Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: 0LjS134W7HX6r/VukY+/BdS1GV6Kc3JyMhxbOuepYLc=
Subject key identifier: 19:54:08:F9:74:82:2E:69:7B:F6:A8:03:D7:A8:1F:E0:60:79:7C:E2
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019CACB483253653A9DB4991FAB897202425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0246
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: t7GJY00sr+hToLRlCbZ6LAarQvZlHxUEtY0eIHRx6No=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:83:25:36:53:a9:db:49:91:fa:b8:97:20:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=195408f974822e697bf6a803d7a81fe060797ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:80:fe:97:cc:9d:09:d0:43:28:8a:bc:ca:
ea:f3:88:b8:65:80:8d:7f:74:a8:90:d6:b4:2b:dc:
3d:65:c3:a1:be:5a:08:ef:9c:2b:41:67:37:16:ad:
a3:65:ba:8b:ea:65:34:bf:c5:70:af:1c:9a:f6:ae:
a5:b8:0f:e9:cf:b9:dc:03:89:3d:f5:0c:26:0f:90:
b2:f9:b1:41:1b:6c:84:64:6a:0f:1a:4f:be:3c:de:
63:1b:8a:cc:82:5f:cc:9c:1f:c3:01:0f:5c:e4:72:
87:9a:5e:3a:fd:d6:1e:c0:b5:71:ec:a3:40:47:3f:
98:c9:56:d9:a7:bb:64:28:b7:79:c1:83:54:9f:98:
62:73:4f:84:b3:4e:4e:60:d0:a5:e9:14:fa:6e:14:
63:de:62:d4:cf:a8:da:f6:86:d8:da:b5:72:7b:65:
d6:97:32:71:e5:f2:e1:ef:a8:05:04:ec:f7:66:ac:
62:46:e1:8f:6a:01:25:ea:c4:e2:18:a7:88:a9:61:
e8:d4:90:3f:f4:62:11:44:71:0f:c4:e3:a9:b7:dd:
c4:87:c8:00:5c:28:32:25:e1:c2:3c:3e:b6:57:54:
57:1f:d7:fd:e9:83:78:ce:94:6c:84:56:03:66:c5:
7b:0a:4e:b1:fe:20:44:3d:c7:b1:51:1b:6f:1f:a2:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:08:F9:74:82:2E:69:7B:F6:A8:03:D7:A8:1F:E0:60:79:7C:E2
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:bf:f6:20:20:4d:75:75:19:8a:e5:32:a9:db:b8:3f:21:
13:94:88:01:19:55:b8:99:cd:e3:b2:ab:1f:f1:b4:c6:24:61:
9f:22:28:d3:10:cf:de:e2:97:d4:7d:b1:11:1b:a2:97:32:ba:
74:47:e7:e2:86:68:a6:d4:e0:70:aa:fc:f7:b2:d4:4d:94:d7:
29:a4:04:94:6e:ce:cb:f6:e2:0c:de:62:9f:78:ce:ac:72:5d:
17:dc:f9:77:94:fe:d7:9b:b4:d1:2e:9d:bd:45:88:02:b0:5e:
70:aa:e9:a2:61:a1:f0:91:d1:a3:33:8b:99:15:9d:49:b6:48:
59:d1:10:17:6a:59:6b:a3:20:1f:78:80:47:71:37:94:38:33:
f4:a7:52:05:af:40:d3:f9:ab:ca:f6:ea:e9:78:70:84:5c:3e:
a7:a3:aa:90:1c:47:c5:b6:b3:a4:d3:b7:51:c8:b0:51:0f:f8:
88:4d:3d:32:4e:1c:47:56:6f:f5:9f:7b:c1:72:c7:70:07:e9:
fd:48:6f:37:6d:e6:53:5e:fc:83:89:b5:4a:fc:72:af:bd:bb:
50:d6:26:9d:17:90:d5:0d:dc:11:66:42:56:39:f1:6b:c2:7d:
1d:3e:50:30:1f:ea:1b:aa:f2:14:48:c2:45:d4:f7:d2:9b:cb:
ba:c1:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:27 2026 by rpki-client