Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: WYJ82Lun6K9ji7pfMMIdiHxiWiG+XyqUhH9woD28qnE=
Subject key identifier: 30:F8:D7:09:00:DE:1C:6A:FB:C2:00:7D:DE:34:0A:B6:3C:D3:94:FB
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01A0E09893C71E8791AB6EC486F792FAA39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 18D8
Signing time: Sun 27 Sep 2026 02:01:30 +0000
Manifest this update: Sun 27 Sep 2026 02:01:30 +0000
Manifest next update: Mon 28 Sep 2026 02:01:30 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: SyhkjXkunTM3L5wIDES7lqJHvrDoqNxHz3783rqLoqE=)
2: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (hash: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:93:c7:1e:87:91:ab:6e:c4:86:f7:92:fa:a3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Sep 27 02:01:30 2026 GMT
Not After : Sep 28 02:01:30 2026 GMT
Subject: CN=30f8d70900de1c6afbc2007dde340ab63cd394fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:d9:15:fc:f7:42:cc:da:c0:79:1b:08:5c:
79:2c:04:15:bb:96:c3:65:d4:a6:9e:b6:00:c7:31:
7c:7f:2d:fe:85:86:c1:b8:5c:5a:60:d8:67:cd:4f:
59:88:15:9b:ce:61:21:b2:4a:1c:b7:b9:c1:2e:de:
22:8c:c5:31:75:0a:52:ff:a8:75:be:41:f4:de:31:
80:31:6f:96:50:94:14:2c:94:1c:85:55:19:02:9e:
68:68:4c:5a:97:dd:a3:fc:e1:1b:71:7a:9b:53:d8:
81:20:50:76:d1:2c:af:17:60:c3:ad:80:51:03:3e:
90:44:b6:3e:89:7c:9d:77:f2:0f:bb:3f:d4:15:55:
6d:d5:08:98:56:f5:9c:5f:69:72:3c:b3:87:aa:89:
fb:e1:c3:2b:81:c5:d9:24:c5:b8:cd:12:02:cd:c9:
3a:f2:68:5e:fd:a8:22:37:11:07:04:6b:a5:48:5e:
8a:db:8c:b5:18:fc:b4:c7:c8:ac:02:ea:42:e3:9e:
ab:4a:90:1f:a1:8f:83:1f:8e:d9:b4:6f:6b:55:1e:
0e:00:0f:02:c7:00:94:33:34:72:45:a5:18:01:ad:
ca:c9:36:d2:48:67:3b:13:1c:a1:f9:ae:2f:07:d4:
59:5c:e4:f1:81:3c:a5:d2:79:b4:61:4d:6c:e2:3c:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F8:D7:09:00:DE:1C:6A:FB:C2:00:7D:DE:34:0A:B6:3C:D3:94:FB
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:43:86:d0:ea:d1:d8:6d:a2:ad:ee:8f:99:e2:b8:b2:15:
6b:2b:bb:9f:39:92:6d:a5:23:44:f5:39:ab:28:f3:9b:80:a2:
17:1b:8a:9a:90:a3:79:a3:b8:5a:ad:a7:50:25:be:06:f7:fa:
0a:8d:60:b2:47:b6:87:65:f0:64:78:a0:1d:e2:cf:93:2f:a9:
d2:cb:4a:41:7d:46:27:56:ee:00:9e:50:a1:a2:74:63:89:eb:
e8:6a:ae:e0:d3:e1:77:57:1d:1a:06:09:96:2e:d8:9f:37:59:
31:7e:0a:03:b1:f2:7f:ae:6c:35:6f:75:4a:86:62:63:07:f9:
b5:fa:d8:0a:81:6c:2e:22:17:4a:23:98:c3:01:4a:d6:40:4d:
cc:c6:b2:b6:9d:a6:8a:dc:2d:47:96:13:15:c6:6f:4f:5b:1e:
26:fa:73:8c:94:b6:ce:96:c4:c1:16:f4:b0:45:dd:75:c4:6d:
fc:f0:0b:c1:a3:ce:2b:3d:4d:dd:0f:3c:a1:c0:c8:12:dd:46:
dd:c4:ee:88:08:81:b7:71:d5:ec:88:0d:14:34:ae:8f:d7:88:
a2:4c:6b:59:93:28:5f:d0:c2:dd:6b:f6:ba:df:53:c3:8d:86:
fd:d1:36:8d:78:09:e4:c1:b0:c3:ca:2e:af:51:91:b5:d9:1b:
6c:f2:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:40:31 2026 by rpki-client