Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: Xq4/PWR2ff9/L/APFf5y/IzaxFwzpCtEOxEOWhS1f5s=
Subject key identifier: F5:DD:C5:AB:65:9A:31:B1:BA:7C:24:A9:C2:FC:42:6D:FD:3D:DF:FE
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019D9C2C5437BA838BD830F8ADEFE9B8250E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 02C2
Signing time: Fri 17 Apr 2026 16:00:44 +0000
Manifest this update: Fri 17 Apr 2026 16:00:44 +0000
Manifest next update: Sat 18 Apr 2026 16:00:44 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: RWtOaZL360/ZYY2coWtslAjXJ3FFZWVFg6KXzVQVTzs=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:54:37:ba:83:8b:d8:30:f8:ad:ef:e9:b8:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Apr 17 16:00:44 2026 GMT
Not After : Apr 18 16:00:44 2026 GMT
Subject: CN=f5ddc5ab659a31b1ba7c24a9c2fc426dfd3ddffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:b8:08:70:f5:32:c2:4a:94:cf:3b:26:0b:
e5:f2:9f:ce:ae:4a:d9:73:d4:cf:67:a7:19:0a:b4:
25:c5:7c:ec:d0:7e:d3:f5:23:33:f4:69:d7:db:b2:
b9:7d:d6:f6:07:f6:ea:c7:b1:68:36:11:ae:ae:cd:
09:b5:a6:38:fd:e6:d4:16:50:7c:09:86:f9:79:04:
6a:28:fd:66:f5:96:0f:c3:b9:b8:5a:e4:25:a9:76:
2e:ac:f6:60:f3:e3:20:1f:2a:04:19:d1:2b:70:f5:
74:13:bf:82:33:24:7b:38:03:2a:f7:90:ea:91:da:
10:db:34:88:ee:63:13:6c:09:86:50:72:71:2e:96:
a7:f8:d1:98:85:74:8d:39:7d:3c:fa:3b:cb:9a:f6:
a3:74:83:28:28:66:67:be:75:ff:8b:4a:09:3d:2c:
3b:fb:73:7d:24:c5:de:b9:20:52:35:24:d8:c3:54:
77:79:2e:ef:61:f0:0e:52:ce:c2:7e:37:38:88:3c:
86:e0:c1:4e:e6:6b:05:b4:fe:50:f2:74:ad:b6:2f:
f6:97:09:0f:d8:5a:63:cd:71:6b:38:8f:c7:f8:27:
58:35:0a:b7:61:52:6c:67:55:97:1c:e0:6e:49:9f:
7a:a5:28:2c:09:f6:c6:22:c1:02:2f:d9:e0:48:a3:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:C5:AB:65:9A:31:B1:BA:7C:24:A9:C2:FC:42:6D:FD:3D:DF:FE
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:35:81:b4:cd:25:40:91:cf:c3:43:e7:cb:16:2e:41:ee:
99:a2:23:0d:f1:4c:2b:85:ce:35:4d:d9:91:b2:34:bf:e6:df:
a9:76:48:5c:48:18:d6:90:41:0c:f8:0c:14:c5:9d:b0:5f:02:
8c:53:a8:0f:dd:75:bb:c1:8d:63:06:61:30:2e:9b:50:fe:17:
b8:b8:6c:31:21:9c:f6:7f:01:d2:e6:c0:7f:4b:3d:2a:6b:db:
d4:05:7f:68:4e:be:e7:fd:42:89:10:13:c8:ea:07:13:07:d9:
b0:32:0e:72:2c:0a:27:e8:22:7e:3b:84:f6:04:f2:fe:ee:e0:
ae:78:d3:88:0e:4f:81:d5:35:13:1f:48:18:34:07:3f:21:48:
93:92:f4:bc:5d:1d:7a:d7:12:de:bf:6f:ad:af:a1:7a:a8:91:
96:5e:6b:32:0e:9c:b2:5e:6d:45:d6:37:12:63:99:9f:bc:a8:
bc:7c:ec:dd:0a:0f:ba:e5:9e:05:e9:1a:9b:cf:e1:9f:1f:b9:
44:52:46:c4:e1:83:3c:6f:94:8d:b3:0d:d4:4e:5c:e2:35:cc:
ea:fe:e6:a3:98:b3:04:49:b8:9e:7c:63:77:c8:85:17:47:f0:
b5:e1:89:7e:6b:e9:87:c4:09:d0:ff:63:9c:64:99:1a:8e:f3:
2c:c2:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:04 2026 by rpki-client