Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: ERa7lY+9nx8rMTFYeYhLplSeoHKaPNcYxpmSwQPgrQI=
Subject key identifier: 6A:A4:2A:2C:C7:89:7D:CA:E6:11:D6:16:E0:E3:31:8A:9E:13:89:24
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 01A0C5FC4B6A21E1D6077A45B0BC53FA7D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 183B
Signing time: Mon 21 Sep 2026 22:00:40 +0000
Manifest this update: Mon 21 Sep 2026 22:00:40 +0000
Manifest next update: Tue 22 Sep 2026 22:00:40 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: AFZANurySFLvANnMa0HX3CKqn14q+lPpQF8Dhrpr4GY=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:4b:6a:21:e1:d6:07:7a:45:b0:bc:53:fa:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Sep 21 22:00:40 2026 GMT
Not After : Sep 22 22:00:40 2026 GMT
Subject: CN=6aa42a2cc7897dcae611d616e0e3318a9e138924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:4d:b9:2e:36:af:85:8a:5b:16:de:1a:a2:
88:0f:47:8c:17:7a:f5:ce:f4:c0:42:ee:0e:f0:2c:
19:21:d6:e3:9c:57:ae:01:46:da:71:ba:a9:8b:de:
ba:1c:80:6f:09:c8:97:72:66:ca:eb:8f:31:3b:6c:
51:cd:a1:b1:4e:ca:3b:d0:6f:5b:8d:e8:5c:b1:90:
de:7c:b8:69:7a:66:34:05:60:30:14:cc:93:ca:f4:
53:21:d6:92:51:8c:23:b6:59:1e:e9:2d:d6:ee:35:
4b:82:a3:c4:08:7c:f5:2b:6c:2e:7c:37:65:d1:08:
b2:9a:eb:89:93:4c:ed:ae:21:ab:49:e5:42:2f:b7:
5a:3e:ba:fc:3b:14:08:db:d2:55:ff:9c:1e:58:88:
c5:2d:52:9f:d8:81:37:69:bd:dd:64:55:ea:07:0f:
d1:9d:d7:53:4c:cf:2f:9d:86:df:ae:24:91:27:11:
67:a1:7c:6f:cb:66:8d:33:e5:15:5f:93:30:c6:19:
07:19:4c:2c:69:86:d7:56:35:d0:fd:d7:51:58:1c:
cc:50:32:7d:c3:d6:46:8a:ae:88:43:40:4e:00:d9:
d1:12:97:25:9a:d3:c5:eb:ad:72:f7:5b:da:d1:98:
2d:c1:a2:db:3d:56:d4:bc:03:c1:ae:9e:8e:a8:f7:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:2A:2C:C7:89:7D:CA:E6:11:D6:16:E0:E3:31:8A:9E:13:89:24
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:77:6a:96:25:43:33:6d:cb:13:6e:31:f6:29:83:80:51:82:
31:9a:4e:cf:93:c1:51:99:a3:22:bf:f3:93:5d:0a:ae:2e:3f:
bc:8c:9a:59:b4:f3:bd:78:90:6a:7c:1e:24:b9:6b:08:7d:32:
03:81:2c:41:2c:ea:78:ef:dd:c0:cd:1b:a7:0b:92:1f:90:63:
38:41:f9:86:a6:65:14:3c:36:94:3e:4f:99:fe:cd:d3:49:8a:
3e:ab:9f:ad:cd:67:25:4d:08:a3:46:bf:6b:ea:ba:4a:21:a2:
05:27:aa:97:d8:77:d5:00:55:cc:7b:74:56:18:bf:6d:ba:4f:
40:66:f6:a7:14:18:80:1f:c8:c8:f2:92:b3:3d:20:38:54:1f:
7e:11:5b:cd:36:f2:c1:86:40:d1:89:02:32:43:5d:2a:50:ac:
dd:9d:6c:73:cf:d5:1e:52:2b:f0:05:ab:d2:8c:40:88:d8:3b:
d4:38:64:d4:77:97:e2:a9:06:0e:ce:8b:f2:ef:69:36:83:f7:
d2:1d:88:03:8a:6f:8d:2c:05:ce:25:f1:ed:90:23:c7:12:dd:
90:45:23:27:ca:9c:21:4a:12:c7:0a:62:cb:7a:06:77:d7:90:
dc:6d:68:34:da:88:24:d7:56:fc:e3:95:f9:62:a5:dc:3f:03:
4e:b3:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:53:20 2026 by rpki-client