Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: i1/LYOysTb5WrUFY3JBoISCsw4He0qknXrkK3wibciw=
Subject key identifier: DD:C8:94:6D:A8:79:8C:08:79:7F:7A:B6:24:83:1D:5D:E1:73:30:0A
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019E1C47035500AD8FEAC603CA8F2F347784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 13:01:16 +0000
Manifest this update: Tue 12 May 2026 13:01:16 +0000
Manifest next update: Wed 13 May 2026 13:01:16 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: cEskyRwKwXyclxZ50yAFodcHF3ZAQ0Vbg6Pyvzgi8cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:03:55:00:ad:8f:ea:c6:03:ca:8f:2f:34:77:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: May 12 13:01:16 2026 GMT
Not After : May 13 13:01:16 2026 GMT
Subject: CN=ddc8946da8798c08797f7ab624831d5de173300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:6d:a0:be:5d:13:99:9e:bd:33:d7:23:2a:
4f:74:6d:13:b9:e3:34:f7:37:fe:c3:23:07:d4:b0:
9f:c4:cc:2d:82:d9:0b:ee:e3:f7:3b:ff:45:bf:1d:
fa:e1:f8:7c:07:de:19:0f:2f:c4:27:31:7c:d8:d6:
66:8f:97:e3:7e:b3:5a:f9:68:bb:c6:bd:83:ac:02:
75:01:6f:3f:a3:15:50:21:45:8d:88:69:8c:7b:36:
42:07:79:34:ee:f9:15:05:8b:2e:c2:49:2d:85:5b:
a3:71:70:f8:87:75:61:f5:96:bb:36:52:2e:de:bf:
db:9e:07:99:24:b4:bb:ef:52:cd:55:3f:44:b8:29:
51:3c:71:f7:eb:5c:df:da:a7:12:c5:36:74:df:f2:
a5:cf:b6:89:a2:44:f9:29:c1:d2:87:b7:89:8c:9e:
01:da:13:5e:74:c4:08:1b:a4:82:2c:65:6f:9d:50:
33:a3:54:aa:1b:78:86:60:f1:b3:ae:de:10:ea:9a:
ca:0d:b7:bd:47:e2:7a:e0:1a:ce:67:fc:23:5a:cf:
4c:13:ce:6c:16:76:98:da:d6:cc:50:30:84:68:71:
21:c6:82:ae:cc:0e:4c:db:e2:6a:5a:9e:64:e6:33:
fc:37:0c:a0:69:3f:75:46:62:17:fb:99:0d:21:7a:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:94:6D:A8:79:8C:08:79:7F:7A:B6:24:83:1D:5D:E1:73:30:0A
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:f3:0b:13:ed:01:ef:05:db:a6:31:01:b4:11:50:14:db:
01:45:a7:a4:4b:2b:e5:23:81:24:e6:cc:2a:27:00:cd:a8:59:
f8:de:7c:2e:42:d4:aa:29:fc:9c:1a:f0:de:ae:31:ce:b4:f2:
a3:3b:a2:a4:71:e4:c3:3f:ef:12:4f:64:b4:00:79:2c:f3:49:
2f:24:04:06:fa:36:4a:c8:18:ce:d3:cf:c7:22:32:d5:23:0a:
65:27:9b:b7:7c:a1:42:87:27:bc:00:dd:42:14:49:2f:7e:f6:
11:04:03:49:c0:cc:6a:32:db:80:af:71:5a:bf:65:cf:24:41:
d4:a8:8e:96:f0:c7:16:a8:32:78:8d:9d:c4:ed:bb:d2:8d:f4:
af:e4:32:96:f2:09:ca:05:59:b9:38:9d:58:52:9b:7c:9a:a8:
b0:12:cb:89:3a:4c:4e:71:f9:49:7f:b9:87:80:0a:20:93:f1:
12:7d:31:31:14:64:76:c7:7a:cd:a2:57:b5:11:ee:f1:c9:31:
9e:17:03:cd:bd:2d:0b:e2:0d:cc:8b:51:9c:c7:25:ef:ac:80:
28:87:b2:21:e7:6c:7c:8d:54:b7:6d:06:35:68:22:52:c7:2e:
9d:43:6e:4f:58:7f:3a:c3:9e:26:a2:8d:45:37:d6:c5:ab:06:
25:2d:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:45 2026 by rpki-client