Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: GM0ETbPBI8RRNYPY9f+E++Cke2QzRs/ji6+wxdktE0A=
Subject key identifier: 4C:78:A0:0F:7A:5D:0D:23:82:FE:A0:82:EA:F9:9C:EA:BF:53:9E:90
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019FA372FF1A40AA3F1DFA7A8B01B26CD127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 11AB
Signing time: Mon 27 Jul 2026 12:00:50 +0000
Manifest this update: Mon 27 Jul 2026 12:00:50 +0000
Manifest next update: Tue 28 Jul 2026 12:00:50 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: t3VJRWfq+HxVsdHRwyJNWTF+MwisKGBTK0Kn7vQv1+0=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:ff:1a:40:aa:3f:1d:fa:7a:8b:01:b2:6c:d1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Jul 27 12:00:50 2026 GMT
Not After : Jul 28 12:00:50 2026 GMT
Subject: CN=4c78a00f7a5d0d2382fea082eaf99ceabf539e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:70:c0:3a:f1:69:c1:b6:dc:70:9b:1a:c4:
b0:a6:91:41:c5:b9:cd:4e:91:33:20:a4:64:a3:2c:
00:12:64:5f:49:c3:f5:29:37:d4:75:c3:c2:e3:9f:
ad:35:ec:d5:01:94:7c:3b:be:8b:29:99:22:52:93:
d5:53:c3:67:0b:eb:fa:fb:d5:b2:48:99:2c:48:75:
81:fe:ed:1c:97:96:d4:b1:a1:37:9b:32:33:aa:4b:
4d:48:ff:12:ec:eb:a5:98:6b:08:7e:fb:1d:a6:68:
e8:c8:05:b9:d8:a0:d1:cc:9a:e2:23:50:9a:33:68:
9e:48:90:1d:25:cb:6d:e9:de:4d:1a:d7:89:99:02:
53:a7:f5:bd:bb:8d:86:22:89:05:63:72:7c:93:d1:
f5:86:79:da:7d:f3:a4:fd:62:e0:d2:97:0f:b6:e0:
2e:34:17:b6:f3:c4:60:d5:95:59:01:eb:a6:d4:a3:
e5:9b:6f:11:02:74:b1:c3:ed:6f:a9:d3:3f:ae:79:
45:3f:24:b2:0e:bf:e0:45:d8:dc:dc:fb:dc:b4:f3:
9b:cb:73:b0:47:25:91:86:71:6d:64:9a:1b:02:cb:
f7:99:ea:b2:0d:71:67:5f:22:11:3e:a5:9b:a9:0b:
0d:30:28:83:67:9c:da:07:ca:22:e6:9d:64:32:a9:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:A0:0F:7A:5D:0D:23:82:FE:A0:82:EA:F9:9C:EA:BF:53:9E:90
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:ac:0e:16:03:47:d2:04:e4:31:44:67:32:31:dc:a9:c9:
c8:52:d7:1c:e8:ee:31:2f:f9:4f:92:b5:02:e9:28:24:81:c2:
6d:3f:62:3f:d9:83:6b:eb:cb:66:5f:18:c1:bd:a0:67:3c:2b:
a8:32:24:c5:70:a7:3b:6d:78:59:f6:06:15:80:a3:50:70:3a:
0d:f5:91:98:c4:83:04:7e:75:cc:8f:00:97:70:83:5d:42:0c:
7b:c5:94:95:9f:be:af:c5:76:c5:94:5f:dd:03:73:03:2a:d3:
cd:6a:df:d4:20:d4:f0:27:db:c4:ec:04:49:41:9e:ff:78:7e:
1c:b3:87:64:74:69:f8:17:c2:01:92:35:3a:e1:0b:73:52:dd:
b4:cc:ad:b9:ca:2f:31:1e:b7:97:29:57:4a:c9:f7:36:85:74:
a7:79:a6:62:03:0f:c7:99:67:c0:b6:83:27:5a:ff:a2:67:33:
ee:27:a5:ff:61:d5:cd:f1:22:c1:90:54:f3:be:4a:7c:60:9e:
4b:45:3f:7f:46:16:51:e6:f8:5b:79:7b:eb:8a:ba:7e:06:8a:
ef:a1:9c:1f:fc:43:6e:61:8a:aa:6f:cb:0d:2b:0a:a3:f5:3b:
a9:60:e5:c0:db:89:d1:b9:69:01:2c:d3:0e:02:fa:ef:c3:c2:
33:50:61:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:21 2026 by rpki-client