Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: KidLO2asyANngtYR34rlsQBzG+Ka23SYgHFAwkKlBBk=
Subject key identifier: FC:52:09:7B:52:B7:EF:08:62:9B:B8:FD:D0:4E:E8:D4:ED:F0:85:D9
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019EBEEC9899B52DD3798795430ECE6B0FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 03:00:36 +0000
Manifest this update: Sat 13 Jun 2026 03:00:36 +0000
Manifest next update: Sun 14 Jun 2026 03:00:36 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: z+I9yS7GmP4YvSgMHx+AzZGMo+rIG/e5j6qeDRyT+gg=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:98:99:b5:2d:d3:79:87:95:43:0e:ce:6b:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jun 13 03:00:36 2026 GMT
Not After : Jun 14 03:00:36 2026 GMT
Subject: CN=fc52097b52b7ef08629bb8fdd04ee8d4edf085d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:7a:53:29:89:31:e7:73:4d:57:b4:5a:ce:
34:e8:c9:09:90:16:7e:14:2a:bf:dd:46:de:c7:be:
79:e2:85:9a:eb:c3:de:ba:6d:78:78:c0:d8:d0:bc:
c5:8c:dc:af:59:ec:b5:59:cf:e4:35:64:42:5e:4f:
83:65:d8:9a:c6:4f:63:e0:f3:02:28:96:d8:50:c1:
df:33:8c:02:a6:af:4c:05:31:ea:2c:1b:92:27:1f:
5c:0b:1a:e1:a8:ca:1c:d2:5b:b4:e4:14:1f:25:a4:
b0:fa:77:f8:91:b6:ff:58:90:07:ef:cc:c5:1e:07:
ee:43:9d:31:7e:e8:9c:c6:49:1d:40:1e:86:ee:88:
7a:ef:20:48:a2:2c:8c:41:7a:36:29:88:a7:40:39:
bb:18:15:39:a8:b4:f7:bf:64:a8:09:62:a1:eb:77:
e9:e7:7a:2a:9d:fb:af:d2:ca:fc:b9:46:01:b9:9d:
a2:37:c4:58:da:4f:c0:e2:44:ce:48:51:c5:4b:cc:
98:16:e6:4d:ee:01:e1:37:f4:69:76:1d:7e:e0:6c:
82:1d:37:06:80:41:5d:31:6e:94:54:88:16:1f:66:
b1:89:ec:79:6f:00:50:ac:48:d0:75:1c:e8:33:a5:
2c:46:77:ad:4c:23:9e:8b:1c:05:e3:24:05:eb:db:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:09:7B:52:B7:EF:08:62:9B:B8:FD:D0:4E:E8:D4:ED:F0:85:D9
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7b:1c:31:25:6b:67:e2:3a:6d:17:24:06:c2:c6:41:98:0f:
9d:bc:01:f6:47:69:d5:28:06:60:6a:5f:cf:a0:b7:22:4d:2e:
4a:68:3c:78:c6:08:c6:96:fe:5b:e9:16:78:f3:a6:2d:93:09:
fb:e4:52:35:e5:5a:9c:ae:f4:61:3c:b6:d8:44:63:90:d5:33:
27:75:ac:37:46:45:fa:4c:f0:9f:4e:a9:0b:09:d3:88:f2:1a:
af:9e:39:73:aa:d1:a0:44:7c:58:8d:5c:83:9b:e9:79:88:9e:
5f:2b:14:9f:a7:09:85:34:d1:eb:c0:ac:a4:8b:b5:93:63:0d:
72:21:86:fc:96:21:47:de:e7:d5:26:29:f6:fe:67:61:01:89:
b8:85:00:d1:10:24:fe:dc:ab:2a:6e:b8:a5:0a:36:3d:92:81:
95:f5:58:35:3d:c9:9a:24:57:15:39:a6:55:8c:3b:ae:d1:37:
7f:aa:9e:1b:a0:bf:b1:17:7e:16:b9:cb:23:2c:49:8f:ee:d4:
83:84:5c:de:50:c7:f4:1b:c6:b5:38:83:27:88:51:8f:31:35:
80:f4:b7:3a:10:6e:0c:12:80:19:df:e7:c4:47:3d:5f:48:0b:
4b:8d:a8:3d:bc:2a:d4:90:18:1f:4e:24:5b:67:0c:3e:e5:3f:
12:d9:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:46 2026 by rpki-client