Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: TGsZNe6fRSRrgDCYR+euZ80qb5foIqvmmo3fdGdyzJY=
Subject key identifier: 01:B5:52:C9:66:46:D8:9C:8D:84:20:F6:F9:24:D9:DD:31:85:DE:4C
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019D9BBF0FEF5E8E0965A3B599140DFCE5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0360
Signing time: Fri 17 Apr 2026 14:01:23 +0000
Manifest this update: Fri 17 Apr 2026 14:01:23 +0000
Manifest next update: Sat 18 Apr 2026 14:01:23 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: rBMMib8Dk4BjoFg8cISd2vZw3XSc9j5s8n9MtCjazLU=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0f:ef:5e:8e:09:65:a3:b5:99:14:0d:fc:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Apr 17 14:01:23 2026 GMT
Not After : Apr 18 14:01:23 2026 GMT
Subject: CN=01b552c96646d89c8d8420f6f924d9dd3185de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:dd:5d:ec:da:e6:1d:d1:34:1e:59:1a:25:6c:
11:77:29:30:ce:18:73:81:bb:d8:cb:c1:39:2d:14:
43:b7:f7:44:17:05:d6:b8:45:bf:4c:61:50:ec:c5:
ab:98:25:d3:97:74:53:fb:af:aa:e6:8c:1f:6e:54:
bc:c3:71:4f:0b:5b:67:b0:30:01:9a:14:39:81:19:
bd:29:67:05:fc:47:50:b0:6b:e4:0c:cb:9b:98:ba:
e7:d8:a8:81:1b:8b:58:64:55:77:61:a0:a7:89:f0:
6c:4f:7f:be:14:c0:d2:fa:37:0a:3a:71:3d:f4:c1:
7c:c9:f2:4e:bb:91:40:bf:9a:fd:4e:07:3f:1b:54:
1d:4a:49:e6:fc:d4:d8:82:46:96:2f:6e:15:b2:d2:
f1:04:46:bc:4e:17:f3:fd:82:01:18:51:83:35:41:
fd:12:fe:d1:c7:d0:a0:59:38:2c:2b:4b:79:71:77:
12:df:64:e6:2a:9f:39:d9:f8:35:52:80:ab:48:c7:
5b:13:a6:01:22:35:7a:0b:ef:58:28:b3:4b:ca:41:
62:04:0c:ce:2b:7c:82:b2:8c:6c:af:c9:f8:50:0b:
c8:05:42:dc:2e:28:5e:c9:7f:ae:75:08:ad:79:d2:
29:c1:5f:18:30:67:65:57:a4:58:e5:da:dd:3f:56:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:52:C9:66:46:D8:9C:8D:84:20:F6:F9:24:D9:DD:31:85:DE:4C
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:35:17:34:6a:b1:22:6e:f1:9e:51:fb:86:af:d2:ca:b2:3e:
76:76:11:e7:e7:f3:78:a5:ba:b8:0b:36:14:65:8f:56:7b:93:
65:8c:f4:f8:ea:48:f8:3f:f4:1e:a6:32:68:07:c6:f0:64:ad:
6a:8b:b2:36:93:c9:14:78:93:d3:33:bc:f4:e7:ab:ae:99:9b:
18:ef:e9:4c:52:0c:b6:dd:ac:b6:d2:16:ef:e0:a2:2d:51:7a:
a5:e6:76:91:63:fd:97:50:c7:56:b1:4c:34:8d:5d:ba:ce:88:
cf:79:96:05:b3:de:4a:8e:43:80:83:58:9f:e8:a2:e8:0d:e2:
7e:2f:9b:fd:f3:f9:36:e6:6f:d4:2f:0a:ea:62:51:da:a4:f6:
3d:86:11:b9:49:4e:ff:af:61:45:38:64:c1:d9:2a:c0:20:c1:
0f:bf:4d:06:52:e4:95:90:20:38:6d:78:5c:e5:f7:53:4f:70:
1a:51:20:33:fa:00:59:8f:88:9e:4e:fe:2c:98:44:1f:cc:df:
26:e3:b1:b9:49:bf:fd:bc:4d:d3:2a:e3:8a:39:c5:0b:3f:3e:
80:6a:df:47:a7:40:b5:4b:94:30:48:5a:5f:2d:16:88:dc:c0:
ef:b2:30:e1:91:6a:95:bc:f5:d9:e3:78:52:73:33:5d:87:a1:
01:a1:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:15 2026 by rpki-client