Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: bHpipihPjNU6AVHbg++Eey4hyLVkp4/8IemhR05UmWk=
Subject key identifier: 06:59:A9:67:9D:3A:AB:66:50:31:05:F9:36:35:61:63:1D:24:E4:C3
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019F8F7E851F3EF649BEE78A292326D7BB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 15:01:01 +0000
Manifest this update: Thu 23 Jul 2026 15:01:01 +0000
Manifest next update: Fri 24 Jul 2026 15:01:01 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: gch7Q/Qo4tj/uklvBqo3cQ4rhtB9wkiw9gKq9gLWoW8=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:85:1f:3e:f6:49:be:e7:8a:29:23:26:d7:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jul 23 15:01:01 2026 GMT
Not After : Jul 24 15:01:01 2026 GMT
Subject: CN=0659a9679d3aab66503105f9363561631d24e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d1:0c:a3:fd:7c:73:25:34:08:0f:e2:2c:80:
07:9c:4a:03:b1:21:a6:d0:56:2b:8a:00:59:85:c5:
0f:b5:50:f0:ba:b5:0d:f0:4d:f5:20:30:31:b5:bb:
b7:69:22:d6:0d:5f:b3:b4:e1:bd:17:09:2e:d1:84:
f8:41:f4:18:82:84:ab:c1:ba:61:98:f2:88:be:ee:
d7:52:0e:b1:04:2e:8c:5b:12:5f:69:d0:f0:29:59:
23:84:d9:85:a3:cc:67:8c:46:d4:01:eb:69:2c:b5:
bb:17:b1:36:e1:5c:4c:2a:77:e5:90:17:f6:31:a6:
3b:26:f7:91:7a:09:dc:71:58:a9:fc:10:b8:a1:e7:
af:90:0b:c0:75:c8:cc:96:fb:48:0f:e4:ad:04:cd:
ab:9b:50:d5:05:cc:d0:3d:25:b8:14:74:0e:6a:34:
a2:db:44:82:3b:fa:40:6b:fe:6b:03:63:33:16:3e:
9e:a0:a7:2c:a3:10:a1:ef:07:56:1f:f6:29:3d:36:
6e:cc:9a:94:e5:c9:97:17:a4:63:28:66:0e:f1:c4:
68:64:fa:e9:b8:8b:57:0b:a3:3a:4f:56:d9:3f:d2:
b9:82:f5:ed:6e:ac:90:38:e7:46:89:ef:bc:57:25:
8a:8f:df:b7:1b:d2:85:84:38:76:fa:a1:98:55:f7:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:A9:67:9D:3A:AB:66:50:31:05:F9:36:35:61:63:1D:24:E4:C3
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9b:f7:aa:39:3b:ae:f7:5c:a9:51:2a:7a:69:38:b7:a8:c3:
68:50:b3:68:b7:7d:ea:90:f4:37:b2:a2:ac:fd:2d:0b:bf:34:
bd:55:20:ea:df:ca:b7:bb:44:ce:6c:36:c1:19:74:5b:7b:39:
da:97:4d:ac:ba:44:b7:dc:7f:2b:3e:ba:13:35:65:e0:0a:c3:
7c:85:bf:07:46:19:31:1d:8b:87:3c:7c:a0:51:f0:d0:9f:67:
c2:1d:01:f7:a7:3b:03:3f:2b:98:08:ad:47:35:c9:bc:2c:3e:
e6:dc:ef:48:6a:b1:ed:28:ff:1b:83:ab:54:f7:17:99:48:c8:
ef:ba:5a:a4:d7:af:67:c5:8c:8a:6b:ed:6f:f1:17:00:1b:fd:
91:75:0b:9a:5a:d4:42:03:10:ab:84:34:de:cf:a7:7a:d9:39:
75:f5:59:0a:10:8a:86:bc:09:b2:ca:37:5d:7d:19:c7:8a:f9:
fa:1f:5a:26:28:5e:90:e3:ef:d2:d0:53:34:bf:33:bc:5a:8b:
15:fa:ed:33:8d:c8:6f:fb:cd:20:ac:7f:60:ff:2f:6c:bb:e5:
ee:ff:cc:33:f2:42:2b:62:87:ef:03:06:3b:7f:f4:63:0f:00:
17:8b:1e:70:b6:57:83:83:fe:88:52:db:da:09:33:da:bf:fd:
e1:2f:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:51 2026 by rpki-client