:6f:81:32:
83:e0:3f:9c:d2:30:ec:f7:f9:89:fe:65:e6:bc:f5:
c3:6b:b7:8f:31:0c:52:51:b9:d0:e5:2f:12:14:f8:
95:0f:90:a4:f7:03:02:8d:db:ed:19:0b:4b:bf:60:
67:75:d6:27:2a:81:cd:98:f0:21:4e:e5:aa:28:d0:
84:fc:4f:65:2c:3b:8b:77:7a:51:38:cf:c3:a2:74:
bb:04:1f:45:3c:24:fc:3f:b3:32:48:ee:cd:31:ed:
d3:f9:52:40:27:e1:05:b3:56:2a:18:d1:6f:8f:4d:
e3:b8:40:ea:d6:ea:cb:a9:39:74:69:f7:17:63:5f:
02:c3:c0:94:32:a9:12:12:40:07:66:60:6d:6b:15:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:80:FD:D2:9A:D3:D9:C3:EB:DC:31:56:53:18:D6:C1:72:04:66:79
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ef:d8:16:69:d9:5c:4a:1d:b6:55:fa:9b:73:33:e9:b8:b4:
e3:9c:08:bc:f7:9d:c5:1e:10:d6:2a:40:41:e1:13:bc:d6:b3:
9c:00:0f:b9:3c:fc:bd:1c:de:37:85:38:2b:3c:2e:ef:b2:e3:
f5:cf:ee:56:b3:bc:74:e1:07:f6:c5:5c:54:7d:50:07:c1:a8:
41:d0:10:11:21:f7:b5:ff:4f:58:7c:5a:c4:f9:63:4d:20:4c:
49:86:9b:eb:c1:4d:79:22:89:89:97:19:c9:3c:8e:39:d9:c1:
b4:49:d0:1e:1d:ad:53:af:27:83:f6:7b:1d:0b:cb:f1:d7:78:
37:2e:31:4a:96:04:40:fd:38:7e:4c:d6:02:ed:da:ff:67:ec:
9d:d9:be:cb:b8:f8:ef:7b:38:2c:bd:bf:6b:76:51:ad:90:aa:
78:89:5a:49:44:d3:eb:b4:d0:f6:57:a6:7a:0f:ea:15:82:d9:
d5:e8:0d:7c:52:52:02:6b:81:90:48:31:af:b9:dd:18:e8:b5:
02:75:35:c4:0e:c9:97:f2:72:c6:10:25:64:be:29:40:b7:3c:
f9:9d:4b:94:a1:e6:1e:04:6f:2b:21:7d:db:7e:93:2b:ab:a5:
7f:01:79:bb:9f:90:71:2b:74:fd:60:e1:61:2c:c7:ab:dc:9a:
31:43:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:09 2026 by rpki-client