
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: jB40kPWhMWwEOaP25DCaJ95Gb63O4cbtwe9RfZ6GDJ8=
Subject key identifier: 04:D6:F4:A4:7B:F3:00:52:00:45:DE:5F:F0:F0:CC:43:36:24:94:F9
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01A0250D6CF534C4E97F64AEFCB4ECD36C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1A1B
Signing time: Fri 21 Aug 2026 16:00:31 +0000
Manifest this update: Fri 21 Aug 2026 16:00:31 +0000
Manifest next update: Sat 22 Aug 2026 16:00:31 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: Y0qU0goEF3aJJzVhvwDwoK2QjtKQScwPtpJObki6Hvk=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:0d:6c:f5:34:c4:e9:7f:64:ae:fc:b4:ec:d3:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Aug 21 16:00:31 2026 GMT
Not After : Aug 22 16:00:31 2026 GMT
Subject: CN=04d6f4a47bf300520045de5ff0f0cc43362494f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:c6:e5:42:22:6d:42:8f:5f:a4:dc:14:0a:
3a:a1:6a:9b:04:9b:80:f5:32:d1:d1:38:ee:b6:30:
93:2c:bd:5a:bb:a0:d9:7e:6e:63:f5:ec:5b:9a:bf:
07:df:59:86:5f:0a:82:e0:39:b0:6d:13:e4:b0:4a:
81:91:53:fd:1d:db:3f:dc:61:b5:8a:b7:3e:8d:f8:
68:08:4f:a5:53:30:98:b5:29:19:8a:12:f2:bd:71:
58:60:90:3e:a6:c7:60:d6:e5:6b:79:66:4e:e8:65:
b9:2a:9e:f8:a4:7c:84:ce:60:55:1b:11:5e:4c:e2:
17:b4:40:8a:17:8f:98:02:01:09:fa:7b:5d:63:da:
83:39:6e:58:de:e6:98:3e:70:1a:b6:aa:42:e2:25:
21:4a:92:6d:3c:bb:06:33:c9:df:d0:f2:34:7a:71:
c5:ec:f3:f2:96:e9:27:2b:4d:22:5d:74:15:6f:cd:
bc:3c:5f:44:db:a9:1f:e9:bf:49:de:b8:31:40:d1:
3f:96:6f:45:08:97:69:d4:3c:d3:fd:9c:50:fc:11:
25:7f:c4:26:4b:7a:96:94:0a:38:a9:4b:eb:2f:25:
7b:88:b0:6e:b7:9f:d5:49:4e:d5:c2:85:1f:40:77:
1c:08:57:54:09:71:98:75:62:4c:18:57:24:64:2f:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:F4:A4:7B:F3:00:52:00:45:DE:5F:F0:F0:CC:43:36:24:94:F9
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:76:be:5b:f8:35:04:4a:89:11:45:45:18:ef:05:23:1e:fb:
fa:d0:82:d5:a2:c2:15:5e:d5:e1:5a:3e:4e:14:08:33:83:57:
1e:39:d2:8d:e9:66:29:22:a2:a6:be:dd:3f:bd:2f:91:6d:3b:
6a:45:55:19:3b:18:71:2b:eb:95:a4:37:91:5b:d5:b1:73:eb:
ab:3d:71:77:92:3b:6c:35:39:f0:45:0b:0e:bf:7d:b6:93:7e:
75:58:ba:f4:83:2e:d5:f6:2e:67:4f:29:c1:ab:58:06:a1:76:
7c:83:c5:5a:ac:7a:ca:e7:1e:78:61:12:be:99:f0:2b:04:99:
c4:93:f2:d1:ac:8e:f3:96:bf:78:ec:a9:9a:29:cd:07:f2:35:
9a:6f:92:d9:21:18:59:0f:b3:35:ca:57:f1:5e:68:39:ce:8f:
47:7a:ec:8f:58:e8:5b:ad:c3:6a:19:46:32:66:61:06:d4:88:
94:6d:e1:a7:0a:a4:45:14:59:32:f7:2d:9d:52:81:7d:47:8c:
d1:02:47:3b:1f:e8:ae:0f:42:da:09:db:82:c4:3e:da:3c:36:
24:74:12:5a:2a:3c:aa:be:d3:92:a1:c9:e6:f7:be:89:b8:de:
22:e9:f2:3c:4a:31:a5:e1:d8:e9:02:fd:c9:da:c4:20:14:58:
f6:56:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:07 2026 by rpki-client