Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: n803p+bTAZv5J9QB41c7zvVojFWnCGhk2vfBPvX/718=
Subject key identifier: D4:53:8B:55:B9:9D:9B:1C:97:4A:E1:6C:B1:69:AB:69:6F:76:F1:F4
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A0D048A317670C5B5EB28EA94E498DD9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 07CC
Signing time: Wed 23 Sep 2026 22:00:16 +0000
Manifest this update: Wed 23 Sep 2026 22:00:16 +0000
Manifest next update: Thu 24 Sep 2026 22:00:16 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: wkRSmJM4a9+2NYopy/NHTYVlICZ3nw1A0IWS6klXAAM=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:a3:17:67:0c:5b:5e:b2:8e:a9:4e:49:8d:d9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Sep 23 22:00:16 2026 GMT
Not After : Sep 24 22:00:16 2026 GMT
Subject: CN=d4538b55b99d9b1c974ae16cb169ab696f76f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:0c:b6:32:8a:92:c3:88:6a:54:0a:84:7c:
f6:a2:e8:cb:27:b4:54:d7:10:1a:f8:77:1b:24:cc:
e9:a1:5f:d7:a2:fc:fc:b4:57:75:91:e7:75:f2:4f:
09:29:84:e2:b7:fd:12:85:e8:0d:6a:e4:4d:cd:64:
d0:aa:2b:53:eb:9d:2a:0a:50:c3:30:dd:bf:38:98:
85:ab:39:f9:84:74:69:cd:9d:97:fd:62:dd:88:9d:
79:c8:6d:21:42:54:7a:c5:6d:a4:01:ea:1d:be:24:
b3:c7:07:ac:d5:df:89:d5:4e:0d:49:02:1a:c4:98:
0a:88:f9:ae:80:dd:c1:f3:9a:ec:f2:6c:b4:eb:1d:
99:56:a9:71:a3:2d:71:79:eb:1a:22:cd:6b:5d:f9:
81:68:7d:e5:9e:2c:82:7a:5d:eb:ad:00:56:af:71:
e0:c1:f2:3b:e5:46:51:ec:f8:14:40:4a:ba:68:f1:
20:fe:83:1f:54:52:c8:4b:83:64:18:4f:88:2a:91:
29:37:31:2c:9f:90:a0:cd:63:f0:f5:6f:fb:9c:be:
00:2d:09:3c:ab:ff:dd:30:55:a5:cf:c8:ef:4b:51:
3d:c1:d7:a9:1f:8b:5e:e3:f1:e7:a9:da:8b:0a:7c:
e3:fd:83:31:f4:cf:01:5a:40:b9:83:b5:0e:d8:3c:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:8B:55:B9:9D:9B:1C:97:4A:E1:6C:B1:69:AB:69:6F:76:F1:F4
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:aa:5f:bc:9f:ac:db:4d:0a:44:db:29:84:92:33:bf:4a:40:
11:b7:e7:d5:ae:4a:f5:95:85:1d:96:2e:fe:a8:0a:37:d2:88:
73:4a:3a:90:8f:c8:12:d5:83:e9:6f:d2:3c:79:3e:0e:a2:5c:
6e:61:75:59:0d:8f:4d:27:fc:e5:32:08:ef:a0:2e:2b:fe:aa:
49:61:8b:1f:59:d3:78:d3:f0:7d:65:4e:5e:07:6a:1a:0a:84:
15:53:2e:63:18:84:20:0c:e1:62:b4:39:b8:be:9e:4e:91:56:
c7:da:55:b1:19:ba:cf:0f:be:dc:29:a4:50:3b:79:56:07:db:
35:ec:24:1b:56:be:3d:98:f6:01:51:09:3d:fe:7b:51:ea:cb:
3c:53:61:1b:f3:38:95:da:9e:3d:19:fb:a3:1c:83:ea:3c:b2:
94:24:5a:57:71:72:32:c2:91:fb:78:aa:d2:f2:9f:66:19:2e:
05:96:44:46:b9:5a:41:d3:7c:ed:00:15:cc:86:b9:f1:e2:58:
71:4f:bc:b7:6a:3a:7d:96:5b:71:58:37:30:20:70:bc:ac:bc:
8d:8b:9e:42:51:26:fd:0c:3d:ba:36:48:52:8d:6c:a9:59:1b:
f0:57:df:25:c9:70:3d:08:f3:36:b4:9a:37:4f:b0:7f:a1:a8:
c6:ad:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:12 2026 by rpki-client