Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
File: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft (raw, json)
Hash identifier: ARmBRDPNtxoKuQKRwjfafIXelwWPdwpfq8tmOrr47bQ=
Subject key identifier: ED:A4:FB:C0:C1:16:66:E6:43:A7:12:F1:CB:82:BA:79:0B:D0:8D:E2
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Certificate issuer: /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial: 019CAC7E5257E4349FBB3580D9D10657555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
Manifest number: 1022
Signing time: Mon 02 Mar 2026 03:01:25 +0000
Manifest this update: Mon 02 Mar 2026 03:01:25 +0000
Manifest next update: Tue 03 Mar 2026 03:01:25 +0000
Files and hashes: 1: R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl (hash: eM7/nSCJWHU2ErU3tArcd6tBeTLRDKkWSi6JhnSBLq8=)
2: fQS1xs7qvvVoDoo6JXLTjj1uXKs.roa (hash: vJOXgquhUl3C2d68PQtwyWBrOlbYAdYekTxoaJ8mzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:52:57:e4:34:9f:bb:35:80:d9:d1:06:57:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Validity
Not Before: Mar 2 03:01:25 2026 GMT
Not After : Mar 3 03:01:25 2026 GMT
Subject: CN=eda4fbc0c11666e643a712f1cb82ba790bd08de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:0f:96:89:e8:1e:16:fb:c9:8e:0c:69:4b:
1a:ce:a6:dd:cf:37:21:57:3b:2a:94:44:92:ce:21:
95:f3:02:70:85:c1:c4:80:5b:d3:b3:fa:32:c1:3b:
d1:5b:55:00:66:bc:26:d3:9a:b0:71:bd:8a:51:73:
f7:dd:bb:2e:b0:18:7d:ff:35:9b:65:87:d8:96:5e:
35:4c:c7:ad:cb:30:45:53:19:6e:0d:25:31:da:c1:
8d:63:0b:19:38:66:27:aa:49:75:74:c4:49:e9:5f:
4b:b5:31:8e:a2:07:13:3c:90:15:93:7f:29:6f:64:
66:6f:20:a7:0d:88:43:6e:49:d2:ff:7b:1c:bc:66:
3d:25:a6:86:07:7d:80:d4:a1:6f:78:89:17:e5:6f:
28:dc:b7:d5:96:42:2f:ca:bf:62:e7:a6:2c:a3:e7:
28:2d:a1:00:f7:09:1c:08:0e:64:8b:fc:cb:ae:6e:
88:da:52:0f:53:00:de:89:1e:4a:f7:f4:fe:8e:e2:
1c:78:3a:23:0f:c2:e1:0c:75:5f:8d:30:67:d0:77:
0b:b2:3c:9e:f9:ec:89:f4:54:5e:b9:d5:5d:89:53:
78:df:f5:c0:b1:ea:7a:5a:a8:7b:ff:98:c3:c4:08:
f5:66:87:93:79:41:22:6d:18:e7:0f:f8:1a:d7:71:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:FB:C0:C1:16:66:E6:43:A7:12:F1:CB:82:BA:79:0B:D0:8D:E2
X509v3 Authority Key Identifier:
keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e0:d3:0e:5e:01:b6:58:f6:b6:30:ac:d9:9d:bc:a8:73:98:
ad:fc:2b:66:27:7f:fb:96:15:17:9b:f5:cc:62:90:2c:ed:5f:
b8:ab:68:57:23:d8:44:ca:b9:61:eb:ba:c5:aa:9b:07:df:92:
f5:b1:44:9f:4a:28:2b:76:09:a3:61:6a:13:2f:aa:19:26:3d:
f2:45:ef:02:ad:19:f1:c8:62:18:de:a4:84:05:bf:e1:b2:50:
bf:d9:95:8e:23:24:82:40:58:47:97:5e:59:01:3e:cb:59:a0:
5d:5d:e3:91:87:05:aa:89:69:d6:db:73:96:39:f7:60:f5:4d:
46:f1:bc:fa:a0:43:3a:01:ff:c4:05:51:f0:98:8e:86:87:c4:
14:ed:73:fb:f3:dc:44:09:f3:ed:59:91:55:ca:2d:6d:cf:48:
f8:12:80:44:7b:f3:03:bb:88:a5:90:a6:86:46:be:1a:09:ea:
8b:54:0d:21:ae:37:8b:f5:e6:c5:df:9c:0c:5f:9f:47:47:55:
06:e2:c7:1a:94:c7:7e:b4:08:c7:e3:61:9f:e6:6b:49:ca:49:
df:d6:5e:63:70:48:7f:21:56:41:e9:d6:73:4b:a3:10:5f:61:
a0:11:ea:11:ea:af:f9:73:f6:98:79:2c:5f:26:9d:c6:2e:08:
e4:30:94:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysflJX5DSfuzWA2dEGV1VbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjMzNDYxOWIxNDk0NWRmYmMwNjRkNGFlMWY1NzZiMGUx
ZGVjYTcwHhcNMjYwMzAyMDMwMTI1WhcNMjYwMzAzMDMwMTI1WjAzMTEwLwYDVQQD
EyhlZGE0ZmJjMGMxMTY2NmU2NDNhNzEyZjFjYjgyYmE3OTBiZDA4ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CoPlonoHhb7yY4MaUsazqbdzzch
VzsqlESSziGV8wJwhcHEgFvTs/oywTvRW1UAZrwm05qwcb2KUXP33bsusBh9/zWb
ZYfYll41TMetyzBFUxluDSUx2sGNYwsZOGYnqkl1dMRJ6V9LtTGOogcTPJAVk38p
b2RmbyCnDYhDbknS/3scvGY9JaaGB32A1KFveIkX5W8o3LfVlkIvyr9i56Yso+co
LaEA9wkcCA5ki/zLrm6I2lIPUwDeiR5K9/T+juIceDojD8LhDHVfjTBn0HcLsjye
+eyJ9FReudVdiVN43/XAsep6Wqh7/5jDxAj1ZoeTeUEibRjnD/ga13EhQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2k+8DBFmbmQ6cS8cuCunkL0I3iMB8GA1UdIwQY
MBaAFEdjNGGbFJRd+8Bk1K4fV2sOHeynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDct
ZGJmY2QxMWMzMzAzLzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mMTU0YjItYjEyNC00NTMyLTk3MDctZGJmY2QxMWMzMzAz
LzEvUjJNMFlac1VsRjM3d0dUVXJoOVhhdzRkN0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+DTDl4B
tlj2tjCs2Z28qHOYrfwrZid/+5YVF5v1zGKQLO1fuKtoVyPYRMq5Yeu6xaqbB9+S
9bFEn0ooK3YJo2FqEy+qGSY98kXvAq0Z8chiGN6khAW/4bJQv9mVjiMkgkBYR5de
WQE+y1mgXV3jkYcFqolp1ttzljn3YPVNRvG8+qBDOgH/xAVR8JiOhofEFO1z+/Pc
RAnz7VmRVcotbc9I+BKARHvzA7uIpZCmhka+Ggnqi1QNIa43i/Xmxd+cDF+fR0dV
BuLHGpTHfrQIx+Nhn+ZrScpJ39ZeY3BIfyFWQenWc0ujEF9hoBHqEeqv+XP2mHks
Xyadxi4I5DCUUQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:19 2026 by rpki-client