Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: HWCCtGNuUiTVW4M7i3OuJswY/2cSgJ8F7fU4FjRbU/A=
Subject key identifier: 08:A3:46:A5:A5:0E:CC:D5:EF:FC:AD:EB:A0:52:23:99:AD:6C:14:9E
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019CAEA38783C598EB25B218933C63E49715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0247
Signing time: Mon 02 Mar 2026 13:01:18 +0000
Manifest this update: Mon 02 Mar 2026 13:01:18 +0000
Manifest next update: Tue 03 Mar 2026 13:01:18 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: U2wDJnZTIOZH5sZSFHsPAk7cY8P6t3Hg1ScUGBVrToY=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:87:83:c5:98:eb:25:b2:18:93:3c:63:e4:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Mar 2 13:01:18 2026 GMT
Not After : Mar 3 13:01:18 2026 GMT
Subject: CN=08a346a5a50eccd5effcadeba0522399ad6c149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:11:e3:85:10:97:53:db:ae:cd:90:bc:ae:
d0:e2:06:a4:a3:8e:0a:e7:37:fe:a8:bb:33:ae:c5:
f9:0e:be:04:6f:be:f2:6c:c2:78:77:35:cd:15:57:
d9:ff:b9:6d:5b:6c:28:57:de:b5:32:6e:f2:ca:f1:
67:de:11:47:e4:cb:61:6d:ed:18:b0:d0:30:ea:32:
23:72:c3:af:fa:9a:15:a5:28:7c:6b:5d:5a:51:71:
1c:9d:4f:9a:45:52:d5:99:31:03:92:1b:cf:ed:dc:
8d:b7:82:0a:56:15:dc:c4:8b:4f:2e:c1:74:39:f7:
c3:4d:b5:40:10:a2:f0:f6:46:d6:3d:9b:50:0b:b3:
a6:f9:cb:2e:4a:ed:0f:a4:a0:55:97:40:f9:16:e3:
d0:70:21:c6:60:00:55:2a:fe:9b:aa:f3:e8:cf:f6:
46:83:87:ad:85:cb:09:fd:38:b1:df:00:01:c5:02:
6b:12:bd:f5:4a:fb:1d:de:e3:ee:29:04:4c:df:32:
e8:c8:26:d9:e9:bf:c9:9d:d3:68:a5:f7:b4:d3:70:
f0:c7:35:34:5e:bb:4a:c9:f5:45:d4:76:8b:9c:cd:
9b:85:d0:d8:f8:1a:30:b9:27:6b:ec:c5:3e:3f:06:
ea:9b:12:33:c7:9c:53:8e:05:ab:07:f7:2f:fe:8f:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:46:A5:A5:0E:CC:D5:EF:FC:AD:EB:A0:52:23:99:AD:6C:14:9E
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e9:8e:57:ff:09:eb:53:68:2e:24:7e:70:b8:22:94:c0:da:
da:57:bd:86:71:c4:65:47:93:0a:93:f1:54:18:69:59:1a:7d:
c7:12:8b:11:de:aa:76:49:d3:1e:56:03:00:60:15:22:d9:53:
61:c0:5a:c4:b0:80:b9:73:d1:b5:4e:8d:55:9a:14:8c:dc:d2:
39:8f:94:b0:94:cb:5d:14:4c:2f:a5:f7:3c:40:4e:bb:03:32:
73:95:7e:97:4e:2d:da:47:54:09:b6:2f:ca:2f:04:4b:f7:55:
12:ee:7b:e5:38:98:a3:4c:23:20:19:cd:a4:dc:7f:5e:9d:aa:
23:f9:38:86:98:c1:01:ee:f9:7b:0b:89:a4:80:5b:02:ea:f8:
c0:f4:d9:98:c5:79:a8:d9:45:f3:ad:86:2f:cc:a5:c5:27:74:
91:fe:a8:40:68:0c:31:d3:de:e2:b1:02:db:5d:49:62:98:88:
b8:69:a6:52:65:9b:4b:52:53:14:35:52:0a:e5:45:9d:3b:eb:
f3:5d:4a:6a:69:b8:42:24:1c:d6:a0:ed:ef:8a:11:a0:c9:13:
d3:99:73:50:11:e2:0f:cf:5c:47:03:23:65:63:89:82:67:40:
d0:e6:ac:98:f0:34:eb:b7:11:09:fd:6b:54:21:69:31:13:d8:
43:89:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:15 2026 by rpki-client