Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: 4aRTYDUz37ERXVgVJzjqj57oDQ9MoaY9AQzF76p+trg=
Subject key identifier: DD:30:4B:4C:1C:4A:A4:70:BE:BC:5F:D8:FD:5F:A2:89:04:B2:FB:EF
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019CAAC6C1602044AB0A274306846C0A29E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 079D
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: 5S1wv3zRvDRDdyN58yQvW8TGAcn0jGqHMUjf3C+e3fg=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c1:60:20:44:ab:0a:27:43:06:84:6c:0a:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=dd304b4c1c4aa470bebc5fd8fd5fa28904b2fbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:ff:83:86:37:49:cb:69:c0:e4:54:da:9a:
de:8b:75:b0:96:6d:42:e7:9d:c0:36:f4:89:a9:bd:
e4:49:04:b3:2d:fd:25:1d:e3:2e:d3:c2:48:48:03:
1e:74:e2:56:d1:7e:49:03:70:6c:83:2d:90:56:52:
67:62:79:d6:28:2f:80:2b:80:7b:2d:9f:d2:4f:45:
1f:36:01:f5:ee:14:36:04:48:2a:21:8f:a4:0d:a7:
7d:d2:05:88:5a:54:f1:3f:10:ee:57:93:e4:72:3c:
d3:68:dd:0d:62:87:9a:36:27:0f:b1:a1:35:71:c2:
a1:c2:92:17:6c:5b:10:84:f1:36:39:a8:2f:b3:5a:
39:05:60:38:cb:4e:64:12:7e:f8:b3:16:45:7e:62:
5e:9d:a9:2a:bd:a4:89:c5:f8:98:e9:55:a9:a5:ff:
fe:f2:f7:d4:b1:dd:4d:f6:2d:ca:de:13:03:05:8f:
21:87:19:98:7b:e3:2e:ab:48:b3:b4:b4:dd:82:c9:
42:7c:96:17:a7:9c:99:8a:f8:c0:ca:d5:da:9a:31:
54:48:d0:2d:da:00:b0:b0:4d:91:40:e1:23:a9:a4:
c9:3f:c4:b9:88:6b:25:f4:df:88:a8:24:0c:c6:ab:
9b:e5:86:51:09:64:4b:05:92:d5:a2:72:4d:6e:db:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:30:4B:4C:1C:4A:A4:70:BE:BC:5F:D8:FD:5F:A2:89:04:B2:FB:EF
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fc:31:81:36:b8:78:93:42:63:85:c2:e2:d3:f9:9f:c8:6a:
7c:0f:5c:11:3b:8a:e8:96:4b:74:ac:02:b5:74:73:43:e6:b8:
c7:de:2a:a0:24:08:62:57:25:b7:f2:4a:3c:7b:aa:9b:97:2d:
3a:f3:b2:e9:45:00:59:89:f0:f7:18:cd:02:5e:d8:11:dd:c2:
ae:99:43:92:f9:f0:27:f1:63:d2:38:15:44:36:ba:35:ec:5d:
f6:a3:af:68:4a:08:00:c5:78:97:9b:d0:f4:0a:55:db:f7:5b:
10:dc:87:4f:84:9b:12:07:97:aa:40:b9:49:4d:b5:79:65:49:
9b:d0:ee:8c:fa:db:bb:f6:5f:52:5f:e5:85:ae:ec:d3:75:db:
04:41:f6:f4:64:d0:e4:74:e5:71:be:ce:88:5e:5b:f6:9f:16:
6d:de:39:96:f7:95:17:60:fb:35:35:66:51:f2:7c:7a:fb:b0:
75:3d:80:17:98:e4:ac:9d:62:e6:15:87:9b:3e:d8:52:4a:4f:
da:08:46:10:7d:d4:ad:04:36:78:23:6e:b3:f7:57:d6:cf:cd:
92:42:fc:85:4f:62:41:80:c0:09:2b:17:3f:d8:81:d9:2d:2e:
f9:d7:ae:de:5b:72:fc:79:64:15:5a:53:ff:4f:5c:48:71:65:
bf:2d:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:54 2026 by rpki-client