Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: OMaaxh3HNr31iGlUryYntXvrdcdr4d8Q+8KNA0aepec=
Subject key identifier: 21:70:AC:69:51:1C:74:36:59:6D:59:10:83:46:03:A6:03:BE:39:E3
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019CAD229A5D0BB216F0A8B44645ECAE742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 1290
Signing time: Mon 02 Mar 2026 06:00:51 +0000
Manifest this update: Mon 02 Mar 2026 06:00:51 +0000
Manifest next update: Tue 03 Mar 2026 06:00:51 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: ZuVzvEzLnWbh4CVTqMf5rcEKUm0SgKWZPGMUnl3BK0w=)
2: qGBCQCZlL1yzOajHzIypwWxNeWA.roa (hash: p7Sjt3xmkXcVS2g8oPh7NRV5OpfFVXtU6JCEbaI2Bsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9a:5d:0b:b2:16:f0:a8:b4:46:45:ec:ae:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Mar 2 06:00:51 2026 GMT
Not After : Mar 3 06:00:51 2026 GMT
Subject: CN=2170ac69511c7436596d5910834603a603be39e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:83:13:91:33:cf:bf:d3:fc:df:38:d3:a5:
ad:55:97:da:53:e6:f6:ad:bc:d1:65:6a:9d:54:20:
84:95:5d:a9:53:6f:93:fb:39:ad:96:a9:fd:2f:b5:
54:99:78:7e:30:17:05:0e:76:70:ad:c2:c7:5e:f1:
04:02:4a:0a:c5:a8:10:7e:82:76:c5:82:01:e3:17:
45:d2:7d:f7:98:9f:6d:b7:d2:fe:5d:51:f4:79:56:
0f:ce:ba:ef:16:98:c0:b6:34:41:3b:43:4c:26:39:
d2:48:ff:da:2c:1f:eb:f8:ff:9b:6b:3c:27:82:a7:
b7:03:44:a4:7e:ae:38:72:02:12:fb:b7:a1:43:9d:
2e:34:bf:4e:7d:57:df:1c:bb:9e:a6:1f:74:6c:78:
46:d5:48:59:e8:03:2c:66:13:6e:02:e5:2f:e8:34:
6a:7d:47:c1:8b:de:59:fd:bd:9d:cb:72:4b:84:03:
1b:9a:7d:23:66:df:d8:bd:c5:ee:2a:d6:fd:48:f2:
dc:a2:a7:f8:17:03:5d:23:4c:da:62:65:40:32:e2:
26:da:e5:dd:53:59:91:04:dd:00:ea:5a:6e:49:c2:
dd:6f:df:ff:5a:0c:14:7f:8b:32:27:74:17:cf:89:
dc:1a:2e:b0:99:ba:8c:8c:27:d0:98:66:e5:ec:a5:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:AC:69:51:1C:74:36:59:6D:59:10:83:46:03:A6:03:BE:39:E3
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:f9:40:30:03:0b:41:a1:ad:3a:55:d8:b0:64:86:57:b6:
b5:2c:75:f1:6e:ad:20:f5:9a:8e:05:56:96:47:4d:02:70:2c:
76:da:6c:ad:a0:59:bd:81:51:b6:28:a1:69:3f:80:90:12:7b:
90:73:b2:4d:4e:b6:84:16:15:5c:62:0e:c8:48:d0:8d:0b:85:
a5:ce:10:3a:e7:3d:c3:8e:e7:32:0c:d5:dd:56:7a:ed:71:d3:
38:75:e3:e5:b5:62:b5:45:4f:1d:26:bb:dc:a4:5e:e5:94:e5:
05:8b:34:12:e4:6f:ed:1d:c6:f6:81:03:c0:83:62:03:dd:d6:
0c:af:bd:f7:22:f6:2f:3f:23:d1:05:dd:34:e5:52:4e:04:b1:
d4:a9:c0:2d:e5:9f:b4:ea:d9:9d:87:ec:55:38:6a:41:4a:e1:
9c:f9:6d:03:f1:35:75:e7:4c:d1:23:bd:fb:cd:de:99:c5:4f:
aa:70:21:5d:c4:da:1b:32:a3:7b:21:c1:14:8a:dd:13:41:c5:
51:07:ae:25:95:df:82:1c:44:52:2d:75:6b:43:77:9d:54:bb:
e0:26:02:fb:28:3e:32:4d:05:d2:a2:f9:7c:66:1e:d7:da:ef:
48:bc:90:99:4a:0d:99:0c:a5:72:f9:9f:db:e3:87:68:ce:70:
a8:a0:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:46 2026 by rpki-client