Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: iMoetzFea7UYmLf1vW3CxSu3bPygvdUqbVKKD4hJ5ak=
Subject key identifier: D1:9E:D9:3E:EF:FC:12:08:C3:29:20:13:2C:75:B6:7C:02:16:ED:75
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019F905AB10A9B9F21C240D42615B57BBF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 091D
Signing time: Thu 23 Jul 2026 19:01:30 +0000
Manifest this update: Thu 23 Jul 2026 19:01:30 +0000
Manifest next update: Fri 24 Jul 2026 19:01:30 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: gBaDRfZ8N/1sClgKrEf0aoSHnipxrG52PbPdloNfcN4=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:b1:0a:9b:9f:21:c2:40:d4:26:15:b5:7b:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jul 23 19:01:30 2026 GMT
Not After : Jul 24 19:01:30 2026 GMT
Subject: CN=d19ed93eeffc1208c32920132c75b67c0216ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:1a:49:17:32:16:93:34:4d:66:d8:75:7b:
25:32:cb:5f:08:6e:ad:e5:a7:cc:d1:27:e2:e5:67:
27:8e:c7:e1:bd:15:95:18:19:54:f5:56:0e:07:42:
7a:2b:28:85:07:9c:1f:b8:24:d0:12:2e:e7:48:1f:
da:a2:1f:6b:ed:94:2b:ac:d9:57:b7:5f:e5:00:d9:
8c:d5:b7:88:a9:22:db:fc:41:20:80:00:ca:08:c0:
2f:5d:ef:7d:17:4d:8f:dc:a6:9e:71:3f:02:42:63:
55:47:15:00:b6:1c:af:2f:31:30:bc:ae:fe:33:72:
15:19:b4:83:df:7b:4a:83:5d:77:d4:dd:f3:53:5f:
89:df:ba:bd:cf:a8:0b:34:0a:53:ac:5e:b3:e9:af:
91:86:66:79:34:11:5e:a9:e6:eb:6a:b8:7e:08:b8:
2b:e2:37:4e:ed:06:3f:cd:5f:2d:e3:6e:3f:c9:ad:
22:b7:4f:ef:a7:88:50:5e:b5:34:45:11:f3:75:4b:
fc:31:6c:c2:d1:7a:5b:7b:97:c3:43:81:27:dd:f9:
a9:31:56:27:1b:de:21:75:01:f7:a4:28:1e:a9:1d:
f6:e7:8f:88:67:7d:6f:f9:c5:ce:10:0a:68:84:57:
2c:47:04:d6:91:ed:87:ad:64:24:a4:c5:b0:18:7a:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:D9:3E:EF:FC:12:08:C3:29:20:13:2C:75:B6:7C:02:16:ED:75
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:53:80:b6:31:45:e4:6e:d5:1d:2c:0f:bf:54:a9:41:a5:de:
be:26:4e:21:8a:2a:9f:6f:c1:37:ba:66:58:ce:e7:4b:9c:77:
21:af:fd:89:f9:d6:61:90:ca:00:97:89:75:7e:03:37:d6:f6:
fb:bf:9c:c5:28:92:77:ac:fb:f6:af:81:1f:24:41:9d:f1:a9:
c9:c9:82:b5:b7:02:8d:c4:a2:b3:c6:74:90:7c:2d:88:7b:dc:
87:f4:a9:ed:90:cb:49:11:16:46:63:75:c3:b9:6a:f5:fc:3b:
0b:68:de:26:5f:51:24:cc:af:93:eb:12:19:7b:11:94:5f:b1:
74:a1:72:52:6a:8d:13:76:df:aa:a4:0b:9b:c0:8e:13:e9:70:
a0:08:51:c3:b2:02:69:ad:25:64:5b:e5:6a:3e:0f:4f:e9:54:
56:05:3e:eb:f6:43:97:18:4a:b2:b1:f5:aa:11:bc:e4:ec:a8:
32:bc:41:88:39:a5:da:7e:28:8e:4b:07:0c:c5:f4:f9:44:30:
5e:b7:7d:87:85:3e:c6:26:e2:6c:d3:52:01:43:2f:d8:ab:d4:
df:bd:ea:02:fc:a0:4d:aa:57:c6:ed:d5:ab:91:68:ba:ee:cf:
56:2a:3f:a5:96:f1:5a:95:f4:1c:89:f1:71:5b:16:08:d3:84:
18:a5:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:43 2026 by rpki-client