Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: z4+2T68EHRp6PUWW7Yoo6GKAv9WoOMxvVt2ZhwzYEdA=
Subject key identifier: 8D:6A:D2:D3:51:18:0C:75:55:47:61:1E:5E:A3:F1:BB:78:38:7C:3C
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 01A0D2DEB4C64A6DDCC4A81D429FDB42F0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 046E
Signing time: Thu 24 Sep 2026 10:03:25 +0000
Manifest this update: Thu 24 Sep 2026 10:03:25 +0000
Manifest next update: Fri 25 Sep 2026 10:03:25 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: 72teB2KBAj2LZD1KjH6ee2KNvHMZxUux5lzBcuPCOj4=)
2: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (hash: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:b4:c6:4a:6d:dc:c4:a8:1d:42:9f:db:42:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Sep 24 10:03:25 2026 GMT
Not After : Sep 25 10:03:25 2026 GMT
Subject: CN=8d6ad2d351180c755547611e5ea3f1bb78387c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:a0:46:de:ff:e5:34:93:87:3c:18:8a:80:
24:50:5e:61:95:18:e3:47:f0:aa:c2:75:3e:0d:cb:
13:38:cd:2c:ac:0d:5f:a8:68:4c:ba:0a:e0:7b:b5:
1a:2a:be:d8:f1:a8:88:ff:1f:49:68:2e:6b:57:96:
fe:c1:ea:69:61:5f:3d:e4:f0:c6:09:1e:a0:1a:10:
a2:e3:c8:41:1b:db:41:5e:72:6d:68:8c:6d:44:b9:
90:bc:2e:97:eb:d4:65:61:d0:be:0c:67:a1:2f:41:
81:3f:80:e0:63:b9:75:af:55:e6:e5:dd:45:64:37:
50:01:65:74:5d:15:ba:5f:a2:27:91:0c:bb:e1:63:
4c:f3:81:77:9c:06:b0:2c:31:6a:88:f8:99:bc:38:
cb:9c:95:7c:30:51:91:6f:dd:2d:f8:2d:8f:3f:42:
e0:8b:3b:65:bf:e2:7b:ac:96:dc:f9:2e:ff:26:3c:
d7:8d:f3:d6:8a:61:cb:1d:ec:31:40:c6:f2:2a:5b:
99:f3:4e:ad:28:d8:2d:9c:b1:4f:fd:23:21:c5:ee:
26:9d:a4:f0:89:28:14:e1:8e:d0:e1:8d:8c:09:80:
f5:9b:b1:bf:b9:db:b0:8d:85:ba:d3:a0:49:c4:37:
e4:8c:a3:5c:3b:4f:4b:45:ee:fb:f8:10:43:9a:a8:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:D2:D3:51:18:0C:75:55:47:61:1E:5E:A3:F1:BB:78:38:7C:3C
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:94:f6:dc:3a:31:8f:df:7e:e8:1f:13:6f:f2:0e:49:ab:
cf:8a:19:e5:ff:8a:4b:4a:74:83:51:52:96:80:d8:c3:8e:d8:
e2:d8:13:01:52:c4:5c:b6:80:11:1a:e6:d0:e4:9f:76:7c:70:
a7:2e:65:a8:89:bf:1c:0d:1a:40:f6:a3:24:05:4c:44:d3:8b:
f4:aa:d2:90:a6:3d:d7:89:3c:6e:b7:d6:67:5c:77:de:58:03:
ae:21:73:de:08:e1:42:7a:36:f2:59:8b:ea:ee:84:c7:6d:bb:
27:83:6f:5d:0f:1b:35:58:5f:8a:f5:f8:82:20:e2:80:90:96:
37:53:c1:53:69:9c:e5:3f:85:86:ac:76:9d:72:d6:54:96:c0:
64:e5:57:45:02:b6:a7:f8:7a:48:10:8c:e2:15:ed:09:6e:9b:
67:62:40:e1:b2:a3:35:65:64:06:77:2b:a8:ca:93:78:03:f2:
42:31:5b:fd:f7:3a:39:75:c7:73:4d:fb:3d:cb:aa:62:f0:94:
eb:dd:9f:31:2a:98:65:ad:76:b7:dd:ab:87:61:26:48:e7:12:
b8:3d:7f:9f:2b:79:ee:d8:31:b4:fe:35:52:f5:4e:f9:34:97:
0d:6d:5b:f7:c9:2d:f8:93:17:60:9f:f2:10:63:33:03:57:16:
9a:57:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:45:27 2026 by rpki-client