Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: ACoqvKu+HDdUQ2MmPQeqa/2CgxnYGAE37G0aVOIKgBY=
Subject key identifier: 42:E0:0B:99:01:C3:7E:D9:19:B1:CB:83:0C:95:F1:16:3D:A7:9F:F5
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019DA378FA50593819E5BE7E84BB94E9D804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0AFB
Signing time: Sun 19 Apr 2026 02:01:47 +0000
Manifest this update: Sun 19 Apr 2026 02:01:47 +0000
Manifest next update: Mon 20 Apr 2026 02:01:47 +0000
Files and hashes: 1: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (hash: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: anRRlcuEpqnk14s1xZFhopnQYvYCY/Xe8hOPnmIigfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:fa:50:59:38:19:e5:be:7e:84:bb:94:e9:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Apr 19 02:01:47 2026 GMT
Not After : Apr 20 02:01:47 2026 GMT
Subject: CN=42e00b9901c37ed919b1cb830c95f1163da79ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:2b:32:72:50:5d:a0:0e:b2:a8:45:ca:98:
60:2e:ac:53:ee:ff:ce:8e:a5:47:6d:12:08:ff:b8:
f4:53:e7:ef:8f:c2:b2:45:25:4f:de:d2:a3:b6:ff:
34:8c:fa:0b:8d:b2:46:59:74:c6:f1:83:b5:c3:11:
d3:59:bc:d6:ef:54:38:7a:cc:c0:68:b7:a9:bb:91:
5b:95:33:c8:64:18:0e:50:f0:1f:b0:65:50:62:fa:
e2:fe:dc:25:f6:fe:5a:f5:06:80:d4:6a:d0:6d:2d:
5e:88:4b:4d:5e:c9:49:65:80:45:bc:22:01:db:da:
e1:fa:d6:ce:3f:1d:c1:6b:b8:c1:ba:25:76:9d:9b:
62:72:ca:95:46:5d:85:cb:f9:3e:94:bd:e8:0b:d2:
78:22:62:50:02:df:3c:9f:85:26:a8:12:1a:84:8c:
e4:02:6b:3a:f0:88:38:b8:81:c2:1e:f9:e5:14:2e:
fe:2f:96:52:e0:2f:d7:e8:9d:20:00:af:68:38:d1:
29:1f:34:12:9e:4b:62:b6:c2:d0:25:b2:74:b2:78:
38:2f:a3:99:9b:54:16:87:f8:2a:01:db:90:64:dc:
7a:0b:bd:42:a1:27:c6:35:4c:eb:fd:f0:57:d1:f2:
b3:c7:25:f0:3e:28:f5:ee:39:9a:e1:e5:95:73:7c:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:0B:99:01:C3:7E:D9:19:B1:CB:83:0C:95:F1:16:3D:A7:9F:F5
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:ca:f6:63:e8:45:a6:a1:a3:5d:fe:36:0d:0b:e2:1f:74:
ca:b6:d5:14:d0:c7:3c:7b:d2:81:97:56:47:40:33:a3:3f:52:
09:8f:75:f2:59:30:9b:aa:bc:0f:63:6b:df:08:6c:f0:d3:3c:
0d:c7:07:19:90:3e:fb:d5:a5:55:d7:74:0f:b6:df:34:d2:e2:
7d:ef:7f:c2:72:8c:3f:2b:a1:aa:2b:64:e3:46:ef:78:d9:b8:
c8:43:d4:0c:6f:30:41:07:0b:c7:38:b3:49:dc:57:7e:a1:d6:
69:a4:d0:d2:48:81:09:0c:5e:05:66:8a:28:a2:67:3f:4c:cd:
05:c0:f2:75:14:f1:ec:ea:7d:1b:fd:08:47:b8:ee:96:be:10:
2c:6f:31:0e:4a:b3:41:ff:11:4d:00:64:57:f4:90:be:a2:30:
b3:4a:e9:69:db:30:de:f0:ea:7d:e7:af:ab:f5:70:57:8e:c5:
f8:bb:04:70:68:a0:93:3e:97:24:28:99:28:45:6a:97:7a:64:
91:5c:a7:9a:5a:88:22:be:19:65:98:04:13:08:2e:5a:ff:98:
d4:cf:31:de:a8:d3:09:9e:8d:55:a8:f4:b5:9c:34:7c:8e:d9:
54:be:8b:c0:5f:37:67:7a:8a:db:bb:cf:c7:1c:75:0a:76:32:
9d:08:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:36 2026 by rpki-client