Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: hzErlGc9AegxIghr11hvNS3PRGaT0QCaXnB33gEo+CA=
Subject key identifier: 57:6C:A3:2D:61:F7:BD:D4:94:A0:66:87:47:A7:8F:62:AB:3D:47:09
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 019D992BA70A24AEAC797AFB970B9CA1AACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 139E
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: eWWyqvRr5HH+H433WCEB3m0/mT1BNvH5EU7lF3rnUNg=)
2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a7:0a:24:ae:ac:79:7a:fb:97:0b:9c:a1:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=576ca32d61f7bdd494a0668747a78f62ab3d4709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:d3:bb:7c:6a:2b:a8:f9:3b:b2:03:02:97:
19:e6:7d:76:91:8c:60:76:ec:4f:65:7b:46:4d:2d:
ed:7f:72:0f:48:05:8a:4d:ff:31:a8:86:ca:73:a2:
d6:f1:b5:04:8c:1c:22:95:56:9a:b1:ea:11:fd:03:
91:45:61:75:36:5e:a4:40:42:0b:bb:a1:ca:9a:2f:
95:17:b3:25:4c:85:16:19:5f:17:15:42:5a:65:bd:
01:3a:49:64:31:75:0a:f6:57:ff:dc:d7:cd:3b:7a:
28:47:56:0e:20:91:a8:c9:18:db:7f:27:b3:d4:d7:
f1:6a:4d:b7:5b:20:7f:4f:b3:80:20:3b:8f:df:21:
17:67:42:0d:b2:61:b3:dd:21:17:be:24:16:fb:78:
96:53:62:e2:90:9f:49:20:34:f7:16:d0:b0:bb:18:
71:a0:1e:29:21:c0:e6:f3:c2:3b:06:fa:43:c7:82:
75:10:e3:73:3c:06:d3:0f:e4:68:27:6d:77:08:dc:
b8:d2:c6:81:fa:95:7c:16:ac:e0:d7:01:04:1e:9b:
7e:64:e9:c7:5b:21:94:08:a8:fc:9b:b9:7b:6b:a7:
22:d4:8b:2e:1c:d4:13:a9:85:5a:df:10:68:38:ad:
ae:7c:ba:a9:58:3d:bc:07:84:37:8d:66:01:21:eb:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:A3:2D:61:F7:BD:D4:94:A0:66:87:47:A7:8F:62:AB:3D:47:09
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ce:50:9e:b8:4b:5a:d5:31:fc:a1:08:b9:ad:a5:52:ab:36:
26:47:97:39:3c:71:e0:88:c7:1a:fa:3f:80:75:bd:bd:c3:e9:
b2:27:29:30:25:2b:af:19:72:9e:cb:01:cb:27:58:00:a5:f5:
a9:22:de:3e:d7:94:44:85:05:3e:77:a7:af:dc:da:d8:f8:60:
51:c9:9a:83:fb:35:7f:fe:0f:cd:74:7a:23:17:cb:e2:88:c6:
c4:db:7f:0c:8b:46:fa:f2:e8:4e:b8:75:f4:3e:0b:cd:08:68:
74:5f:62:b7:9b:f5:a5:c5:c7:8a:56:10:a4:26:65:be:a0:9c:
e8:d9:ca:19:db:3f:9b:2a:c7:a5:f7:c0:c0:3d:0f:c2:73:b5:
29:e0:22:6e:4f:1a:2a:90:c0:46:75:07:66:a9:3d:9f:ef:03:
12:c3:eb:63:7e:3b:e7:6f:7c:fd:66:3d:34:d9:04:f1:83:02:
9a:97:bd:ef:87:c1:44:9f:35:eb:8e:96:cc:cd:9d:42:f5:bc:
37:36:83:82:a7:78:43:d0:07:1c:7e:59:30:5c:d8:a6:4a:44:
88:f3:dc:90:44:02:25:9d:06:af:5f:bd:04:67:a8:f6:28:d2:
8e:e8:e0:68:4a:22:25:11:74:e2:96:d2:9f:ac:f6:12:9f:b6:
66:fc:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:47 2026 by rpki-client