Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: UwmAHvaNBSD0MvPcSr0PXifE9mJwXfgplNR5rr3ltpA=
Subject key identifier: 5D:E7:DB:0E:D0:88:6C:42:97:DB:35:1A:9E:AE:F2:AA:FD:35:CD:1D
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 019CAB3491193EC24172E83B2237E5DF233E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 1307
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: Alslx_oASGDhTgnk4VxtSFMgpMo.roa (hash: pyjVJGCY7h0uxXhNOv3Pu/XxJ3scX5SvQaxdIXBnRtg=)
2: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: xZ36DPR9oj820Qn8dAVCLhPJF9N0EJllTriUCzpZldQ=)
3: wzvlYmTV-9nsSGFn0dstmC1HmEk.roa (hash: kl+8hGqZ5wyjtFNiWYNpl45G6d3B4Xj29eq45toQRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:91:19:3e:c2:41:72:e8:3b:22:37:e5:df:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=5de7db0ed0886c4297db351a9eaef2aafd35cd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:1b:47:b2:ac:64:cc:5e:e2:8b:bb:fc:c0:
96:c6:53:a3:f1:01:0c:ba:1e:b3:42:9b:8e:d9:68:
8c:1d:fb:9d:48:3e:9c:e6:ce:98:f6:27:05:6b:8d:
72:fd:dd:c5:2e:f5:b9:26:e0:5c:cf:05:3d:1e:9c:
be:05:e9:b2:d0:82:eb:82:12:f7:34:f2:ce:b8:74:
8c:27:17:ed:3f:c7:9b:40:a6:28:6f:60:fe:45:11:
93:2d:0d:d2:ec:f7:88:40:af:03:08:bb:9d:99:0a:
e1:81:30:74:87:7b:d8:43:0f:51:e2:d2:9a:c8:3c:
47:72:06:d4:50:6d:15:26:9e:ab:28:eb:1f:80:79:
94:7f:27:25:34:39:23:27:0d:5f:3a:fe:84:7c:54:
9a:71:cb:b7:87:d3:2a:d0:8b:ae:0f:9a:e5:03:b7:
b8:df:26:86:24:4a:1a:7c:ae:50:e3:47:ef:73:f4:
39:19:ac:bb:4e:79:37:17:17:66:5b:ce:ce:e4:53:
da:77:b8:b4:87:a2:c4:66:1f:4f:42:63:b2:ce:db:
84:c1:35:e3:8a:d3:39:d9:aa:93:59:d5:38:03:d4:
9b:63:f4:e9:b6:37:01:ab:19:43:28:f7:b8:2c:17:
f3:c4:96:b4:b5:7e:ce:b8:63:14:d2:da:fc:a5:a3:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:DB:0E:D0:88:6C:42:97:DB:35:1A:9E:AE:F2:AA:FD:35:CD:1D
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4c:33:5f:a2:8e:43:14:19:48:14:61:ba:9b:bd:d7:52:eb:
89:57:18:51:79:d3:4f:37:ee:b3:2e:f7:d5:3c:5e:04:50:48:
d8:a8:48:39:07:8b:6b:92:8b:2e:52:20:8d:c5:b4:00:40:14:
b8:a2:fb:77:00:41:b3:9a:17:7a:c9:b5:6b:ce:dc:5e:5e:ce:
7c:ec:57:58:6c:e4:29:e0:2a:ea:36:2d:46:8e:bf:d8:47:fe:
a1:32:ab:f5:ab:00:98:bd:36:5d:8f:76:21:62:07:e6:66:ce:
96:7a:39:ed:62:00:2c:30:72:f1:9a:b7:5b:a0:c0:45:8f:cb:
45:4f:d7:1c:76:16:de:34:85:b2:8c:cd:90:5a:a6:fc:f8:d8:
28:e7:60:7d:c5:d1:a7:b9:10:da:7a:7e:f0:73:49:cc:83:dc:
d3:7f:c8:8d:6b:73:5a:30:63:5b:40:6a:d5:ac:82:a3:bd:8a:
ed:d8:ab:c4:da:82:32:50:ce:8a:18:fb:a2:86:ca:80:4c:35:
a0:ff:77:68:98:85:92:6b:27:a2:2a:a5:c8:4e:da:52:fc:ab:
0c:be:f4:a8:56:0d:1e:87:77:eb:99:6c:f2:09:99:f9:5e:6b:
0a:fb:47:09:fd:5b:4e:9c:e5:68:b5:58:76:45:ae:31:9b:f5:
5f:54:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:54 2026 by rpki-client