Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: WXjCCrEn8YD48gK+AGyVV3ma6YY4y5ZueNaIM5asWFQ=
Subject key identifier: C0:F5:A8:2E:98:A5:F7:03:60:8C:DC:7A:C7:0B:6D:32:BA:3C:44:E5
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019E1D90123F91FD6E7E9966A6B6CAB60A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0305
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: s7WWgSqsca9eNtvMrtSB47SvGZsZZQP4dfD2nkjNU0g=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:12:3f:91:fd:6e:7e:99:66:a6:b6:ca:b6:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=c0f5a82e98a5f703608cdc7ac70b6d32ba3c44e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:8c:1b:04:3b:7c:ba:65:82:cb:9e:8c:b7:
81:29:73:8b:47:c7:d0:2d:46:66:81:cc:4a:d0:e6:
ce:11:3b:a7:f6:21:42:74:e1:fe:fc:91:e4:10:ff:
14:8f:b9:f2:cc:7b:2c:43:f7:a7:87:ba:5e:d0:6f:
ff:bc:47:0b:eb:22:2d:89:c5:8d:74:9a:2c:f0:0b:
6d:fa:fc:34:99:8e:4e:84:5f:59:7e:e1:8d:96:81:
5f:05:f6:da:77:08:da:58:05:71:87:49:e9:2d:56:
7c:b7:f5:5d:61:0a:ed:63:51:f8:1b:e5:2a:5c:a4:
9b:f2:13:53:04:29:36:d7:24:85:2c:eb:47:a3:5c:
52:9c:47:61:98:f1:34:de:5f:60:b1:be:a9:58:81:
29:df:3e:98:f4:a9:f4:b6:a4:1f:05:d0:d5:4e:22:
eb:33:0d:53:5f:b7:f4:60:5c:61:34:1a:69:b7:bc:
aa:1a:02:ee:1d:5d:7b:dc:61:37:24:df:a2:40:cf:
ec:61:c1:1b:08:c5:48:cc:d5:41:77:93:7f:db:e7:
ba:55:60:f0:48:58:31:02:06:7b:11:3b:b1:01:97:
07:4f:bb:f9:50:8a:32:85:74:91:2a:c3:b9:a8:76:
89:e1:1c:c6:ab:6e:32:05:c5:f2:7f:47:7e:2b:95:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:A8:2E:98:A5:F7:03:60:8C:DC:7A:C7:0B:6D:32:BA:3C:44:E5
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:38:bb:90:f1:33:5a:20:06:b4:e5:3d:2e:21:5a:cd:d3:
61:ee:fe:cd:f7:55:29:84:fc:d9:66:04:bd:b9:a1:66:ca:77:
db:ae:b6:5c:af:d5:fc:89:b7:41:d6:a6:b4:9b:60:74:30:a8:
19:9d:86:be:68:47:3a:f7:5e:8e:be:1c:51:6a:a6:ca:d7:b6:
cd:6a:47:8c:0d:c5:d7:d2:73:0d:c3:6a:ca:6f:83:e5:4f:54:
68:d0:bc:5d:94:8d:95:22:99:04:6b:3f:58:e7:b9:62:80:50:
5f:f7:52:ae:a8:53:7f:60:a6:8c:b3:c2:cf:ea:e4:da:30:21:
a2:2c:54:fa:d6:82:b6:64:b7:ad:07:9b:02:89:9f:d6:7e:9d:
3e:3e:e0:d6:83:7a:86:c6:31:c5:c6:80:71:c0:2d:0b:3f:18:
27:5d:2c:97:89:18:d1:80:44:ff:22:be:46:b2:93:1e:41:71:
de:13:5f:26:9b:28:be:85:bc:2f:39:04:2c:40:0b:9a:5f:c8:
00:c5:e5:22:9a:7e:21:0e:20:51:c5:d5:0d:97:b0:3e:5f:17:
d5:ba:c5:3f:65:03:f5:02:70:92:e7:b8:79:64:a2:cb:87:3c:
ee:99:18:49:42:8c:f1:37:61:00:65:bf:0d:0d:76:7c:03:8a:
a6:aa:ab:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:33 2026 by rpki-client