Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: 7/6Zm6xMmfd899XJUfDm8uvDE0Tg52N5es7KYdBDrn4=
Subject key identifier: 0F:D4:FD:DA:B2:C3:7B:52:B4:83:AA:A0:75:F6:68:53:A8:6E:55:D0
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019F91A3B6395391CD1F1F673C3BF58746E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:00:53 +0000
Manifest this update: Fri 24 Jul 2026 01:00:53 +0000
Manifest next update: Sat 25 Jul 2026 01:00:53 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: diiUj2Abi9TVTEYPARKJGJtdGl4FMnhSdlONn8yO+c8=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:b6:39:53:91:cd:1f:1f:67:3c:3b:f5:87:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jul 24 01:00:53 2026 GMT
Not After : Jul 25 01:00:53 2026 GMT
Subject: CN=0fd4fddab2c37b52b483aaa075f66853a86e55d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:d8:8b:3f:94:06:9c:d3:44:aa:1b:51:1f:
e0:7e:65:76:49:d0:1c:2d:ab:49:87:e3:99:1e:9a:
eb:e6:d5:b9:96:56:49:06:35:51:bc:f4:1d:6f:d7:
68:d7:a7:fa:ce:5e:b5:d2:d4:3d:26:14:ab:18:92:
5b:c2:c9:2f:a3:43:82:99:f0:8f:09:9f:87:49:bc:
16:7e:c6:ea:06:ec:fd:27:93:ed:83:32:fd:50:ff:
77:60:a3:a1:4e:28:68:69:33:14:db:b7:91:88:be:
46:ed:25:7f:c4:5f:89:23:df:f8:65:8d:1e:87:94:
39:d6:94:df:2a:60:8b:9a:44:f5:d0:b0:39:17:80:
a0:82:12:6e:56:d8:2d:ab:62:1b:78:98:97:79:e2:
e5:55:67:8b:60:be:f7:71:80:27:10:ec:2e:53:a6:
19:e1:11:ea:64:a6:36:cc:4e:18:1a:e9:39:f9:00:
a2:b8:6a:05:ae:ff:17:3d:ed:2a:ba:3c:ad:1b:26:
5a:15:41:a6:be:b1:42:bc:4f:2e:c3:af:1c:8e:cf:
5b:b1:89:ca:a0:f1:63:94:3e:b0:f7:af:1c:a2:d6:
52:bc:df:db:62:60:24:ee:76:1f:40:6d:86:44:d5:
6c:80:af:e3:c8:29:6e:68:c1:6f:d1:cf:4d:a3:c9:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:FD:DA:B2:C3:7B:52:B4:83:AA:A0:75:F6:68:53:A8:6E:55:D0
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:53:41:86:db:46:fe:44:d7:8e:cf:70:6d:ce:8e:2a:5d:
5d:2f:25:c7:14:40:d2:ac:a0:a3:ed:9a:c8:98:68:df:77:a8:
8b:c0:bb:97:b3:56:95:8f:4c:5c:d1:6f:88:8b:d1:e8:e1:d0:
9c:7d:25:69:1c:83:f4:61:a5:1a:6f:22:a0:cd:05:5f:00:d6:
2f:9a:12:9a:8a:6e:23:9b:54:79:1a:83:54:8f:e6:b1:4c:7c:
15:57:e4:46:3f:ec:b4:bb:f9:57:c4:13:88:43:97:09:bd:e2:
3c:19:a1:29:dc:98:d2:67:b7:c3:ad:c1:60:65:2e:28:49:69:
58:1c:f8:ef:b2:15:01:bd:07:91:04:8d:fd:03:e7:75:68:8f:
f7:18:f9:20:aa:0b:a6:e2:8c:2e:77:13:93:21:3d:fb:7e:73:
03:bb:aa:99:89:cc:09:03:1b:4a:ff:53:cf:11:35:76:c2:0c:
30:27:e3:0c:08:e8:90:da:4b:fe:e3:ef:6a:d1:de:0e:c0:e4:
37:3b:27:81:1a:b6:93:5f:c7:83:02:7a:2d:ae:33:8d:fa:78:
52:ee:c6:85:ac:cf:d6:6d:d2:34:ab:ad:9c:5b:7b:e3:27:94:
af:d2:80:bb:57:d2:c1:9e:96:a2:6a:1c:cc:24:d0:89:15:de:
d1:d6:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:58 2026 by rpki-client