Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: iK11MAj5MHCq/8gzYNA/VGCRauXjPCcUut7/2STBeHU=
Subject key identifier: FC:B2:1E:8C:0C:66:03:66:F8:AA:ED:18:B3:1B:F3:38:81:A2:88:BF
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019D284E09FA2F7C9E48E1CA22B34E32BD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 07DE
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: aRNaGx/+WUPM3kR8JqSZsnT5FHwtAVBhT+ER9HZpWHQ=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:09:fa:2f:7c:9e:48:e1:ca:22:b3:4e:32:bd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=fcb21e8c0c660366f8aaed18b31bf33881a288bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:15:e9:f8:94:c3:fc:de:cf:3e:17:8a:81:
5d:e1:15:de:0d:5f:06:b7:52:5b:5e:6a:12:5e:a7:
a0:f6:38:26:0a:57:71:cb:b7:8a:57:8a:6d:6c:3e:
8a:e8:25:60:d8:92:a0:22:5d:8e:bd:7f:5c:cc:b0:
77:9c:e1:f4:06:b4:6b:30:8d:a6:a3:65:8d:37:5b:
41:8e:18:e9:02:e5:e1:d3:3b:fb:ee:d8:99:c2:e7:
c3:c1:58:04:fe:1b:5b:c8:aa:18:ba:39:e4:62:7b:
59:0a:c8:43:3c:48:d9:07:bf:31:80:74:3a:66:f8:
a2:bb:ba:05:84:2d:cf:f0:eb:3e:06:99:d0:cd:f4:
ae:87:84:a2:31:a4:86:d7:8e:48:ac:c9:f0:d9:c7:
f2:d4:c6:91:69:6f:fb:46:7f:21:fe:fd:4f:0e:d3:
11:2a:fc:bf:c3:7c:40:ad:65:b4:2a:bf:be:bc:f2:
f7:90:9b:2f:4f:1c:12:7a:9f:90:43:55:b5:d3:33:
cd:52:5c:91:22:8e:1c:ca:a2:98:a3:b3:58:0e:22:
c9:16:78:e1:90:c2:94:06:48:b1:46:85:98:d6:62:
76:aa:56:3c:0b:e0:91:3f:8d:b5:7c:11:b0:a8:df:
36:25:93:07:81:0b:ed:d1:b1:f0:9e:c8:d4:2c:73:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:1E:8C:0C:66:03:66:F8:AA:ED:18:B3:1B:F3:38:81:A2:88:BF
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:01:a4:de:47:96:52:8a:ef:c9:35:17:b0:18:e4:e6:b9:78:
f2:ae:c0:ad:4f:cc:fd:0d:47:2b:d1:28:e1:33:be:43:d7:b2:
7f:ff:c7:b1:63:75:cf:20:f7:70:28:27:26:8d:fa:1d:87:cc:
60:c0:e5:be:23:ae:e9:c9:fb:5f:1e:e2:a6:be:1e:4f:6d:19:
0d:88:d3:59:3d:e0:e7:f5:6b:5b:85:8a:71:d4:2b:7a:d3:4c:
1e:13:10:58:5e:90:48:0c:70:6f:63:a5:24:58:72:c1:aa:50:
00:ca:de:03:3a:ed:22:37:39:ec:78:a6:37:e2:35:de:c6:27:
b3:02:e6:5f:1e:45:95:79:3c:58:64:4e:14:e8:d3:df:3c:8d:
75:4f:4b:54:9e:3a:77:15:4e:93:88:34:b1:d1:00:e1:43:3c:
5a:23:ea:68:f7:e1:31:ca:46:67:62:d1:70:15:2a:44:d2:9a:
37:99:5e:9b:f2:41:5f:04:37:a1:d3:22:fc:bb:3a:0c:2f:08:
4c:ee:0c:fa:ad:d1:35:87:8e:fe:f3:d0:ac:72:69:5f:e8:9f:
0a:84:b3:e4:0d:bf:c2:38:c4:d5:5b:65:c9:30:1f:9f:a7:39:
31:2a:91:9d:78:b6:6e:c4:15:02:79:e7:a4:2e:f3:a3:05:18:
bb:31:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:31 2026 by rpki-client