Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: DikNJxskxJY3lOofail14p2sTpzbOuPDsA2G/pyd34A=
Subject key identifier: FE:C4:23:B2:DF:BD:E7:46:56:95:99:03:1C:71:7D:98:94:0A:7E:15
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019FAB63B9EF02D773594CF3E6E8F941D363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 03D5
Signing time: Wed 29 Jul 2026 01:01:07 +0000
Manifest this update: Wed 29 Jul 2026 01:01:07 +0000
Manifest next update: Thu 30 Jul 2026 01:01:07 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: PNT9t3KxJ3U13y1NsXmtgS+V++J8qOHk8YXDBgQOKi0=)
2: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (hash: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b9:ef:02:d7:73:59:4c:f3:e6:e8:f9:41:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Jul 29 01:01:07 2026 GMT
Not After : Jul 30 01:01:07 2026 GMT
Subject: CN=fec423b2dfbde746569599031c717d98940a7e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:c7:06:4e:75:6a:29:ea:3b:49:ba:95:98:
4f:e3:3a:f6:01:4e:af:fe:cf:21:ed:f9:84:24:44:
66:0a:10:3d:6c:88:8a:75:ca:0c:c0:1c:69:2c:bb:
08:f3:2e:c8:d7:09:0e:55:24:c0:83:0d:0b:84:bb:
ee:8e:f2:6e:50:6e:04:14:26:f2:a4:40:c1:9a:10:
d2:bb:dc:01:13:60:e0:c5:1a:6e:a3:56:51:e0:35:
41:ab:71:1e:3d:ae:7f:1c:ae:5a:4e:b9:1b:73:04:
de:76:4c:c8:88:68:a3:36:1b:31:35:35:98:e5:6b:
7a:fb:99:5a:d6:49:1b:59:c3:56:42:c7:19:26:cc:
18:28:63:fb:93:75:c5:35:0b:88:75:29:14:2d:87:
12:49:5b:ed:78:0e:af:23:99:03:a6:18:b5:24:ce:
4c:25:39:a2:0f:79:68:05:64:f7:58:56:6f:b7:58:
80:c2:16:c1:1e:15:77:e7:19:e9:b1:bd:f1:a0:e1:
bb:4a:9b:78:28:df:56:75:98:d8:ec:7e:8c:29:9c:
b9:0c:1b:0d:78:94:6d:ca:9b:2f:6d:f0:48:31:b3:
97:a9:9a:d0:8a:4c:2f:a6:89:2f:79:d5:2a:02:97:
2a:e0:9d:b7:70:2f:a8:e2:df:b4:8b:25:e5:ae:6d:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C4:23:B2:DF:BD:E7:46:56:95:99:03:1C:71:7D:98:94:0A:7E:15
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5f:83:09:02:46:47:f3:0d:42:cc:0f:f9:c8:50:fb:bb:59:
3a:ae:22:d8:39:f5:38:1d:f6:e4:c3:00:7c:6e:82:e9:d9:8a:
e7:af:8f:86:1a:59:d1:b8:9b:2f:4e:c5:22:cf:a1:96:60:03:
b4:2b:df:28:1c:c3:c9:33:76:f0:90:5e:c8:22:c5:23:4c:3f:
76:f8:f3:42:2c:33:71:ce:2f:29:54:19:9d:77:c9:02:ed:5c:
98:a9:3c:b0:39:fe:ff:cc:15:67:2b:91:4d:c5:08:42:41:a8:
fb:c9:b6:9e:ef:68:d5:34:5b:8f:f6:f0:31:42:7d:61:e5:f8:
af:d3:dc:e9:b6:9c:7d:01:6f:30:5e:bd:22:24:b3:4e:c5:68:
f4:9d:e0:b0:06:6a:ed:52:4f:e8:68:aa:c2:0f:58:87:ac:43:
46:34:0f:30:c5:8a:ff:24:44:fe:bf:2e:8e:3b:ec:47:59:50:
a4:c7:f1:84:48:7c:c4:e4:4f:2a:70:c8:60:df:0b:61:5c:04:
f2:8c:ad:97:2f:90:ac:64:1b:e1:98:34:e7:0e:5d:1d:aa:c6:
d2:66:de:57:a1:1a:b5:10:fc:44:ef:62:0a:e1:c5:75:01:9d:
14:3b:ca:a5:7b:b3:a9:68:a7:03:1a:72:55:59:b5:c3:7f:ec:
3e:50:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:11 2026 by rpki-client