
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: gq97YgpXAuu7+4fnDwcXWOtt20s81hXYRDhz8+cd8d4=
Subject key identifier: F3:B2:17:BD:2A:B4:3F:2D:93:DC:94:66:47:01:0F:72:04:32:FC:15
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019F905A4E8E5316539EAFFDE541EBAABCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0ED2
Signing time: Thu 23 Jul 2026 19:01:05 +0000
Manifest this update: Thu 23 Jul 2026 19:01:05 +0000
Manifest next update: Fri 24 Jul 2026 19:01:05 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: zCzhHRwVCqqFzBD50h4yOk0Jont8S7hM4PIqhs62hiA=)
2: KgUafpKLQn167LugL8OB7NIxPBY.roa (hash: UwTKLcOOmGr1M5MqovXzfh3IyeeIlKdI89ngxjztStc=)
3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
5: zJpyyxzxDhN7qqdh0Mt-W4R9xhQ.roa (hash: 3iXjS3NRkOtuiwihRC5inSlg4bzXZF2ihzUz1KnKcP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:4e:8e:53:16:53:9e:af:fd:e5:41:eb:aa:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Jul 23 19:01:05 2026 GMT
Not After : Jul 24 19:01:05 2026 GMT
Subject: CN=f3b217bd2ab43f2d93dc946647010f720432fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:d4:87:d2:5b:c0:41:67:be:69:ff:33:05:
31:8e:d8:d3:48:e3:5a:7e:1f:5a:78:dc:09:3d:02:
e6:16:d3:d1:de:74:96:ed:9f:00:bd:dc:fc:d6:f9:
3a:5d:64:a8:66:03:20:db:79:a2:09:95:a6:67:3f:
df:2b:c8:78:51:ab:c4:3e:71:53:23:9f:66:14:a1:
8e:8b:31:27:f9:c6:c6:98:87:05:7a:25:f1:a1:aa:
88:93:c1:b1:f3:27:3a:2c:f8:87:40:56:fb:f9:23:
30:92:68:82:96:7e:66:dc:e2:e9:55:5f:b4:08:11:
40:34:8b:67:46:f3:e4:17:67:7d:f2:fa:38:38:5f:
a8:7f:39:1e:48:1b:a6:4c:03:d3:59:d1:23:ca:b9:
8f:d4:d2:25:30:fc:89:40:09:60:44:64:3b:ba:1d:
47:b5:d3:5c:58:d2:92:7a:c0:b6:e6:61:fc:6e:6b:
b3:20:3b:36:6c:4e:e4:79:53:8c:10:d4:28:76:8c:
8a:ad:b4:de:be:e0:d4:1e:bf:5b:23:73:85:29:51:
74:5c:49:26:c7:9c:6b:f1:3b:8b:b1:d5:81:6a:c0:
b2:1c:71:9a:cc:70:7f:50:0b:46:0a:20:4e:23:69:
7f:c0:8c:47:c1:2a:48:eb:28:e2:fc:32:f1:f3:ec:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:17:BD:2A:B4:3F:2D:93:DC:94:66:47:01:0F:72:04:32:FC:15
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2f:a2:7d:36:3c:19:00:c5:d6:28:8c:19:6e:65:d8:a3:03:
3f:fb:56:31:57:c2:f6:d3:e4:d3:fb:5e:e5:e9:5a:f9:88:be:
ce:7b:26:f1:d8:7b:91:77:24:49:2d:ef:dc:99:35:22:ee:78:
0f:c1:d7:4e:06:9a:7e:57:a1:c3:10:70:9e:5a:33:81:ef:73:
e7:de:a2:d5:b9:92:d4:e9:99:e2:d3:8c:52:09:de:9a:6b:f3:
94:26:e3:85:a0:0e:f9:fb:c8:32:e1:58:2b:e5:ed:07:09:59:
87:b9:4e:be:9a:54:9e:64:e6:5e:71:e8:14:c7:fc:9e:0b:a3:
21:11:ff:3e:98:4b:1e:bf:ed:a2:23:69:8c:1c:f5:85:fb:f5:
3e:4e:d7:8c:70:e8:33:77:65:aa:dd:1d:bf:96:10:9b:7d:5d:
85:ae:15:64:b4:72:bd:55:f3:50:7d:5a:36:2f:e9:76:11:73:
c4:10:cf:e6:f2:37:ea:bc:8b:8a:ef:ed:35:5a:11:48:4e:43:
d0:55:e6:b9:8b:f6:a6:ee:83:ce:36:21:17:6a:49:33:27:83:
64:19:d2:84:fe:b2:91:1f:97:a6:f5:50:36:84:fe:a5:8b:a4:
73:49:12:21:8d:2e:69:9e:85:9c:e4:f4:75:24:5d:a5:22:e2:
86:5f:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:01 2026 by rpki-client