Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: GvLrLaO52q4TK4WrqTvWpBGtogNEhtatNx7S/xoDBHc=
Subject key identifier: 2C:F0:D2:F8:F8:A9:F5:40:A8:C7:94:33:63:C6:25:02:FB:55:B6:F5
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019D3789978881094723264FE0BDF1D2A789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 106A
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: JyEK9DmOMMDq775bo4Kyc8aqkSXQEK6A//igXjg2EdE=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:97:88:81:09:47:23:26:4f:e0:bd:f1:d2:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=2cf0d2f8f8a9f540a8c7943363c62502fb55b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:84:3c:58:34:42:0f:76:77:28:26:0a:d9:
66:58:a7:aa:87:b1:44:a5:1f:26:a9:3b:5d:0e:27:
9a:34:2a:d6:2a:f1:de:d1:17:a0:59:e8:5d:c5:49:
1c:da:96:09:54:0f:3e:50:27:5c:e2:ab:06:1c:c8:
e6:d4:53:2b:d8:28:5f:03:0a:ce:7e:ee:ad:57:75:
70:fc:a2:b8:b3:89:81:26:b4:c9:c6:f5:3e:01:e1:
7a:aa:ea:70:1f:fa:1b:35:6a:41:75:de:ec:c0:fa:
ba:66:d7:0f:3e:2e:22:60:57:a9:86:05:43:cd:8f:
47:4f:16:72:eb:43:70:2a:f2:c9:6d:5b:ae:f5:97:
c0:33:67:39:87:ec:9a:60:86:c1:31:a8:77:56:15:
81:b8:de:8f:0b:d2:b6:05:bc:90:55:6b:ca:aa:dc:
a6:9d:ad:19:2b:18:d7:9c:9f:82:7a:82:4a:13:0c:
13:78:ac:f9:8e:f1:ca:cf:7b:92:d0:32:04:53:fc:
9f:8d:bc:34:63:c3:9b:b9:f7:87:a1:b9:71:c1:fe:
fd:58:56:a7:6e:56:f4:ad:2b:2e:11:0c:6a:04:6d:
3c:d2:19:a2:56:9e:80:7e:f7:13:63:60:46:7f:0d:
ec:f4:f5:b7:c4:ef:c0:ce:74:fd:5f:08:d9:77:ca:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:D2:F8:F8:A9:F5:40:A8:C7:94:33:63:C6:25:02:FB:55:B6:F5
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1a:cb:ee:6e:9a:f7:ed:96:bc:03:d0:eb:9d:35:5e:c1:9d:
a3:12:77:ed:4d:0d:fc:c3:6e:37:86:d0:ff:53:93:5a:ac:3d:
dc:5b:38:f8:6c:13:62:c0:4b:8e:e3:0a:e5:f3:45:73:f5:1f:
68:73:64:bb:47:00:bc:ff:d9:0e:e3:8f:be:f9:a0:df:f7:d7:
ed:29:b0:ec:22:ed:d6:d1:0a:ba:5c:c1:ce:e7:20:b0:40:85:
2a:77:69:0e:91:2a:10:a5:54:81:83:8a:50:54:a4:9e:c9:5f:
6f:9f:17:32:a4:b3:ca:16:4a:29:92:73:e8:6e:28:4f:d0:7f:
63:51:da:41:d8:28:19:6c:5c:fd:51:c6:2d:59:77:30:5d:9b:
c9:06:02:3f:55:65:4a:61:c6:d3:85:f6:9d:55:23:37:31:86:
39:5e:38:f2:5b:fe:da:46:02:37:30:00:49:60:85:1a:84:cd:
8e:0e:e4:aa:96:11:8c:93:61:8d:df:64:e3:48:95:33:9e:dd:
53:b8:15:04:00:60:eb:9f:25:fd:fd:33:5b:c1:05:74:fb:17:
11:bb:7d:3b:0d:42:ee:ce:64:e5:6f:ab:4c:28:49:aa:a2:7e:
3e:44:44:12:74:b8:83:18:1f:ae:59:52:7e:8b:fe:81:ee:45:
3b:6d:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client