Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: NPG4QI27XoptmK0Lv1B8XPl9ki+G15f9SQv2yd2LtLc=
Subject key identifier: 1C:6C:00:C5:98:37:B5:C7:18:42:38:AD:79:A5:4C:B2:C1:A6:32:A5
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019FACE42F6905BA439EA32BE7AC8B9516AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0472
Signing time: Wed 29 Jul 2026 08:01:03 +0000
Manifest this update: Wed 29 Jul 2026 08:01:03 +0000
Manifest next update: Thu 30 Jul 2026 08:01:03 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: fgLqTaPYyh4WLmOqaCJL4LuGmCPZYtR78h/27PJY4gQ=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:2f:69:05:ba:43:9e:a3:2b:e7:ac:8b:95:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Jul 29 08:01:03 2026 GMT
Not After : Jul 30 08:01:03 2026 GMT
Subject: CN=1c6c00c59837b5c7184238ad79a54cb2c1a632a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:2d:c5:af:9e:15:ce:c7:8d:2f:0c:bf:92:
05:d0:a4:a5:2d:2c:01:9f:e6:dc:41:39:f4:79:ef:
dd:59:5e:58:f9:96:2e:ad:13:46:b8:6f:22:a0:8e:
a3:ca:b1:27:4a:64:07:00:61:d1:77:07:f1:f5:0d:
a9:2a:36:39:68:2c:af:c1:ca:42:ff:f3:9b:94:d3:
97:8c:e4:14:7a:82:9c:ab:9d:a9:1f:20:7a:9a:b0:
ca:a2:72:b4:ba:b8:61:d0:12:85:af:65:21:4a:4f:
f4:4d:0e:57:81:1d:5b:50:81:44:8b:5e:9d:5d:0f:
cb:35:95:92:5d:c4:21:37:85:d3:cb:19:2d:53:96:
4b:5b:80:36:88:b0:9b:d7:3b:56:10:1e:f2:2a:bb:
52:d8:d7:c9:38:3d:86:af:95:d6:26:b8:b3:a5:ca:
c6:83:ec:ee:11:ff:3d:84:58:f1:94:76:3f:35:b2:
42:50:14:52:1c:3c:18:58:05:44:68:65:14:00:89:
a9:31:38:f0:a5:00:e5:02:00:cb:a0:8e:de:12:d1:
4d:6b:ed:9c:85:36:45:cd:17:5d:8a:cb:be:70:f4:
e7:19:43:69:c9:fb:62:6b:f9:40:ba:7f:2f:f0:ae:
95:18:d0:7a:46:a9:c9:82:93:89:56:4a:48:58:3a:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:00:C5:98:37:B5:C7:18:42:38:AD:79:A5:4C:B2:C1:A6:32:A5
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:71:b0:ac:05:9a:e6:2a:08:b9:1e:d5:75:2c:71:79:5f:c2:
a5:74:51:5f:e1:9c:c5:51:e6:18:b6:3e:ba:68:72:64:20:4a:
5f:15:92:1c:9a:6f:59:e0:54:14:a9:10:db:52:e1:00:7a:45:
58:e7:1f:ed:e2:75:15:29:5f:83:ea:4b:ea:04:e2:c4:a1:4f:
04:fb:03:4d:e5:cb:3f:5d:8d:32:19:eb:d1:fc:97:3b:bc:04:
3a:ed:6e:c4:12:cd:8b:af:c8:5f:53:5c:1d:34:ce:3e:91:d9:
9c:7e:a6:17:2f:0a:4a:04:a5:2d:f5:94:8f:d9:88:ef:63:51:
a2:49:86:49:4c:fa:2c:d4:fd:33:31:ee:37:77:6a:9f:58:07:
16:89:43:a0:73:6c:6f:f9:2f:1e:d7:65:62:bf:c7:1c:7b:d6:
d9:6c:8f:26:59:21:84:a1:f4:82:b6:5e:01:f7:fc:c8:23:81:
43:df:a5:40:b1:dc:09:1f:e4:33:d9:52:e0:2a:23:c5:dd:9b:
43:c3:46:02:45:b1:de:8c:f5:b8:42:ca:60:0a:d5:32:dd:e2:
a3:1c:9d:9c:85:9c:f3:f2:02:ad:37:ea:70:2e:d0:89:ce:f0:
7d:19:15:bc:a2:fd:44:eb:ce:5a:6f:71:c0:16:fd:65:e5:ce:
d3:36:7a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5C9pBbpDnqMr56yLlRaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGE5ZTcxYWQ1ZDU2NDIzM2E5NDRkMWY0Nzk4NTE4ZDE4
MzFmN2QwHhcNMjYwNzI5MDgwMTAzWhcNMjYwNzMwMDgwMTAzWjAzMTEwLwYDVQQD
EygxYzZjMDBjNTk4MzdiNWM3MTg0MjM4YWQ3OWE1NGNiMmMxYTYzMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUtxa+eFc7HjS8Mv5IF0KSlLSwB
n+bcQTn0ee/dWV5Y+ZYurRNGuG8ioI6jyrEnSmQHAGHRdwfx9Q2pKjY5aCyvwcpC
//OblNOXjOQUeoKcq52pHyB6mrDKonK0urhh0BKFr2UhSk/0TQ5XgR1bUIFEi16d
XQ/LNZWSXcQhN4XTyxktU5ZLW4A2iLCb1ztWEB7yKrtS2NfJOD2Gr5XWJrizpcrG
g+zuEf89hFjxlHY/NbJCUBRSHDwYWAVEaGUUAImpMTjwpQDlAgDLoI7eEtFNa+2c
hTZFzRddisu+cPTnGUNpyftia/lAun8v8K6VGNB6RqnJgpOJVkpIWDrHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxsAMWYN7XHGEI4rXmlTLLBpjKlMB8GA1UdIwQY
MBaAFNoKnnGtXVZCM6lE0fR5hRjRgx99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWIt
YTM3YjNmMzIxNzAzLzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZDE0ZGUtNjE1Zi00N2NlLWE3ZWItYTM3YjNmMzIxNzAz
LzEvMmdxZWNhMWRWa0l6cVVUUjlIbUZHTkdESDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXGwrAWa
5ioIuR7VdSxxeV/CpXRRX+GcxVHmGLY+umhyZCBKXxWSHJpvWeBUFKkQ21LhAHpF
WOcf7eJ1FSlfg+pL6gTixKFPBPsDTeXLP12NMhnr0fyXO7wEOu1uxBLNi6/IX1Nc
HTTOPpHZnH6mFy8KSgSlLfWUj9mI72NRokmGSUz6LNT9MzHuN3dqn1gHFolDoHNs
b/kvHtdlYr/HHHvW2WyPJlkhhKH0grZeAff8yCOBQ9+lQLHcCR/kM9lS4Cojxd2b
Q8NGAkWx3oz1uELKYArVMt3ioxydnIWc8/ICrTfqcC7Qic7wfRkVvKL9ROvOWm9x
wBb9ZeXO0zZ67g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:26 2026 by rpki-client