
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: VqIdpCSN2hs3notBgvs4Iiu3V1zLCezUhl8jTXWzVAQ=
Subject key identifier: 5A:87:FA:B6:10:EB:72:FE:4A:EB:5A:52:FE:E9:D9:C1:A7:2D:51:25
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 019CAC7E16AE9C49C5F426B29D90C7AC2E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 0502
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: nU2jf9n0WMzpZmOM/qtIW79IxQ4pvs9l0S07WFDHqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:16:ae:9c:49:c5:f4:26:b2:9d:90:c7:ac:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=5a87fab610eb72fe4aeb5a52fee9d9c1a72d5125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:aa:7d:b8:8f:16:65:b6:20:a1:79:41:77:
ff:0f:71:63:f2:ee:dd:91:45:86:70:7e:38:09:29:
ae:c5:bf:d5:07:82:6c:8f:c5:15:e9:28:f9:dc:44:
14:1c:e6:75:ca:d3:eb:25:b4:91:39:de:90:9c:44:
fc:e5:0b:e3:4f:5e:cc:d2:b9:e1:bb:9e:e9:bf:4f:
13:5b:ed:75:1d:b5:c6:f6:98:51:80:34:e2:94:d9:
e6:02:ad:a5:84:4d:53:7b:1f:e4:2f:ea:f5:92:11:
dc:20:bf:e4:36:d8:40:9a:27:b7:96:24:11:f4:4a:
13:2e:83:39:c7:7f:4d:7e:92:f3:34:2f:73:09:8f:
85:5f:58:f5:b2:1b:3c:fa:e0:d8:8b:01:09:ff:eb:
9d:84:10:a6:38:f0:f8:68:b2:20:03:37:1b:fd:1a:
5f:56:35:96:6f:e1:c2:1d:33:69:46:d6:6a:51:f1:
1b:65:9b:92:d1:7f:7e:df:37:39:c0:3c:dc:6a:0f:
ea:be:32:fb:96:3c:09:76:48:52:a5:ff:6b:b7:14:
ca:60:ec:49:96:9d:dd:92:e1:97:71:45:cf:f9:83:
6f:a0:83:f7:c5:aa:93:96:56:e4:db:5e:c2:67:74:
ce:53:22:33:f8:79:c7:91:79:6f:0b:68:b8:7b:e9:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:FA:B6:10:EB:72:FE:4A:EB:5A:52:FE:E9:D9:C1:A7:2D:51:25
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4c:ec:c3:0b:27:d8:66:cd:8e:fe:6b:88:42:3f:a3:56:bf:
a9:d2:1e:40:80:f9:dc:59:1f:97:73:6c:ff:3b:84:4b:85:3e:
96:32:06:27:02:f3:e3:47:1c:7c:ee:b3:c2:33:f8:0a:70:cc:
34:d8:54:c5:87:d6:62:d7:c4:d0:9b:93:4e:de:eb:a4:d1:2e:
90:f5:7c:f0:71:1e:0c:99:fe:3e:50:18:42:93:22:4c:c6:82:
66:a7:80:e3:17:9b:7d:19:71:6c:66:ff:ba:4e:22:9f:87:a4:
9a:6d:7a:88:3a:16:90:b8:7a:30:fe:0d:10:3d:56:ce:2b:40:
61:07:60:10:64:95:e8:28:91:a2:61:8f:98:30:fe:88:03:a1:
66:80:c5:12:aa:da:21:92:03:c8:fb:78:ac:bf:b9:7f:f2:49:
09:3a:b8:55:ba:74:c7:26:b0:43:56:5c:7e:bd:4d:9a:a4:6f:
88:2f:a5:10:e8:4e:d2:31:92:54:17:53:88:8c:e0:10:0b:3c:
6f:9d:d4:82:68:18:7b:30:0f:b9:fd:7d:d8:d6:ef:6f:5e:d1:
5b:82:51:83:05:a9:15:01:dc:00:52:07:d8:70:c8:98:a8:51:
f4:f7:07:1c:54:4b:44:81:c5:c6:85:fb:f2:56:47:38:f4:d9:
b0:00:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:04 2026 by rpki-client