Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: T3WSeSUKRWxG4IAKWiIRQiggixie+Lo3q38cJTa7cMI=
Subject key identifier: 27:74:0A:C0:CA:15:17:83:17:52:05:96:9E:20:61:C8:83:AB:BB:EC
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019FAA1A5B3638E52D10CE9DEE0EE428C019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 17A8
Signing time: Tue 28 Jul 2026 19:01:21 +0000
Manifest this update: Tue 28 Jul 2026 19:01:21 +0000
Manifest next update: Wed 29 Jul 2026 19:01:21 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: 5dGrDU18ROfe9BiB8nQFFKypyKxyvcd0EPYDGXob+FQ=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:5b:36:38:e5:2d:10:ce:9d:ee:0e:e4:28:c0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jul 28 19:01:21 2026 GMT
Not After : Jul 29 19:01:21 2026 GMT
Subject: CN=27740ac0ca151783175205969e2061c883abbbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:9f:e0:6e:c5:7b:a5:32:ba:66:f4:52:04:
90:d5:eb:4f:5b:db:bc:a4:12:ec:94:29:4c:ec:91:
08:d6:75:36:a7:47:0f:a6:e0:d2:3b:86:06:ab:f1:
00:59:65:ed:81:b4:e1:35:fd:f1:7d:ae:4b:35:33:
c9:2c:e0:8d:ed:27:c0:20:3e:03:29:ce:2c:e4:52:
b0:ea:af:f4:c8:ee:9f:36:63:6f:be:2a:4a:b9:9a:
92:c7:c6:8d:08:2e:7c:87:17:45:36:45:73:c8:25:
d6:68:e7:13:46:38:4a:d0:b7:2e:28:70:4c:33:d6:
d5:1e:98:db:13:40:a4:b4:f0:6e:45:40:a5:f0:06:
fd:d8:00:25:3e:c7:5c:75:cd:a4:bd:c6:af:44:07:
fd:a2:2f:67:61:c5:31:53:0f:34:ef:da:7b:5c:95:
65:45:4a:a6:69:af:15:76:09:b1:61:30:3a:d2:4e:
65:8e:18:5b:9e:a1:50:6a:56:a0:a3:e1:bd:ca:8c:
77:5b:8f:bf:a7:1b:12:83:59:d7:ab:28:a2:37:6f:
ff:58:ef:90:e7:c2:02:51:9b:cb:e0:5e:61:a3:85:
d7:08:b5:f3:d3:a4:4f:85:98:b3:8c:da:8e:f3:45:
35:23:ba:50:e2:3c:96:c5:67:9f:56:50:83:dc:e8:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:0A:C0:CA:15:17:83:17:52:05:96:9E:20:61:C8:83:AB:BB:EC
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:0b:47:30:60:99:6e:f0:d1:94:e0:02:b1:ec:e1:b8:c3:
cc:97:6b:67:f6:21:b5:49:bf:9e:e5:dd:c4:79:01:f4:f3:59:
67:cb:c6:b0:a9:2d:08:19:c1:0e:52:b1:8a:79:11:61:2a:bf:
f5:d1:8c:f2:e9:78:b1:27:01:08:2b:b6:a1:a6:2a:45:75:2f:
e5:d0:92:12:85:fc:4b:53:31:38:c3:4a:3a:95:cd:1d:8e:11:
79:15:a4:1c:db:db:10:99:ef:83:a4:b1:52:53:72:74:81:e0:
6f:d0:64:6d:0d:00:48:19:8a:99:93:ea:63:6c:a3:9e:00:18:
83:64:6d:e6:84:6a:ef:bb:93:db:ba:ce:08:73:ee:b9:1f:76:
b0:2d:60:71:cc:f2:93:c2:6c:48:c8:39:02:6c:92:7a:43:b2:
cb:70:c0:22:0d:e3:f0:9c:4b:eb:e3:d7:b0:e1:58:9f:78:f8:
14:77:cd:4c:22:3c:c9:4f:9e:cf:02:35:da:8c:f7:22:5f:1f:
d1:63:69:02:49:48:e3:22:db:b5:d3:38:0e:a1:b8:c5:5b:31:
f8:51:e8:95:b6:ff:ad:5a:1a:7f:43:8f:34:db:4c:ae:59:93:
6a:15:09:fd:b3:c9:b4:82:6e:9f:1b:03:5e:d9:e3:da:46:8a:
e4:7d:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:26 2026 by rpki-client