Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: eqt3tDD4gVGCLcSfOzqzpLmMd/4tTX770OGUhaWTx1U=
Subject key identifier: 69:9F:0D:DA:8E:69:EB:88:26:4E:BD:A9:FE:10:82:93:05:A6:EF:D2
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019D9A075FEDC0313DC7CA634F57CE62A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 109D
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: FqtUY5lzDHF4LgEELYbMgc0pqOCVxzMUbGdgoqr0Bd4=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5f:ed:c0:31:3d:c7:ca:63:4f:57:ce:62:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=699f0dda8e69eb88264ebda9fe10829305a6efd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:fb:9a:6a:82:46:5c:57:a4:2b:c1:df:99:
fa:3e:22:fc:a2:65:8e:11:ee:97:2f:1a:82:07:fe:
0e:4c:44:eb:19:3d:e9:27:31:05:91:e6:34:12:b1:
d0:c5:a3:55:fd:ef:ed:5c:78:5f:ec:07:b2:43:9b:
11:ca:b2:e0:d4:cd:5d:b7:a2:f6:24:a4:06:eb:43:
4c:e5:18:8f:6f:88:27:5e:20:4d:64:4a:72:e2:47:
07:26:3e:dd:68:18:1f:c0:40:47:6a:3c:ef:98:85:
83:a9:84:39:34:4f:b2:92:f0:5c:48:17:38:db:95:
92:0a:d3:10:2d:9b:48:01:90:d4:77:e8:71:75:95:
19:dc:b7:81:7d:69:fb:fc:86:d4:03:2b:c4:ae:24:
7b:1e:2a:e2:c6:d3:a4:7e:b7:9f:08:46:45:6f:fe:
4e:66:90:bb:22:90:25:8e:6e:2f:2f:3c:bb:b5:a8:
c8:0b:ae:e2:d9:ed:8e:53:3f:81:0a:2b:f1:8a:43:
a0:b9:36:31:28:df:d6:2b:ce:6e:c0:ff:16:ef:06:
3c:b4:b1:c5:4b:bb:de:36:04:c1:22:bf:82:1b:f5:
0b:97:31:16:69:6a:32:54:47:bf:40:1b:cb:44:cd:
5d:41:c1:6b:ed:f6:b3:f3:55:49:69:77:ba:4b:10:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9F:0D:DA:8E:69:EB:88:26:4E:BD:A9:FE:10:82:93:05:A6:EF:D2
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cf:a2:ee:5a:02:fb:5a:79:cf:34:85:ed:67:18:8a:ea:a5:
8f:fe:da:93:a0:25:0e:be:61:e7:77:3e:72:b9:e9:b4:0e:19:
4d:6e:61:d1:af:73:00:f3:9d:ac:43:5b:c6:cb:88:13:fe:39:
8f:a9:d9:e8:98:f2:8f:be:c3:20:f8:33:fa:5d:ae:f5:7e:6a:
5b:c4:3e:70:39:75:82:9e:c6:a5:59:a7:9d:59:77:10:4d:98:
b4:79:6d:30:26:77:59:c2:fa:de:2b:81:8b:ad:19:6d:77:62:
ed:fa:3f:74:67:be:ea:bf:14:01:43:8e:b6:33:28:67:ad:6f:
fb:ec:7b:36:45:bb:63:0a:2f:8c:50:f2:e4:58:0a:eb:b5:9c:
50:3b:26:1d:17:73:01:40:b9:bd:d5:53:cf:da:2a:48:47:53:
c0:d8:9c:d8:df:f2:39:a5:c8:5c:c6:35:45:88:4c:4a:74:df:
43:eb:e6:b9:98:11:7d:fd:f8:30:78:79:ad:7e:46:f6:23:8a:
46:9f:08:81:1a:d2:c5:34:7d:dc:df:a1:cd:eb:dd:90:65:0a:
5b:17:96:32:3c:1a:1d:a1:46:10:38:8c:c8:14:14:85:b9:5d:
43:78:96:12:7a:ce:99:07:77:7b:18:d4:0d:80:f7:96:d8:d3:
6b:2f:26:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB1/twDE9x8pjT1fOYqXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx
ZGVjYTcwHhcNMjYwNDE3MDYwMTA3WhcNMjYwNDE4MDYwMTA3WjAzMTEwLwYDVQQD
Eyg2OTlmMGRkYThlNjllYjg4MjY0ZWJkYTlmZTEwODI5MzA1YTZlZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndr7mmqCRlxXpCvB35n6PiL8omWO
Ee6XLxqCB/4OTETrGT3pJzEFkeY0ErHQxaNV/e/tXHhf7AeyQ5sRyrLg1M1dt6L2
JKQG60NM5RiPb4gnXiBNZEpy4kcHJj7daBgfwEBHajzvmIWDqYQ5NE+ykvBcSBc4
25WSCtMQLZtIAZDUd+hxdZUZ3LeBfWn7/IbUAyvEriR7HirixtOkfrefCEZFb/5O
ZpC7IpAljm4vLzy7tajIC67i2e2OUz+BCivxikOguTYxKN/WK85uwP8W7wY8tLHF
S7veNgTBIr+CG/ULlzEWaWoyVEe/QBvLRM1dQcFr7faz81VJaXe6SxBqywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmfDdqOaeuIJk69qf4QgpMFpu/SMB8GA1UdIwQY
MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct
ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz
LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc+i7loC
+1p5zzSF7WcYiuqlj/7ak6AlDr5h53c+crnptA4ZTW5h0a9zAPOdrENbxsuIE/45
j6nZ6Jjyj77DIPgz+l2u9X5qW8Q+cDl1gp7GpVmnnVl3EE2YtHltMCZ3WcL63iuB
i60ZbXdi7fo/dGe+6r8UAUOOtjMoZ61v++x7NkW7YwovjFDy5FgK67WcUDsmHRdz
AUC5vdVTz9oqSEdTwNic2N/yOaXIXMY1RYhMSnTfQ+vmuZgRff34MHh5rX5G9iOK
Rp8IgRrSxTR93N+hzevdkGUKWxeWMjwaHaFGEDiMyBQUhbldQ3iWEnrOmQd3exjU
DYD3ltjTay8mrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:25 2026 by rpki-client