Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: LwBGZ6i/q08L1EvK+fBo/B32i0Me/IHgdRmR7HC8G7Y=
Subject key identifier: 02:30:8C:D1:22:E1:FA:DF:54:19:5B:9E:A3:59:01:37:E9:E3:8B:C0
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 019D3940F01BB4905F967561FBFEB554C00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 032E
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: 3faqLvWKyRbHeIrogN3_fV0BvCI.roa (hash: UQfJ7cK1wnMDVZHxIQBIYMz3jz7zOHrQbZVbdTLcoWw=)
2: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: mqkr0EcKlENZ8RDws9r9H21i2+scWxYML8MJZSqzHpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f0:1b:b4:90:5f:96:75:61:fb:fe:b5:54:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=02308cd122e1fadf54195b9ea3590137e9e38bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:5b:65:11:3b:47:20:f3:14:55:82:be:c5:
f7:dd:f9:1d:a5:d9:59:a1:0d:9d:bb:45:aa:e3:74:
3d:c1:fb:15:89:0d:33:56:e6:23:c5:d9:ec:2a:42:
8e:2c:4a:8b:c3:10:9f:e6:82:96:2c:86:97:04:1d:
7f:d6:41:b9:87:80:ba:81:b9:97:31:7e:3a:ad:f6:
dc:c5:5f:ff:e9:03:5f:8e:26:aa:90:8a:d4:db:f4:
44:25:40:22:7d:04:cb:f8:ab:80:a0:79:f2:02:50:
7d:9f:a7:ac:fa:50:47:bf:57:49:83:ba:57:c0:7e:
03:43:96:11:a0:ed:a2:ed:c4:e3:c0:3e:45:70:6d:
c2:78:7a:b0:f9:a7:20:be:8e:51:dd:76:9e:8f:3f:
b2:85:ea:2e:1f:69:af:54:0f:82:67:a6:da:a5:6e:
0f:29:85:0d:e6:0c:d7:d4:c8:87:53:fa:9e:13:c1:
ab:e6:be:ff:41:bd:36:a1:6f:62:65:ba:e8:6c:74:
95:a0:fd:0c:29:01:41:79:36:63:74:71:85:14:7a:
10:b9:03:f3:29:c9:62:9b:2c:96:f1:54:9f:68:fe:
ba:74:7e:64:6b:be:b9:27:dd:64:20:cc:f6:12:9f:
19:89:06:50:28:85:28:27:6a:0c:81:e8:6c:c8:82:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:8C:D1:22:E1:FA:DF:54:19:5B:9E:A3:59:01:37:E9:E3:8B:C0
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:dc:ed:f3:0c:f2:f5:e0:58:16:ce:bd:88:db:a6:8b:bf:
43:65:7a:36:29:03:b7:9c:08:3d:53:6d:3c:a1:dd:b7:7e:55:
24:77:0f:f4:cf:5d:7f:26:7c:58:91:ca:8c:c4:1d:e0:39:7c:
4d:e5:5f:38:03:c3:e2:6e:4e:d4:ce:61:fa:ec:2c:21:3f:9e:
14:1b:d2:b2:2c:64:78:59:d5:75:62:10:35:09:dc:2d:10:5d:
b0:41:8a:e2:cc:46:67:79:e6:74:78:ea:d3:9c:20:0a:6f:c7:
58:57:fb:70:f3:96:c1:1f:9f:57:40:1c:d2:b7:b0:5e:c1:ac:
08:24:91:d3:52:6a:96:0a:4b:d1:a5:a8:88:0e:c1:db:aa:f2:
f6:a3:03:f2:33:df:80:8a:70:5c:7a:4c:c1:ef:06:ac:97:d6:
ae:19:7d:42:38:bf:b7:6f:1a:f2:2f:ed:1e:39:11:47:30:0a:
c3:92:3f:62:c6:d0:54:bb:f8:6b:66:b6:f4:be:95:b8:92:2c:
d1:1d:b1:fe:5d:07:dc:ce:2b:b2:21:dc:0d:58:0f:35:d5:22:
cb:58:3a:64:9f:ba:0d:cd:32:a7:b8:0c:eb:90:2f:92:62:18:
a5:78:28:4e:a5:2b:89:ab:2f:0d:6b:e1:77:19:63:84:4f:34:
4e:83:af:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:20 2026 by rpki-client