Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: myCPZjkTFDxNET+qwsQLKNXsgwQo/H0MmFqZefL8AEY=
Subject key identifier: CC:9C:57:FC:3F:C9:E9:05:5F:8D:2B:6C:ED:7F:50:1B:AD:9A:49:4C
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 01A0D75FF57D2F2BDFC1C13055285E2B94FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1A6C
Signing time: Fri 25 Sep 2026 07:03:05 +0000
Manifest this update: Fri 25 Sep 2026 07:03:05 +0000
Manifest next update: Sat 26 Sep 2026 07:03:05 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: h1mOofPC+EK5ijofvIJS7tx1bIk3oo8d+Cx8GC9amtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:f5:7d:2f:2b:df:c1:c1:30:55:28:5e:2b:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Sep 25 07:03:05 2026 GMT
Not After : Sep 26 07:03:05 2026 GMT
Subject: CN=cc9c57fc3fc9e9055f8d2b6ced7f501bad9a494c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:dd:2a:c0:95:43:4e:79:ff:7a:ba:77:9a:
08:bc:35:75:b0:12:1f:59:8a:1f:10:ba:a1:01:f1:
de:04:eb:9f:36:25:cc:0c:43:57:5c:8b:bc:18:92:
a2:d6:d5:6e:5b:91:a2:1a:3c:41:60:8a:fa:36:63:
50:58:3e:22:e5:df:dd:43:12:87:9e:87:fa:88:1b:
49:a2:aa:9b:62:f1:9f:12:38:4d:b8:b2:54:d4:d5:
6f:d6:5d:2b:08:cd:b8:df:3c:06:ef:b5:17:9f:ed:
dd:17:e9:13:9b:0a:db:73:57:10:41:e7:d8:1f:72:
a4:7e:ae:fb:06:77:f9:4d:cb:60:aa:a9:c6:07:db:
6c:fc:72:aa:4f:43:05:f2:38:37:3e:83:43:ea:a9:
32:78:97:59:80:ad:22:e3:f5:7a:95:08:9a:c5:ec:
ed:a0:a0:00:97:c6:20:23:dd:e2:89:1f:fd:e8:c0:
07:03:6f:8f:74:23:7e:39:92:ca:8f:90:25:cb:4d:
00:40:e2:22:18:5a:7d:09:39:c4:e7:65:80:c5:58:
1a:fa:7d:2b:4a:9d:99:3d:dd:82:37:9a:63:4e:45:
a7:da:4e:91:ba:7b:f5:99:4a:0b:c9:21:f9:87:30:
44:15:8d:a7:50:65:1d:92:d2:21:15:4e:2c:ed:81:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:57:FC:3F:C9:E9:05:5F:8D:2B:6C:ED:7F:50:1B:AD:9A:49:4C
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:9d:b7:90:89:e0:fc:ae:fa:9f:1d:7f:14:71:8a:c9:25:
57:85:f6:ba:d3:51:6d:65:a6:5e:6a:cd:89:bb:c2:15:9a:5f:
8f:9c:f0:6b:82:b1:0b:29:5a:47:99:70:09:ae:e3:d8:31:05:
05:6c:37:5c:65:51:eb:ab:58:e2:e3:ea:e8:4e:dd:b3:b9:ff:
d9:de:80:ce:8d:21:7e:3b:9d:d0:0c:72:05:99:b3:24:ef:aa:
9e:b5:d2:de:be:57:9c:b7:2d:35:83:64:72:12:3c:84:8b:32:
a3:43:4b:ee:a0:97:30:28:e4:7d:84:70:92:f8:41:61:44:e2:
1f:c2:f4:56:79:cb:58:09:1d:37:30:db:c4:b8:e1:c8:e5:80:
a2:11:f1:28:c9:ec:57:d7:43:75:f3:9f:9e:e7:8d:76:cb:9e:
03:5b:b0:10:0d:58:d6:09:fb:39:25:08:95:34:27:ac:9f:6d:
e0:67:76:25:09:1b:c4:7c:6c:c4:c7:c8:cc:79:23:c2:ca:dd:
10:54:3e:26:dd:b1:99:3b:7a:14:ab:7f:cf:d8:24:50:b1:35:
f6:0f:40:7b:6e:2f:7e:96:b6:73:de:0f:10:ab:2b:28:56:e6:
96:ef:ef:8c:44:fc:8f:ce:88:98:8e:b1:bc:97:ef:40:1a:99:
11:61:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:52:57 2026 by rpki-client