Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
File: 2gKPaUMDSrdg84rkIJFU4iVciek.mft (raw, json)
Hash identifier: vQztagdfXQZ8nIdoR80qgSdgoI+Tubb8JGbBvLJm4xg=
Subject key identifier: C8:8B:29:C0:76:14:84:83:26:09:6D:8C:EA:D8:B2:2A:F0:7F:59:9D
Authority key identifier: DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Certificate issuer: /CN=da028f6943034ab760f38ae4209154e2255c89e9
Certificate serial: 019F9247EB710269F998A87206264CFB275F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
Manifest number: 0927
Signing time: Fri 24 Jul 2026 04:00:14 +0000
Manifest this update: Fri 24 Jul 2026 04:00:14 +0000
Manifest next update: Sat 25 Jul 2026 04:00:14 +0000
Files and hashes: 1: 2gKPaUMDSrdg84rkIJFU4iVciek.crl (hash: IKFzzBf6X/Oh2sROSGtoiwo7NjRbfUOfRRwrd2LK+1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:eb:71:02:69:f9:98:a8:72:06:26:4c:fb:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da028f6943034ab760f38ae4209154e2255c89e9
Validity
Not Before: Jul 24 04:00:14 2026 GMT
Not After : Jul 25 04:00:14 2026 GMT
Subject: CN=c88b29c07614848326096d8cead8b22af07f599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:cf:35:c3:c2:7e:b6:80:6a:5f:b0:02:c7:
c3:41:57:c9:b5:38:a1:ae:d6:d3:09:0b:8f:8f:4c:
ba:96:18:24:3d:1b:54:10:ad:93:97:ba:b9:7c:56:
a4:05:9f:91:43:80:c6:a4:8b:37:b6:92:19:7b:36:
9c:83:22:89:7e:3a:10:a6:38:82:78:dd:65:94:70:
c0:e4:43:ff:87:e6:79:2e:c3:bb:06:69:e6:0f:c3:
c2:0a:13:ea:74:9b:3d:a1:95:e4:48:2d:d0:44:22:
38:b5:a5:b9:82:de:92:3c:2c:72:f9:d1:89:1e:1a:
09:0f:7b:9e:1b:5c:bb:8b:0b:a2:18:30:6a:ac:32:
d0:bd:77:76:5c:a8:ab:08:86:ec:57:73:df:54:66:
7a:cb:6b:c9:b3:ed:23:fa:e9:13:04:26:6a:6d:ce:
3e:82:96:c9:c3:34:ec:e0:77:bc:f9:77:72:4e:11:
aa:53:35:20:24:29:2e:de:ac:0c:e5:07:a9:06:0b:
cd:77:fd:1b:91:c0:47:ee:00:89:50:b7:36:ed:ba:
f4:ad:2e:e2:1e:36:62:de:fc:1d:99:8a:7f:74:2d:
49:a3:2a:b4:21:b1:51:34:4a:02:49:d3:05:54:34:
40:f9:82:04:ee:0e:6b:33:b6:72:fc:fd:7a:66:89:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:29:C0:76:14:84:83:26:09:6D:8C:EA:D8:B2:2A:F0:7F:59:9D
X509v3 Authority Key Identifier:
keyid:DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:ff:0b:5c:1a:9a:d9:68:3c:e0:e6:e5:44:31:85:01:17:
ae:2b:b1:1d:48:7f:da:f5:fa:8f:73:de:17:8b:47:e1:84:03:
12:2c:d1:fc:da:11:94:75:54:3b:91:23:b2:29:57:90:50:c3:
62:48:f4:f8:d7:34:93:ce:84:18:c0:e8:4f:74:95:b3:bd:f7:
eb:5c:72:66:ec:85:54:51:44:8c:09:3e:e2:81:6d:e7:67:07:
08:a3:a7:99:d1:82:6a:e1:73:01:09:0b:dc:2a:9f:3d:bc:60:
c2:4d:7d:e9:51:3b:7e:a2:a0:e1:82:2f:b3:7f:92:c6:d9:10:
7f:0d:17:3b:8c:45:7f:dc:bd:20:be:5a:c8:ae:5b:dd:5c:6e:
43:08:0d:5d:ab:47:7b:ae:05:2f:6e:0c:e5:4d:2a:bd:83:e4:
00:05:23:5a:34:57:f9:1e:ed:e9:0b:7e:ba:26:d5:1f:fd:75:
6f:64:6f:52:6e:af:22:f1:d1:75:cb:f4:57:61:7e:d6:56:3f:
83:dc:b7:29:ed:fb:d5:ae:d8:69:13:3f:61:9d:de:d4:c0:c4:
c1:92:39:42:ba:8b:bc:1b:65:ad:4a:65:90:2c:f0:fd:18:da:
db:fa:c4:a8:0a:57:cc:d5:91:14:75:e1:ac:ea:57:ed:a9:40:
94:31:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:10:54 2026 by rpki-client