Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: lQetUBHegtOEdDp90MekEkjkUzIN/Znzuxkdn+u13ek=
Subject key identifier: 11:87:8F:F3:2B:36:77:70:17:0F:0F:BF:C1:4A:01:2A:0E:10:20:C4
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019D27046E03369E8B8FE1A65B87A8BC7365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: b1pieAmCAgNghdpZ0AfrSKewwvwnwB3MetUJyvKFgtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6e:03:36:9e:8b:8f:e1:a6:5b:87:a8:bc:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=11878ff32b367770170f0fbfc14a012a0e1020c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:d4:18:4d:d0:0f:64:1f:25:cf:50:d8:3b:
79:b9:b5:b1:cd:74:e2:8a:05:80:6b:e5:b0:26:0a:
54:2a:f6:9e:78:a2:df:ae:9a:2f:66:c1:eb:5d:8c:
1d:fa:34:f5:72:49:1f:c9:08:83:8c:24:32:f0:2e:
40:c5:ce:c4:6a:d2:ef:83:9d:40:d0:05:82:1a:aa:
fd:81:f5:a2:90:78:16:12:0c:0c:76:f4:48:7b:cb:
c1:67:2c:af:76:1c:8a:f7:8f:8c:22:08:52:06:c1:
7b:2c:4c:ba:da:d8:b6:dc:fc:ab:13:94:bd:cc:99:
a7:6b:36:b0:04:96:56:52:e1:71:80:d4:01:43:ed:
86:e6:e6:bd:7a:e0:b1:d9:f2:da:ad:0d:18:0b:3b:
78:ad:3f:09:1d:13:08:27:46:fe:0c:8d:63:24:99:
6a:b8:d5:84:96:76:51:98:12:1f:8d:78:d1:1c:be:
ab:dc:84:e6:ef:b4:23:c3:b2:4a:40:8b:5a:c8:1e:
14:b5:3e:e7:70:36:89:fc:07:51:b1:dc:cf:46:b6:
1a:5c:26:4e:c9:82:e3:24:24:7a:77:cd:7d:52:65:
fc:c3:a8:1c:ce:20:87:8a:c7:b8:35:b4:54:1d:14:
d1:ce:75:7a:23:fc:36:92:1c:49:eb:eb:03:30:35:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:8F:F3:2B:36:77:70:17:0F:0F:BF:C1:4A:01:2A:0E:10:20:C4
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:23:16:66:11:95:3a:90:64:58:75:6c:b4:f6:28:da:21:
6b:5b:96:da:21:4b:33:e6:c6:c6:78:04:88:aa:3c:3b:52:1c:
ae:6c:85:ac:bd:71:f0:cc:01:be:73:ec:cb:26:7f:cf:62:d7:
65:3f:52:83:d6:b5:48:bd:ba:90:f7:a0:4a:a7:1a:41:d9:7d:
cc:83:92:a6:f8:06:20:5c:23:7a:e9:3e:58:94:b7:08:82:38:
88:44:1d:41:86:8a:9e:e9:f1:73:d8:c1:ae:56:f4:11:5b:1c:
50:81:1d:5d:5d:72:72:f2:22:f4:74:f2:84:2b:8c:b1:e3:87:
65:6f:53:85:8a:84:a3:96:8c:11:61:00:13:b9:7c:c6:f3:85:
43:1a:c7:8f:ca:88:d0:34:e4:92:61:67:be:40:c2:d0:7a:72:
ec:13:e2:b7:51:56:81:5a:51:1c:aa:5f:eb:63:d4:e8:a2:22:
db:5e:2a:20:f8:f7:71:19:db:8f:e1:91:1c:39:28:95:56:b7:
c9:31:63:bc:02:aa:15:f6:43:e7:1e:26:f0:dd:bd:85:91:61:
c9:72:7e:c4:d8:b9:3f:bb:45:07:67:45:13:58:f6:9b:81:35:
e5:02:ab:05:91:4c:8a:10:26:34:38:52:dd:08:70:3d:7a:67:
da:70:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:13 2026 by rpki-client