Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: kB5ogkZa+5riGxFH4itmToz0CfTi5WVMmEdoTpuvVGw=
Subject key identifier: 09:39:81:1A:21:17:12:B2:B9:59:32:9E:78:CD:C1:0B:49:A9:AB:F7
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 01A0CAB47D4730FD1B070E5265A9E8577C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0506
Signing time: Tue 22 Sep 2026 20:00:21 +0000
Manifest this update: Tue 22 Sep 2026 20:00:21 +0000
Manifest next update: Wed 23 Sep 2026 20:00:21 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: IMqkrEkQ6o2T6O4QP03+OFjvTiOT9YnQnq4AwjOGF3o=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:7d:47:30:fd:1b:07:0e:52:65:a9:e8:57:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Sep 22 20:00:21 2026 GMT
Not After : Sep 23 20:00:21 2026 GMT
Subject: CN=0939811a211712b2b959329e78cdc10b49a9abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:b6:ef:6e:dd:e5:4b:5c:cd:21:ee:7b:a0:
5f:4b:78:00:12:48:90:a0:a8:5b:09:12:d7:ff:5a:
be:dd:c7:0c:93:44:4e:b2:4c:be:6b:53:df:c8:9f:
80:40:f3:d6:ed:e2:88:76:12:20:b1:0a:31:8e:22:
0a:ba:85:56:80:4a:31:c5:41:4e:76:91:cf:6d:33:
cb:00:aa:4a:c8:32:6e:96:2a:e9:db:64:6e:9e:19:
2b:3d:11:4d:d2:73:b1:26:67:9a:65:e6:16:95:68:
a1:a0:2f:37:ee:97:ea:18:b9:08:1d:31:3e:b9:26:
70:7b:a4:7d:a9:4f:73:e5:40:e7:30:2b:c5:27:44:
10:96:b2:c9:83:91:e0:26:de:b4:4e:ed:67:6a:86:
e1:a7:39:1f:0d:48:d7:57:a7:73:84:a7:3f:8e:9d:
e6:1f:7d:bc:4b:0c:1b:58:c8:f3:bd:29:e3:41:e1:
81:db:26:a4:f3:2a:4b:62:23:7e:b8:e4:d1:cc:c2:
03:8f:2c:93:3d:72:73:6b:b2:ef:46:6f:b7:aa:ec:
fb:05:bc:14:2a:4d:c0:22:26:84:0a:fa:14:ed:23:
46:19:91:fc:b8:0e:e7:20:37:43:1f:61:67:a3:2b:
14:97:65:6c:1b:03:8d:75:88:37:3f:37:a6:27:2f:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:81:1A:21:17:12:B2:B9:59:32:9E:78:CD:C1:0B:49:A9:AB:F7
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:be:0e:67:0c:45:60:43:08:8c:ff:2a:38:97:37:52:28:07:
d4:7a:65:ac:19:24:e4:9b:db:60:b4:f0:af:54:a6:d9:e7:2b:
33:1c:4a:41:6c:74:43:f7:ed:ab:03:6f:c2:6e:fa:ff:1c:b8:
47:a2:90:0d:63:f5:31:8f:7d:0a:39:6d:0a:64:7b:09:c3:0e:
c6:45:61:fd:70:30:1a:39:7d:fb:84:b3:53:9d:c5:6a:d6:d3:
bd:d9:96:e9:c0:cf:02:a0:9f:ca:ba:89:db:52:22:4b:eb:1f:
ec:a0:3c:27:f8:e5:8e:ff:b5:73:64:bd:d5:b8:ea:9a:4d:69:
32:df:e9:7e:cc:2f:b2:ab:cb:84:e0:e9:1a:c4:70:8c:0b:9a:
f7:a3:38:3c:c7:87:c4:99:9b:e3:ec:31:b7:c9:92:a6:21:c4:
64:86:c8:5d:b8:92:eb:c8:ac:39:b7:75:7f:d8:8a:f1:88:12:
bd:32:82:d2:b3:38:d4:a7:a8:cf:cd:a8:f9:df:76:a3:8a:93:
f0:de:10:e4:03:50:5e:f6:e1:b5:d3:09:21:ea:2e:76:58:e6:
09:fc:59:e3:b4:3a:5d:e9:a5:53:f2:6d:f7:a7:be:9c:51:01:
45:76:67:1a:12:fa:2f:26:93:ca:d5:97:31:e6:ab:98:dc:45:
fa:68:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:18:52 2026 by rpki-client