Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: uiGC/FajwN5+5myqk9aEiQMCWGF45avwthCyRoAFgFQ=
Subject key identifier: 88:0A:40:23:91:4F:33:01:18:03:37:AF:86:D5:2A:FC:46:19:B0:B5
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 01A0CC6C82BEA41C6BC00D2C5F35328A93C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 04:00:58 +0000
Manifest this update: Wed 23 Sep 2026 04:00:58 +0000
Manifest next update: Thu 24 Sep 2026 04:00:58 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: gl3zs11ZENA0vTO0a6uYkYp3o+pWhc9+dzyef+WhiWM=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:82:be:a4:1c:6b:c0:0d:2c:5f:35:32:8a:93:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Sep 23 04:00:58 2026 GMT
Not After : Sep 24 04:00:58 2026 GMT
Subject: CN=880a4023914f3301180337af86d52afc4619b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:83:b9:73:65:f1:e0:8e:fb:bc:c0:80:b5:
17:92:64:4c:74:4c:7b:de:35:9b:1d:12:b5:e9:44:
7b:fd:c9:7e:3f:35:23:0a:91:67:23:8b:b2:4f:03:
2c:85:9a:52:89:f4:e5:61:76:41:94:e2:05:a0:da:
c7:c8:74:c3:79:10:37:e0:ce:1f:e2:9a:df:2a:2d:
f8:5a:ec:02:e5:23:e1:79:48:4b:35:ef:e5:0b:c6:
d4:fd:89:e2:0f:47:68:5a:d5:ae:60:ac:5b:0e:ab:
1c:1a:67:2f:15:21:cf:df:77:e5:95:98:d4:30:c1:
c4:6c:7b:56:98:09:4e:cb:46:75:c7:3f:e0:37:67:
d9:49:08:7a:f5:be:a6:d7:f6:f1:ac:10:89:b9:b1:
f5:a6:0d:43:ef:54:e2:94:30:f1:60:4c:2a:b2:9b:
5f:da:f6:e6:74:35:f4:1f:3d:b9:ea:63:a2:82:fd:
8a:54:fe:e6:ee:33:7f:3c:85:44:fa:ce:fc:05:66:
e8:20:c8:4d:15:19:4b:3c:ef:b2:85:13:32:b3:c7:
73:85:34:34:a4:fa:a4:d8:3a:ed:e8:ab:91:23:7e:
36:cf:3e:c8:8d:82:1d:ae:8f:2c:93:5a:3b:d7:7a:
7c:2b:4c:c9:a4:a5:89:67:b2:2b:0a:86:3f:7d:66:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:40:23:91:4F:33:01:18:03:37:AF:86:D5:2A:FC:46:19:B0:B5
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:0c:90:17:c6:67:3e:6a:8b:b2:50:36:57:dc:8f:53:99:26:
a9:5e:94:88:57:0d:bb:25:2e:5a:fb:33:ef:78:34:e5:b4:b3:
d7:09:3e:62:03:c1:ad:43:69:27:28:41:e2:0e:7c:79:6f:70:
f8:22:a9:c3:1e:01:de:6d:f9:2b:01:91:c6:8d:d4:d1:9c:f3:
a5:9b:9d:51:12:f1:92:50:c5:61:a2:53:c6:89:81:10:1f:78:
3e:56:da:ef:3b:eb:2f:ce:e5:ae:e1:ba:4a:f6:e9:9a:4a:96:
ab:13:91:72:b1:63:e7:54:04:da:13:21:db:51:34:f0:86:5f:
2b:7b:81:ae:6e:ca:da:a0:02:af:68:06:38:c4:43:63:3e:e3:
c0:ca:24:05:a1:01:61:3b:29:51:3d:8c:43:25:8a:f7:1d:51:
c8:f3:71:ea:fc:c2:2b:90:69:e6:03:64:1e:f4:bf:c3:5b:81:
8a:d3:25:9c:9b:d4:65:40:8f:df:bc:08:d5:5f:67:91:8d:a8:
ba:d1:6e:8a:bb:6f:ac:df:9f:1a:92:ba:3f:66:ad:f7:bd:20:
bd:7c:1f:d1:82:d8:f3:f3:ab:4c:8e:c5:5c:d9:9f:c6:ef:5f:
48:5e:dd:16:db:5b:3c:49:5c:8a:3f:40:13:fa:92:c7:45:76:
75:b2:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:48 2026 by rpki-client