Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json)
Hash identifier: UcIA8iPPtyWkUgVid/JlNf8MBzcDWHdSE9LTzkzVxjk=
Subject key identifier: CA:B5:5F:32:48:14:91:F5:5D:43:25:CA:2C:06:C5:C9:7C:31:FC:DE
Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Certificate serial: 019CAEA37002BBF2FA0A79B65764DD4A6154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 13:01:12 +0000
Manifest this update: Mon 02 Mar 2026 13:01:12 +0000
Manifest next update: Tue 03 Mar 2026 13:01:12 +0000
Files and hashes: 1: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (hash: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c=)
2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: nA0KhqKcbh+OK8E1j5Fmx4xeywsN1kpTvqQLVG6nfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:70:02:bb:f2:fa:0a:79:b6:57:64:dd:4a:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978
Validity
Not Before: Mar 2 13:01:12 2026 GMT
Not After : Mar 3 13:01:12 2026 GMT
Subject: CN=cab55f32481491f55d4325ca2c06c5c97c31fcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:73:09:54:43:4e:56:d1:b7:20:69:f9:ea:
6c:83:f9:6d:ab:58:48:e5:5f:ff:da:9e:42:bb:45:
8e:ba:f8:6b:1e:b6:02:d1:6c:bc:8f:89:cb:88:10:
53:1b:13:5e:ce:c9:20:a2:ad:67:6d:bf:2c:61:8f:
43:23:38:ef:c7:f5:2f:8a:c1:d6:cd:af:8a:0c:b2:
1e:75:35:d6:1e:95:88:f0:53:44:72:96:ca:94:43:
04:a1:48:3d:1e:e8:69:40:c5:f0:cc:39:71:7e:96:
c4:07:3f:86:25:8a:6e:11:cb:9b:47:96:3e:e8:fe:
89:df:81:21:31:a4:35:c1:33:0e:b0:52:da:85:56:
91:04:bc:36:69:5b:3d:d0:fd:e9:1d:c9:f3:f3:45:
1f:09:5b:ec:66:f1:48:b7:1c:57:da:a8:96:ce:36:
55:49:02:99:2a:18:90:f1:c9:80:70:3b:98:e2:42:
ab:e5:5c:49:78:c7:2a:c8:61:6d:32:4b:38:87:78:
97:85:58:fb:36:f0:00:85:ca:05:7f:b8:2c:4b:ac:
46:83:53:28:3c:47:87:3c:fe:6a:5a:15:9f:2b:59:
f7:a6:9a:0d:49:bb:cc:e8:f1:8e:18:cc:56:4d:d8:
3b:10:55:80:61:a7:27:f8:1e:18:26:e4:c8:a1:6c:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B5:5F:32:48:14:91:F5:5D:43:25:CA:2C:06:C5:C9:7C:31:FC:DE
X509v3 Authority Key Identifier:
keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0e:6a:44:fb:e9:3a:5f:4c:e2:8e:23:4c:18:57:da:a7:46:
7c:78:fe:c8:09:7c:0a:7c:15:77:e2:0d:35:d1:27:75:0e:28:
2a:f4:ff:c3:33:5b:6b:ba:0c:e1:57:d0:57:6e:e4:2e:b1:6a:
f7:fe:51:00:4c:ee:f1:54:94:76:c8:c4:61:09:45:ca:72:b1:
d1:c4:b2:3e:7d:d6:f6:c4:9a:dd:7d:53:b4:2b:5c:da:61:0a:
6f:d1:41:6b:f2:a4:2e:b6:e8:e4:35:fb:05:cb:ad:d6:d6:e7:
90:0a:49:f9:ea:4d:ad:2f:13:dc:39:24:55:86:5d:d5:09:47:
9c:a0:d6:25:13:84:a2:01:14:42:be:69:29:31:3f:06:cf:3b:
27:56:82:05:c9:c5:42:ee:30:21:e1:1b:d3:a4:27:e2:97:fa:
0c:25:e1:5c:ee:51:10:7b:76:18:88:27:14:69:ab:0d:1c:21:
c9:aa:e7:49:d4:b3:13:73:d2:f7:4d:1a:dc:4f:86:fb:4d:e4:
b7:1c:7f:93:8c:93:de:fd:bf:48:cc:fe:c1:04:9c:84:00:43:
ba:2b:82:d3:50:89:b1:de:66:e9:82:ec:20:f6:11:e4:e7:55:
47:99:d2:82:5f:d0:4f:26:38:8d:95:f7:60:d4:4c:38:90:54:
ca:1b:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:03 2026 by rpki-client