Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File: R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier: XhDp2pQcFxHPgxshPcB0SfO8SZtqFXYIGmclPhm67Qg=
Subject key identifier: D3:81:32:E4:52:5E:FD:FA:2F:CF:BF:B2:EA:7D:16:D0:91:64:68:C5
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer: /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial: 019D39098A2893426D9EC526192D3A70C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number: 1586
Signing time: Sun 29 Mar 2026 10:00:19 +0000
Manifest this update: Sun 29 Mar 2026 10:00:19 +0000
Manifest next update: Mon 30 Mar 2026 10:00:19 +0000
Files and hashes: 1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: /mcfPApFQVNH+0BptppqvvvfMm+1RC3LUSuotvtEoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8a:28:93:42:6d:9e:c5:26:19:2d:3a:70:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Validity
Not Before: Mar 29 10:00:19 2026 GMT
Not After : Mar 30 10:00:19 2026 GMT
Subject: CN=d38132e4525efdfa2fcfbfb2ea7d16d0916468c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:51:83:d6:4c:f2:39:11:a7:6a:7c:39:e8:
0f:83:ca:eb:4f:60:cf:f1:16:92:86:cf:69:2d:72:
39:6b:22:00:04:61:a6:cc:3c:d8:8c:26:85:3d:ed:
bd:02:31:8e:a0:64:1d:db:af:d9:9b:70:77:94:77:
8f:d8:ea:f8:6e:66:95:d8:05:60:da:90:2c:d2:f2:
82:65:39:a6:62:06:e0:fb:24:76:fd:ba:a9:c0:96:
ce:0c:a6:49:25:c2:fa:23:b9:e9:e2:ff:f7:60:39:
b0:e0:e9:b7:4f:6b:e5:66:97:65:4c:a1:eb:0e:c9:
66:f1:03:95:c0:06:8f:28:58:5c:22:9f:f6:fe:87:
f0:fd:ee:4b:bb:d0:2f:bb:68:14:6f:90:e1:24:b6:
71:ca:9a:c3:5d:d2:54:b9:5f:8c:79:89:63:64:a0:
53:54:28:4e:16:bc:bf:f3:dc:2f:c5:3d:17:1f:76:
f1:b4:e1:60:dd:07:96:7a:3e:a9:75:89:59:06:a7:
08:f9:e9:29:17:ee:c1:72:08:1d:3d:d3:a2:c5:b1:
27:b0:b6:83:13:fc:99:b8:3f:83:5d:de:7d:1f:0b:
1d:fb:40:c9:b7:b9:d0:5e:40:c1:3b:d0:20:48:02:
4c:62:ce:54:18:30:0d:30:d9:0b:40:30:24:cf:6d:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:32:E4:52:5E:FD:FA:2F:CF:BF:B2:EA:7D:16:D0:91:64:68:C5
X509v3 Authority Key Identifier:
keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:c2:63:59:0c:9c:f4:c0:64:50:73:07:e4:f4:82:a8:b7:
9f:a9:db:71:e1:ef:05:be:36:da:66:88:b7:c1:bd:ae:49:31:
c5:6c:c2:8e:fa:9f:ee:52:a3:c9:f9:88:b2:18:d7:37:32:2d:
7e:44:ae:16:2f:15:21:95:90:c1:e6:3b:3d:04:50:95:6e:7a:
97:cb:3d:dd:f5:95:7a:e1:02:c3:cb:8b:cf:29:ad:10:eb:9a:
ee:fa:20:b4:23:a7:99:8a:66:fa:15:34:8a:ea:44:a6:78:b4:
98:82:5a:13:17:6e:35:66:6c:56:d2:5f:4c:bc:c8:0d:3d:a6:
9d:32:e7:64:d6:4c:71:41:47:a1:a7:ea:0a:be:ff:c7:19:92:
53:0a:14:f1:e5:c7:e1:c1:46:c5:6e:13:be:f4:c4:49:4b:1d:
18:46:68:40:f3:ff:9c:bf:ba:67:fd:46:db:32:7a:64:4e:92:
68:b5:d1:8a:7d:06:8e:0d:f0:cd:42:8e:17:25:c2:e6:0d:cc:
37:92:ff:f6:a3:ff:39:c2:ab:9c:00:29:85:23:79:bc:24:dd:
a0:72:8c:34:6f:7f:9e:11:c6:50:41:27:01:47:c3:09:69:4b:
ca:27:2a:5f:52:99:91:08:5a:1e:a6:5c:f1:64:84:b7:97:67:
78:53:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:51 2026 by rpki-client