Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: 5HdqqHxklVgNy0YUfHb7ixJ3yNL2J7kVP9QyvduacEg=
Subject key identifier: F9:76:45:96:7B:0A:70:2D:40:38:34:0B:D9:B7:FA:E1:41:AC:14:77
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019F91A37663A5C8239E5945B87CDAADDF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0727
Signing time: Fri 24 Jul 2026 01:00:36 +0000
Manifest this update: Fri 24 Jul 2026 01:00:36 +0000
Manifest next update: Sat 25 Jul 2026 01:00:36 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: V4E0SO5x6yMC7HmUoASsaaGK47KXu4hXB1Spr+oWlj4=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:76:63:a5:c8:23:9e:59:45:b8:7c:da:ad:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jul 24 01:00:36 2026 GMT
Not After : Jul 25 01:00:36 2026 GMT
Subject: CN=f97645967b0a702d4038340bd9b7fae141ac1477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:9d:19:7b:a6:94:6b:22:58:3e:58:5c:9d:
6d:1a:66:3a:b2:f3:92:ed:ef:c1:43:30:e1:9e:66:
b4:8b:bb:7c:ff:40:82:28:c2:3c:9a:ff:d9:05:de:
e3:79:d5:12:39:bb:ca:75:75:c7:8a:d2:fc:b1:53:
98:85:3e:c1:cd:13:8d:35:fa:19:9b:0b:ff:8d:cc:
f9:c9:d6:76:16:31:b4:e4:51:b8:ee:d5:c5:0d:d7:
b8:91:24:cb:20:cf:ba:a3:19:e8:08:06:50:a0:63:
01:03:36:6f:21:2b:a6:76:a8:a3:4b:02:30:0b:9a:
56:0c:97:cf:f1:ae:79:cc:9e:ba:50:7d:e6:47:31:
be:7a:77:db:02:42:fd:d4:43:14:e8:cf:3c:47:d8:
83:5d:9e:1c:86:d0:c7:cf:47:f0:25:21:42:a3:38:
cc:d9:57:dc:77:dd:34:48:1d:9d:6e:97:0f:90:68:
be:3c:44:c9:48:a8:a2:61:1a:23:1d:a9:50:72:cb:
09:bf:b0:13:03:09:54:e1:5c:97:3a:2d:59:c4:5c:
9a:6f:da:2c:56:5b:98:c0:49:21:9a:c4:b5:dd:a4:
4c:ca:54:78:ec:16:2a:8f:f9:0e:7e:4b:f9:d9:f0:
64:63:88:12:86:59:9d:a6:f9:90:db:5d:d4:e5:40:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:45:96:7B:0A:70:2D:40:38:34:0B:D9:B7:FA:E1:41:AC:14:77
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4e:8d:31:13:89:21:d5:9f:f1:02:7f:9d:d2:8e:b8:98:5f:
94:19:41:56:af:f6:e3:a7:f0:d7:92:93:86:c8:3d:59:21:4c:
1d:af:5c:b6:2f:ba:ce:d5:fb:aa:18:ed:bb:58:15:a3:8b:96:
1e:47:ef:42:6d:ac:33:4d:67:90:61:7c:f6:43:b1:3e:49:b8:
00:b1:ac:a0:c8:a2:5b:49:be:5f:90:c6:0f:e2:a0:03:76:54:
d1:5b:9e:b7:56:0c:ae:a6:e4:c7:db:bd:8f:e0:5a:81:62:af:
55:d9:12:c3:96:7a:7d:4f:01:b9:4b:58:c7:f1:ac:69:48:7c:
b1:5c:b7:9b:8d:bb:11:56:76:f5:ee:8b:8b:39:27:20:3d:9d:
75:d7:ea:8e:5f:4f:98:fb:55:f2:ec:fd:6f:8f:d7:c5:28:1e:
00:b1:9b:34:51:ad:9d:b7:0f:be:5b:8b:cc:10:4a:5f:83:8a:
3d:2d:ef:95:62:ca:c0:68:e8:3b:1d:0b:2f:d3:65:85:d8:09:
7e:3d:9d:fa:b1:f8:c6:85:2f:66:77:8c:d4:92:35:2e:e5:d6:
92:d1:fa:af:88:1a:6b:06:bb:ba:e9:e9:f0:0e:d1:ab:c0:a5:
d5:bc:f6:87:7a:4b:f7:eb:ad:03:d1:72:c3:09:46:ae:5b:75:
21:d7:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:13 2026 by rpki-client