Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: givxkTD8vw9oKgsd7ScTUhuMWqTGRnnGK6DSyrhqQ1M=
Subject key identifier: BC:6D:DD:00:31:FD:C2:71:79:1C:9A:77:DD:96:3B:01:F2:AF:C1:7A
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019CAE357561A7DAC2097D69896CCAA8845D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 02E5
Signing time: Mon 02 Mar 2026 11:01:04 +0000
Manifest this update: Mon 02 Mar 2026 11:01:04 +0000
Manifest next update: Tue 03 Mar 2026 11:01:04 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: 5jMNcqAu9/C5cdKb/Mkq+ImTNTiT0Mf0F8ZvwOzDIFU=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:75:61:a7:da:c2:09:7d:69:89:6c:ca:a8:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Mar 2 11:01:04 2026 GMT
Not After : Mar 3 11:01:04 2026 GMT
Subject: CN=bc6ddd0031fdc271791c9a77dd963b01f2afc17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:7c:46:03:ed:c3:ee:57:09:ab:37:c4:43:
27:4c:91:aa:b4:e4:ff:40:93:19:f4:76:7e:72:31:
df:94:11:0a:78:15:e5:be:11:d9:8c:8f:7c:ad:ed:
47:5d:d4:41:3e:73:29:2c:cb:cb:45:af:31:c9:fe:
d9:e9:98:f7:ed:af:d2:6a:14:56:92:b8:01:48:e9:
e3:c9:69:ac:9a:6b:99:c8:3d:4e:c4:14:7c:24:51:
31:78:08:36:9a:cf:93:5c:fe:b5:41:54:41:ea:6a:
98:7f:b4:dc:86:0f:02:29:94:6a:7b:48:f1:d5:a3:
27:26:4e:7b:90:d6:3d:2b:5c:aa:70:9e:33:44:75:
73:2e:0c:34:0e:d8:8e:1e:91:9a:60:b9:ff:c4:2d:
c7:4c:54:84:4c:7f:66:dd:0f:6e:44:9c:04:e5:7d:
ba:c6:6e:dd:a6:38:ff:2e:7f:62:5e:3e:07:73:51:
30:57:b4:82:a7:62:67:32:b8:f6:01:4f:28:2b:57:
84:be:ef:ee:88:88:49:96:32:15:fc:1d:d6:ab:e6:
90:b6:05:46:a9:a2:c8:09:50:d2:61:3f:e0:af:36:
04:45:b4:72:23:9c:9e:86:77:ef:bb:c2:e0:c8:58:
b9:5c:5f:24:28:a0:96:a4:6d:5a:b7:6f:3c:78:1f:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:DD:00:31:FD:C2:71:79:1C:9A:77:DD:96:3B:01:F2:AF:C1:7A
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:76:50:46:e4:22:61:5c:dd:9b:82:6b:03:01:e0:9b:a9:6a:
40:4e:10:6e:52:10:95:bc:d1:7c:9b:9a:38:53:7f:fe:be:3c:
87:1d:cf:b9:77:d4:1f:fe:e2:67:a3:27:b9:ee:9c:38:60:bf:
53:dd:4b:ab:b0:04:e2:3d:c1:78:30:6b:a9:42:3a:97:f3:ac:
7b:b4:0f:d1:2a:31:48:99:75:43:17:49:ad:ab:42:11:5c:07:
b5:1f:57:0a:fc:43:20:00:80:0b:56:76:12:c8:73:e7:ca:ba:
0c:60:c3:44:c7:91:18:7a:20:c1:ee:04:55:14:68:c2:c7:45:
9e:63:1f:8a:44:ca:1c:eb:23:e8:5d:c4:aa:18:0d:a3:9a:6f:
27:0d:a7:8c:8a:1d:e0:d7:62:6d:75:3c:91:5c:5e:ba:23:7b:
76:ff:f8:c8:1a:ed:8c:97:3a:a1:99:dd:78:6f:f5:cc:9e:7b:
e6:28:aa:18:fb:57:b4:62:7d:8a:15:6c:20:5f:20:6a:df:40:
94:07:9e:e4:c3:59:13:e7:94:87:23:cf:54:52:2c:99:85:31:
0a:af:eb:7b:cf:df:46:00:7b:ae:1b:be:61:f5:5a:d7:9d:00:
68:a1:f0:53:3a:2d:9b:03:e8:cb:62:2f:76:c2:06:61:16:e6:
e0:d3:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:10 2026 by rpki-client