Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: pClrc7rsTylO4NSgyj/+c7LqAAbSsXD3RentQi/mPt4=
Subject key identifier: 9F:83:1D:47:D2:A4:14:B1:37:E1:1B:FD:68:A3:DE:2F:CD:C2:8B:85
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019D37530FE26A76EFD7AA5FF5E94432D268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0AC3
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (hash: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: fikOrmlL0ovc+ZP14s4ne4sViUvY6BphtPOAP4ganZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0f:e2:6a:76:ef:d7:aa:5f:f5:e9:44:32:d2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=9f831d47d2a414b137e11bfd68a3de2fcdc28b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:87:a9:b2:a7:e5:7c:b9:16:16:97:66:44:
22:bf:e1:c7:10:66:5c:ae:fe:32:51:66:da:ad:7b:
c3:f1:0e:40:19:c0:28:71:49:6d:69:66:af:23:31:
af:12:44:3e:31:8f:21:9f:d9:12:e2:95:76:21:e5:
3f:55:d1:a4:e2:c6:5a:fd:d5:94:25:0a:c6:03:4c:
7e:a1:c8:23:21:69:b6:c9:f9:74:74:ed:65:9c:28:
23:3f:db:a7:64:e9:cc:69:1b:a5:ab:56:84:83:53:
09:a3:e0:57:e7:4b:37:a3:16:12:a0:91:63:f8:06:
49:49:9a:8d:c6:cf:52:d4:2c:63:00:23:5d:2b:a7:
d8:2d:e2:d9:65:ea:73:79:66:46:51:5f:f9:6c:08:
de:c6:e0:a5:08:9e:ff:2b:c0:73:38:14:ff:62:3b:
83:8a:7d:94:ff:b9:ad:06:c4:f2:dd:3d:63:45:56:
62:53:e1:84:54:8d:03:a2:f6:59:bc:8c:62:a1:f8:
37:c2:9d:42:c3:f7:9a:c3:bd:91:86:03:08:f6:b6:
8c:1c:99:ee:1f:4b:65:a3:0f:03:ea:21:d5:96:39:
8a:56:5a:49:63:c9:ca:e4:93:d1:3d:5e:1b:65:58:
71:f5:5a:c4:f8:37:66:6d:11:76:17:f1:61:8d:21:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:1D:47:D2:A4:14:B1:37:E1:1B:FD:68:A3:DE:2F:CD:C2:8B:85
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:d9:e8:2e:58:ae:cf:5f:09:be:58:d7:f2:69:f7:88:bb:
75:0f:58:4b:2f:f9:fc:41:20:aa:58:f4:be:2e:2b:a6:9c:bc:
1a:c0:2f:27:59:e7:1b:02:13:17:99:6c:3f:57:f6:91:ee:21:
38:13:cf:0d:c7:67:b4:7f:91:5c:5a:a1:1e:f4:73:ff:50:2d:
28:bc:ac:2b:7e:01:eb:85:f7:b0:be:9f:f4:a0:56:f5:bd:d1:
a2:f2:87:5b:cd:66:98:c9:a2:a7:61:7e:45:e0:b4:d7:e3:bf:
e0:84:c3:c7:fb:6f:84:66:e9:75:43:d8:fc:9b:38:ad:52:78:
55:25:e2:ba:ea:9f:c8:3b:0d:1a:c9:c4:b9:30:66:4a:fd:ea:
98:b4:83:dc:de:3a:d9:9b:15:33:d1:19:e8:c0:9c:8f:5d:78:
6c:8f:a9:6b:1c:75:a3:93:f6:cb:26:37:90:22:1b:a3:2d:44:
58:bc:76:cb:47:15:18:00:70:c9:07:d4:33:f8:2a:2d:38:25:
49:ef:6a:a8:94:cd:1c:bd:df:0d:d5:a6:ab:f0:6b:07:90:7b:
e8:8f:32:da:5a:88:f0:11:ca:1f:ca:d9:41:96:f3:41:79:71:
f5:f4:e7:55:0c:a0:d8:aa:07:22:86:bd:1b:05:8f:74:8c:30:
93:45:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:57 2026 by rpki-client