Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.mft
File: R2V_mnLzKhTgQmooFIv6_DY6K5k.mft (raw, json)
Hash identifier: 3sJRTdU4M5zrLax85mCt23Br+Fm87dVpaAJhuhhrV1Y=
Subject key identifier: 1D:20:DA:8C:02:79:23:50:10:29:30:09:01:BA:55:45:99:E5:E1:E3
Authority key identifier: 47:65:7F:9A:72:F3:2A:14:E0:42:6A:28:14:8B:FA:FC:36:3A:2B:99
Certificate issuer: /CN=47657f9a72f32a14e0426a28148bfafc363a2b99
Certificate serial: 019D3978178652DE96C7B8ABE470A4BF7DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.mft
Manifest number: D2
Signing time: Sun 29 Mar 2026 12:01:04 +0000
Manifest this update: Sun 29 Mar 2026 12:01:04 +0000
Manifest next update: Mon 30 Mar 2026 12:01:04 +0000
Files and hashes: 1: R2V_mnLzKhTgQmooFIv6_DY6K5k.crl (hash: NW/q92R8GeSzmuJgckeCb2EryePTYAHaFsvXR/GPZBY=)
2: ljfQBEZQmvHHz2SJNF4mEsQaURI.roa (hash: ZOzQWwHZlVBnbxBAVYaYpgDTEA0/TVyFXfNDlYL0qQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:17:86:52:de:96:c7:b8:ab:e4:70:a4:bf:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47657f9a72f32a14e0426a28148bfafc363a2b99
Validity
Not Before: Mar 29 12:01:04 2026 GMT
Not After : Mar 30 12:01:04 2026 GMT
Subject: CN=1d20da8c027923501029300901ba554599e5e1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:24:5a:e9:a7:81:25:f8:d1:b8:45:60:0b:
36:62:41:b1:b3:ae:c2:e3:e3:07:83:d8:12:c5:48:
1a:8b:19:c5:0a:6d:18:8d:2a:b9:2b:80:19:ee:20:
70:39:5f:d0:b1:22:c2:e2:fc:13:c6:8e:30:5f:70:
ac:26:83:9c:3e:de:c7:7d:30:37:ea:4d:cd:f7:1c:
f5:09:83:c4:01:d6:4a:a3:7b:ee:12:72:b3:c7:0d:
23:cd:7e:c0:8e:ac:9f:e2:06:5a:88:51:8d:29:d1:
cf:8e:79:72:e3:36:1f:33:ee:3e:bd:f2:ed:ba:cb:
ab:ed:58:40:9f:ad:26:9c:28:40:b8:06:ad:6e:50:
c3:29:a2:05:a8:37:33:90:17:4e:6b:7a:e9:76:e6:
f6:77:8e:55:a4:66:a1:1e:50:2f:bc:c3:b3:ba:8a:
03:70:62:d0:e5:40:2d:27:8b:91:fd:a9:b5:fa:f3:
db:94:fc:03:d2:3a:24:ad:ef:78:b5:bc:ee:2c:13:
ea:7c:3d:56:6f:7a:09:64:c4:69:a6:0f:d8:3b:3d:
57:a0:ae:73:f6:02:f0:be:93:c0:10:5e:37:52:c3:
5f:a7:3e:80:0a:7a:de:b4:fb:55:3e:26:be:ef:88:
3f:ee:da:0a:f5:aa:b1:7a:00:65:52:58:81:2d:04:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:DA:8C:02:79:23:50:10:29:30:09:01:BA:55:45:99:E5:E1:E3
X509v3 Authority Key Identifier:
keyid:47:65:7F:9A:72:F3:2A:14:E0:42:6A:28:14:8B:FA:FC:36:3A:2B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:d7:74:e7:2f:43:84:84:bf:34:04:7f:54:e6:12:6b:9e:
5c:35:4e:eb:04:ac:94:86:63:22:f7:8b:63:86:ff:bd:ae:22:
3e:ec:6e:f9:da:49:9e:3e:c9:3d:65:62:18:c1:1d:26:41:b7:
9a:fe:03:d3:da:ca:83:c6:07:76:21:bd:4a:5b:6b:5f:13:30:
dc:43:6d:f3:cf:28:25:46:e9:69:f5:99:1d:1f:68:39:fb:bd:
98:02:43:24:dc:e7:75:cd:eb:92:d8:b9:e8:61:71:2e:a7:10:
dc:b3:62:99:54:2c:30:c0:a0:f5:26:da:84:34:5c:88:c1:80:
cf:f2:fb:3e:b6:b4:f9:59:b2:66:d9:d6:2e:8a:99:19:f4:aa:
1e:6e:2f:dc:a8:a6:31:15:1c:06:02:3d:e6:bd:08:04:89:76:
92:37:16:d8:47:88:18:71:85:34:98:17:4a:74:12:51:89:c5:
02:8e:b8:40:a3:0b:03:2e:7d:82:1f:6c:90:37:9e:a0:57:a0:
14:bb:e0:3b:ba:ff:40:9e:39:33:4a:81:7b:f5:7d:dd:69:5e:
30:8b:e2:7b:57:c0:88:2c:31:9f:8a:9f:86:5e:06:2a:b2:03:
de:11:cb:71:4b:5d:e8:44:7f:36:7b:7e:1d:a3:7d:a3:20:79:
4c:e2:0e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBeGUt6Wx7ir5HCkv330MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjU3ZjlhNzJmMzJhMTRlMDQyNmEyODE0OGJmYWZjMzYz
YTJiOTkwHhcNMjYwMzI5MTIwMTA0WhcNMjYwMzMwMTIwMTA0WjAzMTEwLwYDVQQD
EygxZDIwZGE4YzAyNzkyMzUwMTAyOTMwMDkwMWJhNTU0NTk5ZTVlMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudkkWumngSX40bhFYAs2YkGxs67C
4+MHg9gSxUgaixnFCm0YjSq5K4AZ7iBwOV/QsSLC4vwTxo4wX3CsJoOcPt7HfTA3
6k3N9xz1CYPEAdZKo3vuEnKzxw0jzX7Ajqyf4gZaiFGNKdHPjnly4zYfM+4+vfLt
usur7VhAn60mnChAuAatblDDKaIFqDczkBdOa3rpdub2d45VpGahHlAvvMOzuooD
cGLQ5UAtJ4uR/am1+vPblPwD0jokre94tbzuLBPqfD1Wb3oJZMRppg/YOz1XoK5z
9gLwvpPAEF43UsNfpz6ACnretPtVPia+74g/7toK9aqxegBlUliBLQQjhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0g2owCeSNQECkwCQG6VUWZ5eHjMB8GA1UdIwQY
MBaAFEdlf5py8yoU4EJqKBSL+vw2OiuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJWX21uTHpLaFRnUW1vb0ZJdjZfRFk2SzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xMGI1M2EtMjk3OS00MTA2LWE4ZTEt
ZGZjNWUzMmYxYjdlLzEvUjJWX21uTHpLaFRnUW1vb0ZJdjZfRFk2SzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xMGI1M2EtMjk3OS00MTA2LWE4ZTEtZGZjNWUzMmYxYjdl
LzEvUjJWX21uTHpLaFRnUW1vb0ZJdjZfRFk2SzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu/XdOcv
Q4SEvzQEf1TmEmueXDVO6wSslIZjIveLY4b/va4iPuxu+dpJnj7JPWViGMEdJkG3
mv4D09rKg8YHdiG9SltrXxMw3ENt888oJUbpafWZHR9oOfu9mAJDJNzndc3rkti5
6GFxLqcQ3LNimVQsMMCg9SbahDRciMGAz/L7Pra0+VmyZtnWLoqZGfSqHm4v3Kim
MRUcBgI95r0IBIl2kjcW2EeIGHGFNJgXSnQSUYnFAo64QKMLAy59gh9skDeeoFeg
FLvgO7r/QJ45M0qBe/V93WleMIvie1fAiCwxn4qfhl4GKrID3hHLcUtd6ER/Nnt+
HaN9oyB5TOIOSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:05 2026 by rpki-client