Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: Lc25uxFndV4oKs4KWZIaklnD09JriMSNBfjyvATAW4c=
Subject key identifier: F8:2F:24:DA:9C:B9:D8:DE:E4:1C:14:C8:36:B7:27:D4:C7:B2:CA:35
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 019D371B3CDB1B037F1A32F719B96E6276BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 05DE
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: PCnALJz9yF/cn2cQASYNvTNqALtKgQZ8gZNjnT9P5OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3c:db:1b:03:7f:1a:32:f7:19:b9:6e:62:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=f82f24da9cb9d8dee41c14c836b727d4c7b2ca35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:4a:1e:27:0e:79:92:dc:41:0e:67:34:51:
0d:cc:e4:22:43:d0:e3:b3:69:23:a9:14:91:de:f6:
c5:f1:b1:82:cb:67:85:a7:22:27:eb:2d:43:12:c5:
23:28:3a:e3:0a:72:dd:8f:a2:e1:df:4e:c2:64:32:
02:40:ef:3f:ab:62:21:5d:39:e4:f0:f3:ff:3b:37:
20:2d:07:ba:9a:e3:0b:8b:10:9f:d1:e0:03:39:1f:
27:9b:24:d0:75:c2:0e:ae:ca:c6:6a:7a:27:83:ce:
d8:ef:91:0c:ab:e3:35:08:fc:91:96:75:66:ef:f2:
4c:8a:91:b5:e7:fd:6b:c4:f3:61:79:e7:12:eb:35:
46:b3:c1:59:66:c3:3d:c5:04:2e:f6:28:77:78:cc:
6f:76:1a:e1:06:7b:9c:e0:66:9f:39:8c:bd:fa:81:
38:53:b8:54:41:f3:e0:0a:7f:a4:93:90:77:fe:f3:
8b:7b:38:e1:85:80:65:9e:29:9c:2c:58:e9:5a:b4:
4c:04:57:1e:2c:8c:24:3a:71:ba:bb:80:ef:18:85:
63:1a:3e:02:6e:68:59:87:2b:45:05:3d:2c:65:58:
9b:cc:62:21:08:d7:de:0a:af:bf:00:fc:41:a9:de:
44:90:3b:e7:61:38:0d:63:d4:fe:42:45:42:ff:4e:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:24:DA:9C:B9:D8:DE:E4:1C:14:C8:36:B7:27:D4:C7:B2:CA:35
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5c:08:2b:78:b9:65:39:2e:8a:cc:77:37:16:5e:4a:37:dd:
65:d2:2b:51:94:f9:58:2f:c0:76:c4:2b:8e:f2:90:a7:b9:67:
76:13:58:db:e0:e9:93:b5:4d:6d:21:50:1b:34:37:e3:1b:f1:
dc:ba:21:93:5c:b0:c2:14:96:83:62:7a:df:f1:56:5f:49:a7:
25:98:20:04:21:f9:ce:57:36:d6:e5:0f:5a:f3:12:e3:fa:53:
e3:79:df:74:cb:af:67:46:22:c2:f4:68:a5:bf:55:b5:c2:03:
48:3f:6b:64:37:b2:bb:67:06:53:c0:d1:28:d8:e5:7d:9e:ec:
fe:c2:9c:70:12:fd:b1:2a:b5:18:e2:2b:2b:c4:23:32:ca:c3:
ac:93:7c:e7:1e:f0:25:ad:0e:ea:00:2a:c3:76:3e:7d:84:ae:
78:0c:d4:95:7d:2a:73:06:47:9d:83:5b:56:c2:27:e8:02:d0:
03:fd:ff:b1:46:c8:8c:f9:5d:0d:ec:2a:d5:ea:50:2c:13:9d:
76:c7:53:cf:75:56:43:d5:4b:73:d4:d6:08:89:d0:f9:12:76:
f9:c4:25:aa:27:ae:6d:65:5b:a5:f5:a6:38:59:1a:9f:f8:ed:
ba:bf:54:d6:ba:9a:49:f2:86:d4:2d:1c:dc:14:df:aa:d7:62:
f5:35:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client