Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: dDvT+wiEivyq0JHk+sjMRZGPV9WZHhQVGrq5lvHPtic=
Subject key identifier: F4:CA:9B:51:65:70:7C:19:26:25:FB:80:EB:38:03:FD:A1:88:C1:57
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 01A0D3F07665E9B55322269E1478DFAD41C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 15:02:26 +0000
Manifest this update: Thu 24 Sep 2026 15:02:26 +0000
Manifest next update: Fri 25 Sep 2026 15:02:26 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: ir2j4QQP6S1BX9G3gFvND9G97BjKytOrzIR/fTfBY1U=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:76:65:e9:b5:53:22:26:9e:14:78:df:ad:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Sep 24 15:02:26 2026 GMT
Not After : Sep 25 15:02:26 2026 GMT
Subject: CN=f4ca9b5165707c192625fb80eb3803fda188c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:e9:ae:92:73:5b:03:86:82:bb:ea:34:48:
72:58:e9:d0:33:ee:a9:8b:a7:dd:bb:77:50:cf:66:
03:79:59:12:c7:02:9f:9e:cc:df:33:1e:bf:97:49:
8b:93:8d:3d:c3:d8:b8:f0:4b:45:39:8a:5c:1b:d3:
7b:b6:b0:5a:13:1f:45:4b:fb:52:fa:ec:7b:32:18:
b6:94:be:3d:ec:9b:c7:0a:ce:0e:77:47:fa:f1:cc:
fa:38:a4:bd:a6:c4:2a:6a:0f:48:43:bf:1b:ba:84:
db:af:5b:2e:b3:87:47:4a:57:c9:21:50:97:e5:1b:
75:80:43:55:68:88:82:99:bb:5e:39:64:aa:bc:8a:
ea:46:04:82:d5:87:17:f5:f7:63:a1:f8:cb:12:4f:
c2:d0:4d:83:7b:e3:78:29:b5:10:5f:e4:cc:10:ae:
74:d5:d9:bc:80:fe:b5:08:aa:c2:c7:5e:77:8a:8e:
7d:77:db:90:79:61:46:87:e0:97:27:59:18:fc:57:
e3:8d:6a:80:7b:7d:50:8d:d2:5b:07:cf:a3:d1:65:
47:6d:37:d9:61:b6:2b:44:2d:64:29:6a:28:ad:79:
4a:aa:af:99:e9:91:67:0a:78:fc:89:a5:5d:83:8a:
a8:3f:5a:d3:c1:dd:fe:f3:5c:06:64:65:22:eb:17:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:9B:51:65:70:7C:19:26:25:FB:80:EB:38:03:FD:A1:88:C1:57
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9c:4e:dd:4b:2e:c3:60:1b:7e:f2:54:8c:24:a2:f3:e2:c1:
a3:c2:88:4d:a2:f3:05:9a:70:98:04:5f:49:cc:ef:15:8c:2f:
a7:f4:69:c5:d4:c5:04:0b:09:8c:8f:74:33:e9:53:55:cd:77:
fc:42:36:3b:c6:a3:9b:16:72:ac:95:f7:fe:47:a3:6d:20:5b:
c7:0a:78:37:98:8c:7a:c3:05:85:c1:aa:93:c9:22:28:f8:96:
41:da:05:0b:53:1e:13:ab:87:cb:f6:b6:94:19:c7:31:02:09:
83:76:76:c0:df:b5:54:38:5f:6b:db:b7:7d:8e:5e:6c:93:30:
20:d0:fa:7f:8f:cd:93:2c:01:df:1e:db:32:e3:f2:94:36:5a:
31:d2:f5:d5:f0:53:8f:b0:c2:51:16:6f:fd:43:d3:d2:c8:b8:
57:43:83:6d:79:f1:07:08:b7:4b:49:1e:c1:6c:77:16:9b:fb:
9e:5f:e8:87:4e:67:54:03:78:71:b9:c4:bd:3c:ac:c4:18:4c:
ac:d4:48:4a:df:b6:37:cc:d6:5a:ef:55:6c:9d:02:6c:74:d5:
88:27:30:cd:97:07:98:6d:86:0d:5b:0b:7f:7f:4a:37:1b:cd:
04:72:a7:bd:77:9f:27:9f:1e:b5:88:42:ed:d1:2f:28:e9:59:
5d:ca:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:15 2026 by rpki-client