Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: p80Shdwc96Crv3IrIZWt5FE7ZX1x4pHwbO8oAPGdKJ8=
Subject key identifier: 0B:6D:A0:C5:02:F0:5B:C8:96:3D:51:B2:52:AF:BD:5C:FE:C4:C4:88
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 01A1DE714CA56D5CF8F5F8F48E1DBD59A40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:02:09 +0000
Manifest this update: Sun 15 Nov 2026 09:02:09 +0000
Manifest next update: Mon 16 Nov 2026 09:02:09 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: bUbKU7KLnqZGWAhjSabVb1cbabKduhNdjp39u9sVsNk=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:4c:a5:6d:5c:f8:f5:f8:f4:8e:1d:bd:59:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Nov 15 09:02:09 2026 GMT
Not After : Nov 16 09:02:09 2026 GMT
Subject: CN=0b6da0c502f05bc8963d51b252afbd5cfec4c488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d0:f0:7d:89:d0:1f:26:76:6f:17:e1:6a:
4b:29:5a:f4:27:78:33:19:93:dc:9b:a3:cd:01:4a:
04:16:a6:b7:fb:86:4e:84:ec:38:72:35:19:b7:07:
d8:5a:31:42:06:5a:8c:00:2f:89:9a:0a:b5:fc:31:
e0:98:5f:99:e7:6d:3e:f9:c1:7c:e6:fd:97:32:f5:
72:c7:60:bc:cb:93:70:e1:1f:a7:fc:4a:c5:a0:68:
83:c7:d9:c3:81:ff:60:ee:ea:53:ce:56:df:97:28:
04:60:2e:41:e3:a2:5c:21:0e:2e:38:e0:45:4f:6d:
12:9d:09:77:31:ec:6a:24:6d:27:4a:c3:ee:ab:9a:
b0:5d:a8:f6:b2:44:66:64:91:42:b1:d6:ae:5f:d5:
09:c5:2e:3d:d9:de:61:f5:ec:59:6d:9f:32:c1:87:
49:f1:56:8f:fd:42:7a:6d:96:9d:e1:af:e6:55:eb:
d6:f9:ee:29:df:e9:dd:d4:af:13:a1:aa:7e:a4:1e:
e9:c5:b8:24:de:db:00:b1:6c:a5:c7:76:c0:8e:2b:
04:5c:c2:52:b7:97:bb:6a:68:8a:88:02:b3:4f:57:
25:51:f8:db:4a:2d:63:09:97:69:c8:66:a3:22:b1:
84:4e:f6:37:48:46:3c:46:af:17:3d:27:e7:d2:69:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6D:A0:C5:02:F0:5B:C8:96:3D:51:B2:52:AF:BD:5C:FE:C4:C4:88
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:26:5f:ef:8a:45:66:5f:44:55:c9:cc:61:e7:4f:f9:3d:
39:e7:fd:9b:e3:45:19:32:16:fc:6a:d9:ce:07:b1:e1:45:62:
a7:bb:42:a8:bb:75:6c:6f:44:e1:96:0b:66:19:5d:1f:b0:8c:
0d:57:88:d7:c9:4b:b0:d2:ad:be:57:97:24:e5:d6:3e:b3:5a:
38:33:d4:45:3a:fd:42:1a:35:1c:8d:9f:1e:86:b7:6b:f2:75:
a2:15:5a:cd:b7:9c:1f:fc:de:84:a5:db:df:a3:6b:d7:5b:63:
48:fb:81:ab:1d:64:e8:54:3a:53:88:77:a5:6c:80:0b:91:38:
3b:cc:50:1e:86:0d:d3:3a:c5:18:4a:8d:0b:ed:ac:6e:7f:f6:
70:f2:c5:65:a6:cc:83:b6:9b:0b:2f:01:f6:0b:6f:24:8c:82:
11:2f:f9:c8:d0:b6:9f:f6:12:6b:08:ca:3f:6c:84:2a:17:61:
7e:40:70:ef:b0:8f:32:6d:a5:ec:bf:cb:ae:3f:ce:69:b3:a9:
8d:2b:73:60:06:ce:cc:b6:c7:37:97:f8:f8:0b:73:aa:50:64:
18:5b:1f:d8:79:3f:48:14:a1:a5:43:7e:9f:04:d6:92:de:58:
dc:2c:fd:cb:22:c2:25:10:31:a9:8b:a4:c4:67:c6:a0:d4:ed:
b1:cb:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:01:14 2026 by rpki-client