Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: 0gppd5Kp6+7FhD7p4Fo/mecPffMhqifXi9ZiPAz68o0=
Subject key identifier: 29:C7:CE:05:F1:40:DB:91:FF:FF:76:B2:0A:57:9A:AF:CF:13:F8:13
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019D2884AAE983EAC628B35DFDC795C264DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 16EB
Signing time: Thu 26 Mar 2026 05:01:16 +0000
Manifest this update: Thu 26 Mar 2026 05:01:16 +0000
Manifest next update: Fri 27 Mar 2026 05:01:16 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: OFhEtNHHvzV1dTmrZQROKntJtOoAUiiZJVdB6+5a/qM=)
2: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (hash: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:aa:e9:83:ea:c6:28:b3:5d:fd:c7:95:c2:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Mar 26 05:01:16 2026 GMT
Not After : Mar 27 05:01:16 2026 GMT
Subject: CN=29c7ce05f140db91ffff76b20a579aafcf13f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:b0:7a:54:31:e5:84:66:d8:3a:1b:a5:89:
57:7b:33:e4:87:4d:21:5c:b3:0e:63:df:83:26:8a:
8e:ef:9f:f2:2a:1f:aa:27:f9:24:16:df:45:a5:0f:
6b:b2:14:8d:2d:40:1f:e8:c3:6c:3c:10:52:69:fa:
96:9f:9e:1e:7a:c3:24:e8:e6:d7:83:35:8c:5a:de:
db:81:91:02:5f:82:1c:c6:f5:63:e0:76:9f:b9:43:
7c:52:b5:43:f7:f7:f4:02:1f:fd:93:b8:e2:d2:13:
c7:05:39:ec:a7:f7:41:da:5f:37:51:12:0d:88:20:
8f:c2:44:3b:4f:b0:21:c2:ce:f4:53:a4:1c:38:d0:
45:07:53:e9:45:81:7b:ae:bd:8b:f9:44:7d:be:4b:
cb:ef:f1:5b:9b:70:db:3c:46:5a:ff:29:6e:15:e5:
53:4b:5d:62:d4:93:c7:1d:d3:9d:72:34:f5:a0:5a:
99:7a:0e:19:96:e0:f0:cc:b9:6d:6d:fa:58:8b:75:
f4:ef:15:6e:92:70:ec:62:fe:c4:b8:1b:c0:a1:e5:
14:cf:e0:83:fb:7f:2d:1a:1b:fd:36:07:1e:ab:6f:
56:92:36:06:21:e1:9f:0b:ca:b5:d3:57:b6:a9:df:
73:63:0e:ba:fb:40:ce:b8:21:94:67:f1:c3:3a:90:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:CE:05:F1:40:DB:91:FF:FF:76:B2:0A:57:9A:AF:CF:13:F8:13
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:70:35:4f:2b:ff:86:f3:e2:b8:46:6d:05:19:96:59:aa:
ab:66:d5:39:c8:02:dd:0a:d5:f0:4c:8e:94:16:07:96:08:48:
0e:76:6f:a4:d4:ce:ac:5b:42:5e:06:2f:5e:a4:88:a6:75:1b:
df:fe:89:2a:3e:f1:c3:ea:d6:5d:ce:d3:f0:12:29:5a:c1:42:
38:01:5a:3c:78:56:58:ac:9f:78:3e:19:a2:c3:ad:2c:3a:5e:
f0:56:ad:dd:2f:55:5e:c4:27:f6:c6:2b:f5:7e:4d:48:42:9e:
f1:4b:5e:1d:22:1a:be:16:c1:9c:d3:6d:8d:27:97:43:05:34:
9b:34:dc:cc:29:8d:25:3f:ca:c2:3b:83:90:42:2f:c8:32:9a:
6f:bf:9a:b2:ff:f9:f4:4a:f3:19:97:3f:39:51:0b:58:26:0d:
67:83:1b:94:9c:22:26:8a:3f:3b:c3:fc:c3:c0:ad:22:c0:d2:
e2:ec:8d:b2:03:26:1e:5e:e7:f6:55:13:70:d8:76:e2:85:75:
20:f8:b9:db:99:d5:b3:15:cb:8d:00:ab:95:e2:26:88:51:21:
27:4a:b7:c8:34:8f:17:35:ee:1c:43:3c:ea:f7:30:11:86:c2:
49:15:e2:66:40:72:b3:94:50:e4:da:93:a0:2c:8c:b7:d3:1f:
95:94:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:49 2026 by rpki-client