Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: h5rMk42L6S6DZlD6k1qmWzaqJfh2dUQvnMIn1FGH8Fs=
Subject key identifier: 25:3C:E5:38:C1:BF:89:13:5C:03:22:CE:DD:45:A4:AF:EC:A8:6A:26
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 01A08D1FB73C1941EAF35E9D292F57FB4890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 1224
Signing time: Thu 10 Sep 2026 21:01:01 +0000
Manifest this update: Thu 10 Sep 2026 21:01:01 +0000
Manifest next update: Fri 11 Sep 2026 21:01:01 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: rUigPaJWyAx4SSoPIOyNotiHO6gWLtWxzEPFIKmxs2Q=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:b7:3c:19:41:ea:f3:5e:9d:29:2f:57:fb:48:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Sep 10 21:01:01 2026 GMT
Not After : Sep 11 21:01:01 2026 GMT
Subject: CN=253ce538c1bf89135c0322cedd45a4afeca86a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:ef:72:b1:97:25:86:b6:88:aa:8e:f3:14:
d3:68:3f:a0:f0:a8:14:37:d6:19:53:38:e7:27:68:
98:d2:1b:d3:28:3e:98:59:34:1f:d1:81:1e:f1:e4:
34:a0:1d:59:ee:65:60:3a:71:43:61:15:0f:66:08:
9b:c1:e5:f3:ed:5b:18:9a:bc:f0:3e:4a:3a:f7:b6:
e8:7b:81:7f:42:7f:27:02:80:39:97:3d:eb:9f:fa:
60:3c:76:f4:ad:cb:2c:57:1f:5a:5e:30:3c:0f:f6:
2c:40:46:ea:27:81:66:90:41:d9:d5:ee:c7:90:ff:
d2:78:17:57:c2:87:7d:c8:40:ce:9c:38:d8:2a:37:
52:b1:ff:52:8a:f7:70:4c:fb:9e:2b:23:1a:07:3d:
59:c0:13:66:5f:51:c0:34:ad:40:b6:4b:11:58:1d:
ce:7f:e6:fa:1a:df:0e:42:47:7a:2b:90:ba:f6:a0:
29:fd:cc:42:eb:95:30:a0:96:ab:99:1e:95:dd:32:
cf:85:a3:c1:74:51:20:b0:2a:99:76:ae:4b:43:25:
f4:d4:06:7d:a1:4d:58:92:0d:a0:ad:e2:bf:04:d6:
8c:01:61:c3:de:49:46:3a:08:4f:3a:b2:a2:0a:ac:
91:46:4b:38:70:45:c7:ae:10:16:ea:13:e9:31:23:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:E5:38:C1:BF:89:13:5C:03:22:CE:DD:45:A4:AF:EC:A8:6A:26
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:f1:03:f4:a7:a4:72:98:5e:7b:b2:74:73:1a:b1:55:56:
94:5a:77:42:fb:93:8d:87:e4:97:b1:90:40:be:30:5c:f4:8a:
7a:01:dd:0c:74:88:06:d9:86:cd:3c:58:26:c4:9d:97:bc:9f:
3b:52:3c:83:ea:02:d6:5d:9f:17:ff:15:a3:ef:c3:9c:46:17:
2c:f4:53:93:c6:95:0f:1e:b8:1d:07:4a:8b:10:0d:71:a0:83:
ce:e7:52:e7:14:05:e8:40:fc:84:8d:99:27:1e:f5:b0:67:31:
b2:85:a3:71:68:85:b9:cd:dd:50:5b:43:b6:37:93:67:64:63:
78:08:1f:65:7f:d9:69:c4:12:2d:5b:cb:40:a3:c9:f4:c8:6c:
fa:ca:be:75:9e:30:56:ca:3b:9b:14:70:2b:91:66:02:0a:35:
3f:3b:44:0e:53:e8:5d:c5:ab:fa:63:51:7c:4a:4d:98:77:1e:
93:9d:16:c0:fe:bd:40:33:b4:ac:c9:06:c1:f9:2b:d6:e3:98:
f1:0c:fd:51:0e:af:20:3e:62:fa:04:49:7e:94:14:34:54:4b:
c0:9e:a2:20:9c:a5:ca:8b:96:be:75:fa:06:2f:71:d7:6e:83:
9d:f1:e6:1f:ba:f2:45:2a:c0:bf:43:ae:5c:61:73:d9:4b:dc:
99:99:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:03 2026 by rpki-client