Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: KCteT6yXhuTrz2l7w9V/6E37mEmmBHwe8Se6ooiTUec=
Subject key identifier: 84:A5:D1:19:86:FF:93:73:35:EA:B8:22:91:EB:6F:69:80:01:E8:9E
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 019DA3E658FFFC27E612F6193F6E1DD32F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0E1C
Signing time: Sun 19 Apr 2026 04:01:15 +0000
Manifest this update: Sun 19 Apr 2026 04:01:15 +0000
Manifest next update: Mon 20 Apr 2026 04:01:15 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: NfBsmOH7btRgnn1dvDLvcYgfOltomLIsEZTbWpuGbzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:58:ff:fc:27:e6:12:f6:19:3f:6e:1d:d3:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Apr 19 04:01:15 2026 GMT
Not After : Apr 20 04:01:15 2026 GMT
Subject: CN=84a5d11986ff937335eab82291eb6f698001e89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:0e:4e:98:1f:70:01:ff:aa:72:04:1e:79:
cc:0f:7b:fb:47:7d:c6:e1:56:48:ab:1c:70:81:2e:
60:6c:1e:f4:3b:5e:ea:7a:fb:e7:ad:a5:be:8d:78:
ae:77:27:43:f9:65:d1:c4:3f:ac:5d:fe:ac:74:38:
ff:55:8b:d6:fa:52:50:d6:97:70:df:7b:e1:d0:03:
79:bb:57:8d:cf:37:35:13:d4:fa:a4:08:90:6a:24:
a0:9b:fc:3b:1e:29:17:4f:d1:12:a8:3a:ee:9d:7f:
a1:b1:ec:86:70:37:8a:0b:37:fe:2b:23:49:44:31:
81:09:4b:22:a2:e5:ed:49:27:5a:cf:1a:b4:7f:df:
71:19:9b:2f:fd:d3:c0:d6:f3:f4:0b:9d:97:83:f6:
d3:6f:d8:43:78:d8:e9:a7:c3:78:71:ac:ec:65:a4:
70:7e:a6:00:90:82:d8:a4:43:6b:f8:df:fe:0b:a4:
2a:c2:52:d7:d5:9b:0c:5d:45:4a:a7:ae:99:48:a3:
1d:ee:a2:d6:0e:a1:2b:95:c1:29:5d:c3:5c:8d:ca:
44:d1:89:7e:75:e1:b7:7c:ae:bc:8d:b8:af:a5:02:
4f:81:c8:09:ac:bf:35:e2:bf:3e:df:73:11:2d:a9:
3d:58:fc:6d:92:f9:02:3f:e0:54:55:1a:25:6a:88:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:D1:19:86:FF:93:73:35:EA:B8:22:91:EB:6F:69:80:01:E8:9E
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3a:a9:83:55:51:88:96:f0:dd:52:14:45:be:5f:43:7b:13:
d4:c0:f2:1c:53:5c:b6:c5:1e:e2:d1:bd:04:b4:64:ad:09:0f:
91:e6:1e:c5:61:91:f8:ac:e2:0e:bd:6d:0d:d6:41:b6:e9:63:
b0:f0:a9:64:f4:d8:4c:b9:3f:00:06:e8:fb:25:e1:d6:a0:eb:
09:4a:8e:9f:f1:9f:ac:f6:4d:2d:81:b1:32:cc:0d:f2:cd:e6:
fa:13:c8:b3:d4:4d:d4:4d:8d:4f:22:83:0f:26:e9:f2:b4:3e:
13:c1:3b:86:8a:b2:f3:ed:4e:2f:51:1e:8f:52:77:6d:8c:99:
4a:44:54:f8:17:8a:60:63:4f:28:cb:63:78:5b:72:1f:8f:d9:
bb:ca:53:b2:17:0c:7c:ee:99:ee:5f:eb:8c:fc:1c:04:48:20:
3f:d3:11:a5:ee:33:27:66:18:a2:53:bc:dd:3b:ac:62:5b:6c:
37:fa:e7:a2:64:0a:9b:93:e2:a2:df:af:21:39:3b:a4:12:f6:
d5:63:51:a5:cc:fe:83:57:09:8f:d9:d4:03:51:97:44:86:b1:
f9:17:2b:b9:84:29:ac:a3:90:18:76:1b:04:e0:b2:d0:60:19:
12:83:cb:12:da:d6:ad:4f:96:3e:5d:b9:0e:fc:1f:2f:7a:88:
7d:f0:f2:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5lj//CfmEvYZP24d0y9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmIwMWRkYzUxZDkyNzQyYzNjYzRhMmIzMWRjN2ZjMTgz
YmU1N2YwHhcNMjYwNDE5MDQwMTE1WhcNMjYwNDIwMDQwMTE1WjAzMTEwLwYDVQQD
Eyg4NGE1ZDExOTg2ZmY5MzczMzVlYWI4MjI5MWViNmY2OTgwMDFlODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kcOTpgfcAH/qnIEHnnMD3v7R33G
4VZIqxxwgS5gbB70O17qevvnraW+jXiudydD+WXRxD+sXf6sdDj/VYvW+lJQ1pdw
33vh0AN5u1eNzzc1E9T6pAiQaiSgm/w7HikXT9ESqDrunX+hseyGcDeKCzf+KyNJ
RDGBCUsiouXtSSdazxq0f99xGZsv/dPA1vP0C52Xg/bTb9hDeNjpp8N4cazsZaRw
fqYAkILYpENr+N/+C6QqwlLX1ZsMXUVKp66ZSKMd7qLWDqErlcEpXcNcjcpE0Yl+
deG3fK68jbivpQJPgcgJrL814r8+33MRLak9WPxtkvkCP+BUVRolaohjDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISl0RmG/5NzNeq4IpHrb2mAAeieMB8GA1UdIwQY
MBaAFK9rAd3FHZJ0LDzEorMdx/wYO+V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAt
MjljYTE2NTc2ZWRlLzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAtMjljYTE2NTc2ZWRl
LzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDqpg1VR
iJbw3VIURb5fQ3sT1MDyHFNctsUe4tG9BLRkrQkPkeYexWGR+KziDr1tDdZBtulj
sPCpZPTYTLk/AAbo+yXh1qDrCUqOn/GfrPZNLYGxMswN8s3m+hPIs9RN1E2NTyKD
Dybp8rQ+E8E7hoqy8+1OL1Eej1J3bYyZSkRU+BeKYGNPKMtjeFtyH4/Zu8pTshcM
fO6Z7l/rjPwcBEggP9MRpe4zJ2YYolO83TusYltsN/rnomQKm5Piot+vITk7pBL2
1WNRpcz+g1cJj9nUA1GXRIax+RcruYQprKOQGHYbBOCy0GAZEoPLEtrWrU+WPl25
DvwfL3qIffDycA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:04 2026 by rpki-client