Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: VcOyDvL8Z9MrHRSot7T9Oi+suVsi3P1v5ePl5MnCt9E=
Subject key identifier: DF:E7:10:32:00:74:CC:DE:C4:F4:ED:9C:0C:E2:75:10:86:26:73:D2
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 01A125E77DE0BFA29494241E1145A7D24F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0499
Signing time: Sat 10 Oct 2026 13:01:30 +0000
Manifest this update: Sat 10 Oct 2026 13:01:30 +0000
Manifest next update: Sun 11 Oct 2026 13:01:30 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: 7zFrXeWbTVYJMPTgiuUZNwHaQdLRh3kZ+ggUOU1Kxws=)
2: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (hash: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e7:7d:e0:bf:a2:94:94:24:1e:11:45:a7:d2:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Oct 10 13:01:30 2026 GMT
Not After : Oct 11 13:01:30 2026 GMT
Subject: CN=dfe710320074ccdec4f4ed9c0ce27510862673d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:c2:5e:bd:b6:94:f5:7c:3d:0a:a0:e0:9e:
21:79:f1:53:f7:83:ed:cd:fa:ab:52:a2:44:53:e7:
9a:01:7e:06:6a:29:d4:60:82:e6:dc:6a:71:3d:e0:
f5:5f:a1:7c:e9:1e:33:b3:41:af:88:fc:d6:2b:c9:
b0:5d:e9:6e:20:06:e0:08:50:59:85:de:99:9b:a4:
ce:4f:c9:f5:36:a4:0c:b9:6c:b9:31:6f:41:32:fa:
d0:b1:24:a6:3b:e6:2d:f0:e4:4f:49:6d:ca:45:81:
d7:fb:4a:2c:4f:82:ee:12:07:96:7a:59:e0:ad:1f:
53:7e:d4:e3:34:d9:14:3e:f1:cd:6e:3c:61:41:4a:
9c:36:8d:ae:57:73:47:a0:23:b2:0e:80:c2:f6:80:
2b:b5:99:c3:9a:69:86:96:7a:23:52:7d:c3:8e:cb:
fa:6e:a0:e3:c9:64:b0:49:44:31:de:24:14:ea:66:
33:37:6f:58:2b:61:02:2b:11:e5:65:a1:a7:ba:49:
4f:ad:0c:10:c1:97:75:f1:29:23:22:37:39:e1:e1:
19:75:d5:59:b7:bf:47:26:80:5a:64:04:b9:f2:53:
eb:eb:90:e5:9b:bd:5c:a5:a2:2f:91:bd:05:c8:e3:
f1:86:d2:3e:4d:fd:6c:74:ec:46:b5:e0:08:be:ad:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:10:32:00:74:CC:DE:C4:F4:ED:9C:0C:E2:75:10:86:26:73:D2
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:04:c3:d6:f1:d2:ee:cb:62:a0:39:8d:25:e0:39:0a:41:32:
93:52:0d:c3:6a:39:b2:c4:7c:f5:01:d4:f3:ff:4b:40:09:51:
c3:02:b2:4d:10:80:fe:e5:0e:67:7d:40:9c:42:c7:36:a9:91:
bf:e6:5d:f4:9a:9a:ce:38:46:79:a2:b0:fa:5c:8d:d9:0e:35:
da:96:4a:2e:0b:f1:69:34:e0:ef:46:2b:4d:e1:6d:3b:fb:a4:
79:e6:40:bc:33:8e:09:bb:a3:2b:b5:33:a3:84:a3:4e:eb:64:
2a:7b:df:36:c6:0f:59:a1:35:af:cf:b5:c7:4b:ae:76:a0:cf:
f2:7f:cc:8e:3e:08:41:48:83:0a:ef:d9:dc:93:2d:fe:94:a5:
63:eb:fd:c0:f8:b0:d7:61:e4:3b:48:58:89:12:19:89:1f:e9:
4b:69:5a:2d:c9:96:9e:0c:09:35:64:36:5f:ea:eb:42:07:79:
06:12:51:4d:74:ab:71:27:ae:3d:d2:98:99:c3:fd:66:ae:78:
ea:67:66:04:6c:91:b9:b6:78:30:50:81:57:b4:ea:05:d4:30:
d6:38:8c:b7:23:4c:14:be:0a:0a:d5:4d:e7:88:1f:94:2b:02:
c2:e7:1b:db:19:e7:82:89:97:2e:33:14:11:35:5f:86:57:39:
f7:82:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:03:18 2026 by rpki-client