
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: GZszwKQJfx5w7mB9GdQg24PpvYDorJqC2Vulutu1DU0=
Subject key identifier: 10:05:FC:CF:2E:D8:8B:15:A7:CA:5B:FF:79:0F:F6:46:77:D8:E2:3C
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 01A0D5A6D5AA8A321E6F6CA59A7AD2854F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 154B
Signing time: Thu 24 Sep 2026 23:01:15 +0000
Manifest this update: Thu 24 Sep 2026 23:01:15 +0000
Manifest next update: Fri 25 Sep 2026 23:01:15 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: Ns7+QKQcxarVGeK62Lh6/KIILM9hGPVcKlooWpi1A90=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:d5:aa:8a:32:1e:6f:6c:a5:9a:7a:d2:85:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Sep 24 23:01:15 2026 GMT
Not After : Sep 25 23:01:15 2026 GMT
Subject: CN=1005fccf2ed88b15a7ca5bff790ff64677d8e23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:35:96:c0:90:1f:59:9f:22:64:a5:d3:ed:
86:18:c1:56:6d:db:63:09:35:82:07:65:68:76:a0:
99:32:f5:70:18:fc:07:ae:ce:13:93:2f:d2:0e:e6:
8a:ca:f9:e5:eb:50:44:5a:20:8f:cd:3d:88:df:ca:
c7:53:5e:dd:24:64:82:f0:4f:b0:d0:9f:d0:0b:75:
c9:df:9e:21:a1:1f:65:cc:ef:df:f4:41:45:16:af:
4f:11:ad:1f:48:da:f0:f2:2a:48:9b:1f:4f:11:43:
88:6d:14:01:55:57:a2:d6:72:c7:d1:37:62:bb:f9:
70:d3:82:3d:08:8c:09:a8:6f:d7:d5:95:89:e2:ff:
89:df:ed:2e:f9:ef:3e:34:99:c9:c5:fa:dc:f6:a5:
eb:6a:70:ab:85:54:89:59:c7:43:7c:9d:4e:a4:12:
ab:86:42:73:bc:38:b0:2d:57:06:41:cc:98:c4:ab:
8c:ba:ac:84:d2:b7:30:23:df:ef:ff:a8:ff:94:ea:
7d:82:40:ef:4d:0a:63:c9:f1:5d:2c:51:1b:4e:a2:
17:a2:09:96:dd:62:11:d0:fe:5f:a9:07:20:5f:00:
3a:5b:78:e9:07:09:f1:14:a0:4a:dd:91:22:e5:e7:
ae:c0:8d:c0:bc:28:0e:79:87:c9:a2:61:74:7d:53:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:05:FC:CF:2E:D8:8B:15:A7:CA:5B:FF:79:0F:F6:46:77:D8:E2:3C
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:95:f8:fe:9a:15:b6:a6:50:1f:63:d7:f1:fb:52:ae:a1:b0:
fb:cc:c8:c4:07:0d:d5:f2:62:65:54:cb:c1:e7:b4:c4:d8:28:
f6:cb:cd:ff:a9:62:07:08:bd:d5:50:af:5f:af:3e:e6:37:55:
fb:b0:45:73:10:b9:c9:06:1f:21:d7:35:58:79:cb:ed:18:62:
4b:4f:ae:eb:fd:ce:dd:eb:9e:1f:fb:70:a1:cf:92:32:44:31:
4e:9d:96:5f:94:89:5f:b0:2b:46:5e:de:17:45:81:79:ca:b2:
39:fc:f9:7f:e6:e7:f6:f3:95:4a:b1:dd:88:43:0e:13:0d:46:
73:26:23:2b:ef:b8:9d:cf:28:e1:19:fa:de:82:f0:dc:0c:88:
c7:e5:a6:5d:aa:c6:4c:bd:ad:ba:5a:81:0e:de:8c:30:6e:a4:
32:55:fb:20:8e:97:27:6e:07:23:a6:40:b7:b9:d9:28:6d:e7:
32:13:ae:1b:f6:8b:85:01:c5:67:13:33:a1:f9:a0:b0:d5:0a:
71:ed:e3:ae:c0:90:56:41:43:91:cd:28:98:2d:ef:01:78:0e:
ca:05:19:78:04:5c:ad:9d:f1:81:c4:d6:bd:62:ba:72:d5:1d:
8d:33:3b:7e:a1:cd:0b:46:02:c3:24:f4:12:b1:d1:73:75:a2:
4f:b7:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:38:48 2026 by rpki-client