Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: WdBDeGMBif93LvMCXNfz3vKYxNQBT5SOSXAnXVwVMtM=
Subject key identifier: 07:15:A8:42:BF:CC:E8:C3:71:D4:1A:FB:30:07:2E:CD:A4:9E:8B:CD
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 01A0D07F99F598637ABEE02D8AEBCB0A015B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0509
Signing time: Wed 23 Sep 2026 23:00:18 +0000
Manifest this update: Wed 23 Sep 2026 23:00:18 +0000
Manifest next update: Thu 24 Sep 2026 23:00:18 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: rvqTeIlbxk0EXoDiPwyxMowSC2EZpr+EWZXr53W7iDc=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:99:f5:98:63:7a:be:e0:2d:8a:eb:cb:0a:01:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Sep 23 23:00:18 2026 GMT
Not After : Sep 24 23:00:18 2026 GMT
Subject: CN=0715a842bfcce8c371d41afb30072ecda49e8bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:c6:19:ea:95:37:4c:e8:d3:da:15:40:cb:
5e:f9:a4:6b:dd:4c:4c:5f:ef:88:e1:f3:61:ba:81:
c2:fd:96:04:d5:69:e1:0d:8b:b4:a6:c3:67:41:b8:
69:b4:49:0e:75:17:e8:70:96:51:36:85:0a:d2:e8:
94:db:37:3e:35:13:fb:43:5b:02:68:92:6e:dc:cb:
1f:f1:6d:18:be:99:90:ab:1f:43:3e:54:6e:32:c0:
8b:40:ae:75:2d:d8:5b:12:e2:df:4c:cb:ee:bb:ca:
16:c8:93:6e:f4:b6:2b:84:5c:ae:53:74:3c:57:7b:
d4:fa:6a:f8:e0:e5:ca:fc:69:e4:34:56:85:89:e3:
db:54:7d:fd:2e:4e:0c:7d:59:7b:a3:d2:8f:de:dc:
ad:9c:f8:6d:42:e4:48:c4:6f:04:d2:3c:8e:ff:59:
0f:ab:63:0e:ee:e7:ad:4a:f1:ef:dc:ef:21:71:1e:
65:66:1e:f4:2c:f1:08:b7:49:17:87:00:9b:fa:3c:
2f:ba:ab:c2:bc:51:7b:2b:c3:bd:2d:53:4f:31:9d:
35:7a:77:ee:67:83:f0:8e:bc:29:19:34:fa:c0:60:
ee:86:34:c2:ff:d9:6c:e7:25:5f:38:2d:2c:6d:1f:
d1:18:74:44:e3:38:97:28:b4:50:ea:5c:e9:a3:ff:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:A8:42:BF:CC:E8:C3:71:D4:1A:FB:30:07:2E:CD:A4:9E:8B:CD
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:25:8c:74:0c:75:09:01:d8:78:b9:f0:88:17:73:19:ac:
a4:64:35:54:92:0c:13:e6:20:c0:8f:b2:36:a3:e5:85:bf:c8:
f9:9d:4e:11:43:29:6b:fe:b7:58:7a:b1:72:f1:9f:46:32:ba:
ee:79:bf:23:4c:2f:24:90:a6:43:d5:cb:8f:59:be:4c:45:22:
09:42:eb:da:d7:72:11:c0:cb:6e:fb:c2:1b:0a:09:b0:db:64:
d0:cc:9a:8f:1d:4f:de:21:51:2b:1c:f1:c2:99:05:32:cf:5a:
70:25:57:6b:6c:3c:ac:76:eb:29:aa:b9:c0:b7:d3:c1:1f:96:
cd:11:a3:37:a4:a6:7e:cf:6b:3e:59:a1:ee:a6:fa:61:a9:0a:
af:ed:ab:ab:8a:57:4e:2a:90:7a:ad:dc:5c:bc:00:90:85:38:
1e:59:d8:cb:03:51:b1:76:e8:be:e8:12:30:5e:f4:b6:43:fb:
d5:e6:d7:3c:42:90:14:e2:8f:24:b2:b1:de:f6:5e:e6:d0:a1:
3d:a0:5e:f1:03:0e:b7:24:74:c0:34:80:f3:39:06:14:49:3a:
49:f3:ef:45:f9:f7:98:d9:a1:84:41:7c:c4:5f:75:96:b1:f0:
37:56:1d:6d:77:8e:13:46:ad:06:d8:22:8d:4c:12:84:bd:02:
97:99:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:16 2026 by rpki-client