Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: XkhzDO6wv6sPDnNp0+IsTB5xEYMqQai4n0NjLHHKU28=
Subject key identifier: C6:DB:AC:A3:54:29:BC:69:76:02:2A:74:D7:DB:02:64:3E:AD:FD:F8
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019CAA584D53FA4328103FD6E0F333313726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 0A7A
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: mjzLC2jT-cRXfFiuYH6L8Jcc5gU.roa (hash: cefFeh46n8lkdK1PiJxVAx5PbbceAFsOdaNDkEty/MI=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: 74kCe8GKQ/aHK9R+5Qy+xVYwWS0d1qrcn0KvJcDdoM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4d:53:fa:43:28:10:3f:d6:e0:f3:33:31:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=c6dbaca35429bc6976022a74d7db02643eadfdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:6f:04:25:b8:1e:01:18:b3:ae:23:b4:78:
e9:d7:de:7e:8b:d3:f5:60:b9:19:33:21:63:1c:41:
c1:c4:33:57:29:d6:2b:48:33:4a:97:be:33:1f:63:
5b:20:2e:8b:06:6e:b9:2f:02:57:aa:af:f7:ae:84:
1a:3c:5c:c0:3f:59:4a:a8:ed:1a:e0:74:bc:ae:d8:
5c:2c:22:be:8d:45:84:09:ee:a9:25:f5:90:5d:55:
52:66:98:ca:de:00:33:5f:57:8b:dd:c1:f8:b8:d5:
5d:14:ee:be:78:49:ca:a6:14:1c:2d:9b:6f:98:99:
fa:e4:a9:40:21:e8:7f:27:d8:4c:e6:d9:15:bc:ce:
96:f3:dd:fa:66:21:24:4c:8c:c8:d9:fd:6f:c7:1c:
54:fd:f1:5a:73:78:5a:7e:c3:aa:89:c0:ba:eb:47:
f9:8c:ff:d9:4d:95:e5:47:af:3e:30:bc:7f:5a:03:
f6:95:28:7f:7a:9e:8d:b2:26:cc:a2:69:2f:e1:5c:
94:75:5b:7c:3a:11:f1:f5:dc:96:aa:28:41:40:1c:
00:f7:68:a9:06:64:2e:b3:4a:34:94:d9:92:18:b4:
10:96:eb:ff:1d:ed:5c:eb:57:21:09:8d:a5:c7:46:
37:aa:27:34:a3:da:7a:f0:13:83:06:e1:47:cd:31:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DB:AC:A3:54:29:BC:69:76:02:2A:74:D7:DB:02:64:3E:AD:FD:F8
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:4c:ba:8b:34:ba:ae:2f:82:71:bd:d5:67:cc:f8:14:31:
cd:6e:f8:4d:e8:fb:b1:e6:32:09:fa:0f:ab:6a:9c:45:1b:69:
04:51:24:da:98:aa:c9:43:14:9e:a4:d0:e7:7b:c5:5b:0c:92:
8f:f6:d5:16:7e:0d:83:fc:72:ce:dd:fa:e6:0c:f0:de:e1:16:
d0:6b:77:a9:e8:93:84:23:8c:c5:cb:66:cd:5a:3e:35:97:f9:
2f:3b:29:c0:2c:e1:88:36:34:73:ff:15:93:c5:26:38:99:a8:
dd:47:60:8a:22:0b:4a:a9:7f:2b:46:c4:71:53:9a:92:a2:91:
71:cf:00:75:a1:92:89:d7:f2:d9:9b:ef:7e:20:bf:41:18:d7:
f1:9e:91:44:12:c8:29:2e:19:e0:2d:13:1c:38:ea:21:ad:b9:
e1:10:c6:f2:e9:bc:bd:df:c3:f6:4a:c8:27:15:c4:a3:9b:c5:
da:e5:23:f4:db:46:37:03:3c:90:68:8a:65:d5:1f:08:73:ff:
79:ac:ea:9e:7d:56:b2:73:31:da:d7:f9:05:dc:65:1a:f6:e2:
14:7e:f6:1f:7d:42:0f:10:20:ae:e1:c6:db:7e:61:74:2e:c8:
52:bf:63:0f:36:ad:ab:fa:9b:4c:e0:29:c6:9d:8c:62:a8:b7:
fc:44:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:35 2026 by rpki-client