
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
File: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft (raw, json)
Hash identifier: 544aHweD/ELBEIYp2MMKrH6CSgHekQNH4BOg2OkLYi8=
Subject key identifier: 61:1F:4D:E5:86:10:D8:00:96:58:C4:A8:70:C1:33:86:EE:F9:E7:64
Authority key identifier: DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
Certificate issuer: /CN=da0b3b7a7f85604122ffd632e29753657031c42b
Certificate serial: 019F905A67311BA97B1AAB94929F5B5594F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:01:11 +0000
Manifest this update: Thu 23 Jul 2026 19:01:11 +0000
Manifest next update: Fri 24 Jul 2026 19:01:11 +0000
Files and hashes: 1: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl (hash: VDL0XusD52qgyw/7e18hdihkMe+7ZkP1z7DhXatJkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:67:31:1b:a9:7b:1a:ab:94:92:9f:5b:55:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b3b7a7f85604122ffd632e29753657031c42b
Validity
Not Before: Jul 23 19:01:11 2026 GMT
Not After : Jul 24 19:01:11 2026 GMT
Subject: CN=611f4de58610d8009658c4a870c13386eef9e764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:27:a5:d7:34:23:b6:d1:bf:cb:17:b8:20:
80:e0:5e:c0:9c:e6:2f:61:06:d5:39:c9:42:7f:d3:
25:67:f0:6a:91:f1:f6:3d:7f:fa:b5:ad:4c:38:d9:
df:df:f6:36:a3:bb:4e:43:5b:26:28:31:4a:b4:8a:
84:cd:f6:e8:62:4e:5c:3e:b3:e3:66:21:26:6a:ee:
d1:09:9b:d8:95:44:63:bd:aa:93:d5:66:14:90:45:
23:42:ec:a7:77:af:46:e3:af:cf:59:53:e2:fb:9d:
f2:48:f4:6a:0e:da:74:57:e9:5c:50:3d:68:7d:41:
ad:eb:e1:30:e3:df:67:d1:f2:47:ed:5e:36:0b:5b:
7b:bc:ac:e3:ce:1d:5d:a6:2c:a5:1d:14:4d:df:3b:
a9:f6:f4:6a:6e:53:cd:a1:d7:6b:ee:41:95:d9:57:
b9:0c:ca:e8:cd:55:d4:af:10:cf:11:36:77:72:20:
80:c9:98:38:31:24:27:62:3f:e0:00:e0:16:59:38:
56:e3:f7:64:18:71:5d:a4:bd:79:88:c8:45:2d:15:
09:e1:e7:46:b7:ec:13:bb:8b:30:a0:b9:56:c7:f0:
1b:d9:85:0c:a1:ae:bc:d3:8c:20:5e:0a:a9:f1:20:
8a:61:f5:21:20:e5:dc:06:9a:40:70:84:1c:29:40:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:4D:E5:86:10:D8:00:96:58:C4:A8:70:C1:33:86:EE:F9:E7:64
X509v3 Authority Key Identifier:
keyid:DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:02:de:51:b9:b6:da:91:d0:5c:35:52:dd:bd:94:95:18:
de:72:3f:ac:15:8a:f0:aa:55:1b:00:a1:ed:0b:46:8d:2b:3a:
84:30:a1:53:6c:6a:c7:9d:96:16:ea:83:0e:2b:04:ed:58:e2:
b4:e9:ae:43:e1:a2:82:af:11:37:26:b7:27:b4:1a:7e:f4:90:
97:c3:a8:65:e9:68:da:b5:20:b0:de:7a:1a:ac:11:d2:d4:64:
73:5c:dc:b2:6c:92:c6:0e:5c:0d:b4:89:9e:2f:df:ae:f0:20:
8b:2c:96:75:b5:c3:5e:6e:e5:55:af:81:b4:aa:8a:4a:c2:2f:
1f:ee:e8:55:47:97:ee:ba:c7:84:7f:2d:51:6f:9f:f9:26:db:
48:e2:5d:2d:fb:23:a7:0c:ba:ab:3a:ae:16:1d:9a:87:37:c5:
13:c8:76:0a:90:54:5e:fa:d4:e4:d6:54:52:c0:87:c1:74:28:
3e:e1:4d:b3:94:1a:2f:52:6e:f3:86:9c:ef:50:69:b2:83:33:
05:71:33:07:0b:1b:fd:df:0d:2f:7f:5d:ff:fb:49:41:dd:2c:
32:7f:67:1b:41:4f:ab:f3:da:df:7f:54:6a:e1:11:5d:22:29:
91:a9:ed:a6:f0:96:d4:e9:eb:bd:17:2f:2b:7d:d9:a7:4d:fc:
c7:b3:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:58 2026 by rpki-client