Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: +H8D4BNd5+zPn8j8iF9TrlKSbGAyr4aaq989dqWhNHo=
Subject key identifier: 23:E7:39:29:77:F3:D2:10:AD:02:1B:F2:DB:43:91:A4:3B:12:5B:DE
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 01A0C36973F5DA4F4F2B9A6EE271BA830208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 09BC
Signing time: Mon 21 Sep 2026 10:01:03 +0000
Manifest this update: Mon 21 Sep 2026 10:01:03 +0000
Manifest next update: Tue 22 Sep 2026 10:01:03 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: NvJUcmKjeX1SHsm2jhiTjftI4qFI7HZhOUhfku7HSIg=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:73:f5:da:4f:4f:2b:9a:6e:e2:71:ba:83:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Sep 21 10:01:03 2026 GMT
Not After : Sep 22 10:01:03 2026 GMT
Subject: CN=23e7392977f3d210ad021bf2db4391a43b125bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:2f:50:ed:d1:90:0e:fd:88:53:91:0f:e6:
7d:60:94:5f:9e:47:1f:3f:60:a8:d3:db:33:53:9f:
6c:19:8b:38:6b:90:7a:31:f3:31:af:12:9e:f3:7c:
cb:f6:64:69:dc:0e:6f:b4:dc:53:62:b8:4a:16:90:
5a:3e:1e:34:87:53:b6:2d:64:7c:6a:b5:2e:6c:81:
2f:fe:c2:e5:d3:14:6d:ec:54:d8:41:f8:8b:56:07:
50:e1:db:40:55:0f:6f:78:5c:5c:18:af:47:ff:d0:
44:d6:62:77:28:75:b1:73:41:03:7f:20:7b:20:cc:
e1:2b:ae:91:64:51:35:5b:81:01:80:25:5b:82:e3:
89:52:33:b4:1d:1b:41:df:c2:e1:79:9c:ff:7b:99:
6b:25:6b:38:a4:28:51:8a:f5:e6:cc:b7:64:cc:a8:
e2:45:90:12:99:0c:41:e7:27:1c:26:80:dd:90:21:
9b:45:17:a3:d3:96:9d:69:7c:f7:9b:4f:95:b1:d1:
ae:d9:81:3a:94:44:44:e2:8b:7f:45:0d:8b:98:42:
34:bb:66:ee:6f:18:ef:4f:97:f2:8f:d6:d4:35:45:
7e:b1:0f:72:eb:ca:c1:4e:4b:d3:25:81:ed:3b:3b:
9c:1a:bb:04:77:67:8f:74:d7:56:73:11:ec:67:02:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E7:39:29:77:F3:D2:10:AD:02:1B:F2:DB:43:91:A4:3B:12:5B:DE
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8d:58:4f:14:77:ae:6c:08:e2:12:04:20:8d:d2:e3:8c:f6:
12:bc:28:ec:8d:94:08:2a:60:fa:65:64:06:f5:bd:3d:90:86:
62:94:6d:9f:80:d1:c0:9e:dc:2c:a2:43:4b:85:b2:81:62:fa:
8a:37:27:15:7b:9c:e7:d1:ca:48:16:31:bc:b6:fb:a2:e1:37:
8f:3e:6f:d5:a7:1f:26:1d:6c:17:65:5c:3c:62:17:4a:49:cd:
3d:56:cb:29:1c:7d:d5:b0:b1:23:df:63:5e:6d:02:04:c9:6c:
f3:ac:b6:4a:1a:8b:a2:a9:b1:2c:e2:70:e7:1a:fc:f4:71:3d:
f6:e7:b2:b7:ef:21:a4:50:69:de:25:ce:f9:38:a5:41:48:47:
d1:0d:17:a9:6d:e0:09:65:3a:85:fd:71:35:04:63:72:8c:be:
cf:6d:32:29:35:9a:7a:91:34:6f:a1:1c:10:c3:80:b7:36:ba:
bf:a4:19:79:44:c1:1e:b7:62:8d:d6:8b:bd:76:a0:6c:d0:5b:
90:10:39:82:7b:3c:f4:c5:66:ea:46:5d:43:f6:61:ef:0c:ce:
20:da:ff:e7:6c:9e:7d:07:f7:e0:c7:6f:78:46:dd:a0:d9:b0:
89:b9:98:7f:d8:a7:d5:85:96:6c:8b:34:8c:54:c3:8c:d8:59:
e7:0e:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:09:33 2026 by rpki-client