Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: 4OzpBxXvgF6psYyKLdRibrGp4mwXEAh+EpWU7/HQH74=
Subject key identifier: C5:C1:71:1C:37:38:49:57:7D:7C:C8:E5:DA:99:3E:4E:A4:C1:2A:9A
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019D382E62B29644B1CC38211CA717CCC57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 12D8
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: amxoIvFW2Jp2GAwEUuCK/J/ezqodW5z1g4HRGli8+74=)
2: qGBCQCZlL1yzOajHzIypwWxNeWA.roa (hash: p7Sjt3xmkXcVS2g8oPh7NRV5OpfFVXtU6JCEbaI2Bsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:62:b2:96:44:b1:cc:38:21:1c:a7:17:cc:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=c5c1711c373849577d7cc8e5da993e4ea4c12a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:cd:b1:2d:18:e8:b1:b4:2b:45:be:5c:9a:
8c:37:65:74:52:a4:08:06:e7:c0:c3:d3:0e:7d:b3:
6e:7c:6f:5d:40:d0:fa:f9:96:61:ef:20:f4:c1:c4:
15:f2:b3:96:ed:1c:13:2d:2a:83:b5:b8:1a:cd:b6:
85:f7:f1:fa:9b:6f:af:4a:bc:eb:91:4e:f8:76:ec:
d0:40:46:55:50:ea:48:cb:2e:59:0f:3f:28:ee:00:
13:9b:ff:e5:1b:01:3c:02:b3:92:72:4e:91:fc:0c:
ef:8b:7a:82:3a:8b:e8:04:d5:5a:c2:8b:d7:b1:4d:
1e:d9:fb:65:e0:1f:15:78:8c:26:e8:79:88:59:85:
ef:a0:92:c7:bb:99:2d:85:a9:90:85:8f:2c:35:8d:
a9:46:20:f5:0c:26:15:8f:88:98:8b:9d:98:02:13:
a5:b1:2e:9d:f2:dd:0a:dc:78:be:e2:f4:b6:ca:34:
6e:47:15:88:9b:de:69:d7:a6:3c:7b:5a:81:d3:3d:
96:38:bc:b7:1b:ef:33:6f:c1:2c:4a:09:ba:df:6f:
59:7c:cc:45:0a:ba:18:b1:58:d0:08:c5:7e:37:fe:
23:0d:99:3e:53:bf:85:19:5c:92:ca:68:85:35:bd:
23:01:12:39:74:2e:3b:cf:7b:1e:95:ea:73:6d:b2:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:71:1C:37:38:49:57:7D:7C:C8:E5:DA:99:3E:4E:A4:C1:2A:9A
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:fd:cf:9a:f3:a8:bb:e3:32:85:55:21:f0:d3:bc:f7:cd:
d3:cf:2b:1e:d1:56:39:d7:9a:ea:4f:39:7b:35:36:93:a2:e0:
03:74:5f:c4:6a:2f:7c:7e:f0:00:ad:0f:fb:8d:9f:bb:ad:c4:
07:3a:e9:6e:c6:25:5c:cc:01:28:bf:3e:6a:43:de:25:87:8b:
1e:42:7e:e3:14:50:2c:d0:59:96:f7:f1:64:35:c7:37:83:32:
54:f8:5e:ab:ea:e8:20:61:4e:76:53:a3:c9:ce:38:d7:8c:8f:
b2:33:44:4b:85:d7:df:e5:ab:9f:0d:69:80:76:ce:2f:f3:7b:
e9:ab:74:80:7f:b6:41:a7:a9:ec:7d:74:61:e5:3d:bf:68:c7:
74:6a:13:fb:bc:7f:96:40:11:b4:2e:b5:ff:e8:29:71:32:a6:
c3:4b:ea:50:b4:c4:c8:73:ef:aa:57:c4:ca:11:39:08:08:11:
94:4b:cd:4d:9f:a2:b2:9a:2b:e9:1c:4e:bb:26:2b:ab:e1:6a:
31:d8:fb:3d:1c:6f:9d:d8:57:97:79:e0:9b:a4:64:6e:bb:22:
b3:56:da:78:1d:ec:3f:fc:ac:95:ff:09:fa:50:02:a5:5d:05:
1e:27:52:23:a9:8e:05:8a:f9:04:36:70:03:86:f3:b6:ab:44:
c3:c6:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:41 2026 by rpki-client