Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: Dg16QM8J4BzT0Scc9sq8j1CgmynZGVbr8/H/PDkmmwE=
Subject key identifier: 5B:48:1D:C1:D6:03:E2:4A:81:E8:DC:CD:76:26:67:3A:FF:2E:15:8E
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 01A1DFF1AD069EDC5206AF5192F860C20409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 18CD
Signing time: Sun 15 Nov 2026 16:01:59 +0000
Manifest this update: Sun 15 Nov 2026 16:01:59 +0000
Manifest next update: Mon 16 Nov 2026 16:01:59 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: KXoDy5rbczBaJX4iJgB+n1D40OLw3k7CeUPoC9Ir78U=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:ad:06:9e:dc:52:06:af:51:92:f8:60:c2:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Nov 15 16:01:59 2026 GMT
Not After : Nov 16 16:01:59 2026 GMT
Subject: CN=5b481dc1d603e24a81e8dccd7626673aff2e158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:6d:f1:af:e5:bf:72:42:9b:b0:04:91:88:
32:f6:59:89:01:ec:1a:fc:bc:2e:1f:88:1b:51:b1:
f2:87:fb:ff:0e:fc:87:2b:99:f3:0c:9a:db:02:56:
87:64:f6:00:4d:8e:66:49:11:f2:39:47:7c:53:9a:
d5:9c:c2:4b:05:de:0b:4b:c4:ea:ad:27:e7:59:2b:
8d:75:cc:69:01:0f:e3:79:7f:54:91:67:56:6c:a9:
da:34:d3:5c:16:8f:10:28:f2:52:64:c2:a0:a2:03:
a4:1a:d4:b2:5f:b0:81:d1:8a:95:5f:cf:16:b4:c9:
c4:30:ff:14:ac:be:7e:a3:eb:5c:fb:9e:92:e2:97:
4b:fb:7a:f9:20:fd:4f:23:a7:af:a7:84:20:86:d5:
a7:b7:8e:a9:12:58:e2:e8:ea:e0:81:2d:44:91:29:
72:4a:94:f4:fe:66:de:8d:7a:7d:84:ee:0b:91:38:
89:5d:48:8b:23:50:f1:73:2e:3b:c5:2e:51:3e:35:
b2:bf:94:d8:79:1c:0b:33:e0:bc:98:d6:61:48:f2:
72:cb:07:02:90:e9:0b:87:1c:40:d9:65:e6:7a:16:
61:4c:8f:f8:4f:df:86:5f:9a:dd:cb:6c:64:88:ef:
85:4e:09:f5:5f:d2:88:78:e4:64:60:93:30:0b:a8:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:1D:C1:D6:03:E2:4A:81:E8:DC:CD:76:26:67:3A:FF:2E:15:8E
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:74:a1:08:1b:f3:37:55:6a:0f:6d:32:09:3f:22:bb:55:
12:19:97:d8:31:cf:85:c0:0b:13:17:0f:59:ff:0a:3f:84:3c:
22:cd:0f:c8:3a:6a:96:56:18:34:89:dd:c9:d8:be:3e:75:b6:
59:5b:8b:41:4b:b5:b8:38:be:9b:67:52:8c:be:b7:c5:11:af:
51:44:c6:2b:07:c4:48:e0:55:57:84:fc:0f:c1:53:c8:72:f7:
0e:07:f6:69:fb:87:c5:c8:00:c8:43:cf:f6:f5:72:7d:ab:39:
9e:50:7a:be:46:1b:0f:87:2c:05:2d:22:86:83:4c:92:6a:ed:
ff:23:07:c1:89:6c:b1:8d:5f:cc:1e:46:3e:a8:57:3e:98:0f:
82:98:d2:b2:c3:7b:35:ec:9f:81:a8:6b:8b:9d:3a:78:36:e9:
cc:0c:26:64:2e:d1:b3:1a:2c:a0:04:75:31:56:7e:a7:25:d1:
1e:4e:06:77:bd:cb:f3:2b:1e:52:da:b9:f9:87:ca:0d:7d:48:
69:ff:b3:4c:22:20:ac:6f:a6:aa:9e:6a:fd:f6:15:f7:3c:50:
ca:39:e3:e3:90:9d:81:99:16:de:34:ac:a7:c1:8a:58:20:7f:
42:83:cc:b5:06:e4:6f:c1:91:02:fa:55:ab:a4:c4:ac:29:88:
45:e1:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:26 2026 by rpki-client