Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: bEsMESt92nEvKdpRdKuQLgJw0StZtWeHc0JBrBFtZ4I=
Subject key identifier: B9:9B:3C:A5:BA:E2:B6:E2:89:CE:50:E8:8E:FA:A1:58:8B:EC:A5:86
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019D9961FC44D144EE393738ED6D16B2BAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:28 +0000
Manifest this update: Fri 17 Apr 2026 03:00:28 +0000
Manifest next update: Sat 18 Apr 2026 03:00:28 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: y1Td+Bc3avdUtlFwl3gja3uFrrFecvmFUIUdDVcUpJ8=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fc:44:d1:44:ee:39:37:38:ed:6d:16:b2:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Apr 17 03:00:28 2026 GMT
Not After : Apr 18 03:00:28 2026 GMT
Subject: CN=b99b3ca5bae2b6e289ce50e88efaa1588beca586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:c2:81:5e:aa:65:5f:ee:c2:0c:ad:7d:87:
80:09:77:ad:95:aa:14:40:c5:16:13:e3:26:39:36:
78:e5:bc:80:ca:f5:fc:5c:30:c3:87:0f:82:5a:a0:
3d:9c:1b:cb:dd:74:58:06:13:57:f4:52:bc:ca:a5:
11:57:cb:92:3a:0d:d3:d3:aa:75:eb:50:d4:53:79:
13:66:b0:43:99:f9:8e:38:aa:f3:3d:77:cc:bb:ff:
9b:ad:5b:cc:7e:e9:dd:e4:85:fd:9b:78:17:66:85:
fd:b1:a7:82:da:ce:f9:47:ae:f2:be:29:7a:61:62:
1f:f1:8c:0a:a0:2b:91:a4:ce:b1:65:33:14:bc:90:
f7:a3:d5:c9:97:ce:bd:fb:6c:c6:63:6b:10:25:4f:
f6:23:13:aa:77:4a:b7:18:c6:83:94:3c:5b:8a:ef:
12:28:46:4d:aa:9d:73:64:2f:33:c7:8f:28:ba:de:
ea:8e:25:bf:98:d4:dc:33:5a:38:5d:50:ec:da:f3:
96:a8:a1:bc:1c:2d:d8:17:95:f0:2a:2f:9a:76:83:
e0:c4:dd:88:8c:12:c0:98:81:5b:a4:15:69:d9:11:
15:f1:1e:53:b6:9b:6f:22:68:4e:60:92:70:5c:a4:
bc:96:f6:4d:1e:fe:96:37:cc:97:36:18:6c:86:e4:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9B:3C:A5:BA:E2:B6:E2:89:CE:50:E8:8E:FA:A1:58:8B:EC:A5:86
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:db:03:ce:12:0e:0e:62:99:83:10:a4:e6:22:5f:81:b6:
58:18:f7:f2:9e:f9:e0:89:c6:b9:0c:d4:63:50:64:0e:2f:55:
0d:aa:9c:68:fc:d5:85:7b:12:ef:91:93:7f:f0:9a:bf:16:1e:
7d:9f:8d:fd:00:d7:f2:9e:72:68:8b:ce:0e:81:69:4a:e2:b0:
ec:c2:4e:c8:31:81:99:74:50:2b:dc:30:85:3b:fd:a3:93:15:
28:f1:4b:7e:d2:63:d1:3f:4d:bf:af:8d:dd:f5:de:e1:eb:2e:
19:91:71:1e:12:f5:56:a4:f2:01:b8:fc:26:0f:d3:76:07:4d:
fa:7e:d3:e3:54:38:15:e6:d9:19:4b:dd:29:06:b9:92:d8:ce:
af:5f:02:59:43:bf:62:6a:50:33:9f:a8:78:0f:4b:8f:af:de:
cc:0e:5f:9c:58:76:a4:54:66:35:df:e0:cf:c7:35:a7:44:5e:
49:12:d9:9a:ea:27:97:b5:c5:26:1b:16:ae:54:fd:51:2d:01:
32:83:f6:97:23:49:42:f2:89:24:e6:89:fc:db:a0:4b:53:e2:
72:22:55:0d:22:67:4c:ed:42:b1:0f:63:f6:c6:7d:ba:33:8a:
27:ab:2f:42:5e:ab:7d:aa:b2:47:86:a9:40:a6:84:a3:43:f8:
8b:d9:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:12 2026 by rpki-client