Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: lNBnmFWqa9zgnWxpqLrTd5Bv62hwSqyjgyRb3NVpAo8=
Subject key identifier: 42:3B:A8:BA:2F:53:EB:E0:1E:7C:C4:A7:C7:9A:26:98:B6:19:AD:B8
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019E1E35B30DA14CE2D122A6EBF1050F8B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 16DB
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: n7Ldtvaist6fI3wmrz6i5cD8+Jzsxco64e7py2kgkgo=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b3:0d:a1:4c:e2:d1:22:a6:eb:f1:05:0f:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=423ba8ba2f53ebe01e7cc4a7c79a2698b619adb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:08:6c:86:f6:2b:30:02:f7:29:46:dc:c0:
c1:ad:97:a3:56:9b:f8:fe:6d:38:81:e0:49:e3:bc:
3c:2d:ba:f4:b7:60:ca:67:78:1b:9d:60:0f:6d:3f:
ec:ff:1e:2a:b1:79:53:eb:19:01:e0:0b:da:7f:da:
ba:07:31:ce:df:49:f0:f6:1e:87:7e:6b:58:10:49:
dd:5a:5d:36:1e:e5:e6:e0:c0:8e:dd:e3:8a:c8:18:
3b:34:2f:3f:79:d1:4d:aa:7b:df:3b:d5:e5:41:81:
e4:88:1c:97:f9:22:09:70:f5:d0:af:fd:08:ef:1b:
67:5d:bb:6e:57:03:d4:12:85:2f:de:eb:81:0f:fd:
54:62:5e:f9:00:60:05:eb:66:bf:3e:bb:ff:60:08:
9d:6c:38:b6:83:fc:9f:a8:08:97:ad:9b:37:66:f9:
7e:c3:1a:3f:64:66:a5:b3:ac:ef:e2:01:9c:bf:94:
2d:dc:57:44:6c:2c:64:3c:bd:cf:39:51:25:9e:ef:
98:41:88:55:23:5c:c9:93:92:5b:0b:1d:2f:ad:f2:
bb:3d:90:bb:f7:a0:af:93:d0:47:d6:22:2c:d3:1e:
fd:a6:f6:cb:e9:5e:28:ae:d1:c2:30:a0:ee:47:24:
97:40:4c:75:75:53:8d:67:21:08:17:ea:a5:f5:d2:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:A8:BA:2F:53:EB:E0:1E:7C:C4:A7:C7:9A:26:98:B6:19:AD:B8
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:76:3d:d3:74:11:cf:4a:da:a8:ec:88:26:31:e2:ea:ce:d7:
80:64:25:91:fd:27:33:19:c1:c6:62:85:d1:41:ed:5d:0a:80:
91:63:7d:4a:f1:8a:04:19:30:d6:75:b6:c3:49:bd:b3:f7:34:
0e:9e:bc:74:cd:e0:b6:81:67:ab:5a:d2:bb:b0:e1:3b:05:95:
a0:29:d6:b0:a8:24:67:ca:c8:89:2e:a8:b3:6e:fa:f4:09:78:
a2:df:cc:5c:a3:e3:4d:f1:85:61:8f:16:d9:9b:f1:21:52:44:
ff:01:c6:d5:c9:0e:60:dd:f8:61:b9:30:ee:99:7f:76:ac:96:
5d:87:29:70:37:33:a2:d5:92:1f:fc:99:fb:2b:a8:08:c2:e3:
b5:81:34:4e:07:c8:9e:1a:1e:3d:e2:48:f3:17:61:9b:8d:23:
d7:4d:18:9f:17:78:35:34:23:80:86:94:45:01:56:e0:4f:ab:
20:da:a3:d5:19:73:05:f5:88:ce:b6:6a:74:e1:84:a4:4f:9a:
ba:99:7a:f3:9a:31:71:22:a5:0d:1e:29:a4:0e:8a:c0:ce:51:
a9:bb:79:aa:40:fb:8b:12:62:c0:f9:ef:db:69:9e:15:f8:42:
49:95:1f:2d:20:29:62:92:c7:63:f5:02:93:3f:5b:ab:29:3a:
a2:25:ba:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:09 2026 by rpki-client