Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: rqpgBO6Im68BQqKb2IbUi6PWXzw0mBV8PzHjG3q+b+A=
Subject key identifier: C7:44:9F:5C:3F:4D:3A:59:C0:BE:8C:29:A4:B4:BC:10:F9:6F:8E:43
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 01A0C2C4A10083ED668763C41C96210B8CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 07:01:01 +0000
Manifest this update: Mon 21 Sep 2026 07:01:01 +0000
Manifest next update: Tue 22 Sep 2026 07:01:01 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: z+eUrmmIGJwHUr2+QkIWUTJXSBBjG+ZgGZKTNAryugg=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:a1:00:83:ed:66:87:63:c4:1c:96:21:0b:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Sep 21 07:01:01 2026 GMT
Not After : Sep 22 07:01:01 2026 GMT
Subject: CN=c7449f5c3f4d3a59c0be8c29a4b4bc10f96f8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:86:15:57:3c:6d:b3:18:98:73:f9:40:f8:
80:9e:7a:d3:5c:cc:77:11:a8:90:11:a6:45:52:68:
1d:0d:f8:9d:a9:e3:86:5f:0a:5d:35:dc:19:f8:39:
fc:f8:27:d0:30:d3:36:ff:95:cf:8b:33:0c:75:0b:
5c:99:66:29:f5:4f:e7:3f:b5:c9:86:c9:73:d2:0f:
65:a6:03:9c:5d:0d:9e:57:91:2e:22:9b:af:bb:35:
d9:96:2b:c5:4a:59:92:65:1f:bd:8b:f1:09:4c:c2:
c3:bc:be:62:65:35:78:7f:a7:9b:cb:8f:8e:ca:83:
0c:dc:f7:91:18:c3:bd:a5:a7:76:f6:bc:79:82:23:
64:9e:f0:5d:b3:89:b5:f8:15:25:dd:3d:17:36:5f:
f0:1d:90:79:df:3c:6f:63:f5:3b:15:e4:31:63:cd:
5b:3c:47:b2:22:de:58:df:b7:39:2a:9e:93:ce:f5:
e5:50:64:1f:13:26:61:8a:a9:85:61:f9:5c:34:f5:
37:20:e1:87:49:b0:3a:6c:c8:19:fb:e5:99:d8:13:
65:10:48:27:11:bf:5c:47:01:b4:e5:c1:f0:7a:52:
1c:b5:1a:d0:b9:67:c3:cd:10:e1:a9:f2:64:fe:c1:
0f:90:7a:ec:d2:df:50:50:ca:db:c8:7c:f8:bd:e2:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:9F:5C:3F:4D:3A:59:C0:BE:8C:29:A4:B4:BC:10:F9:6F:8E:43
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:10:7e:cb:1c:12:8b:33:37:e6:1f:83:fe:31:81:a8:6a:51:
c6:bd:25:fb:55:91:92:a7:35:9c:a0:8e:b7:9e:f8:94:6c:fe:
e0:23:a0:fd:0c:da:9c:94:d9:3e:81:1f:9a:49:dc:5f:11:11:
d8:b8:c3:15:3d:58:72:5a:af:d5:af:6a:29:4a:5b:cd:b1:54:
a9:1f:9d:6f:e4:a8:d8:50:07:65:ee:40:29:35:22:fd:50:c1:
97:89:da:15:c8:4c:7f:6b:ba:a8:8c:45:e4:bc:46:a7:6e:d1:
58:51:80:f7:ee:f5:b2:98:a6:6f:30:d3:27:58:25:f5:74:db:
50:12:2e:2b:59:72:9f:8f:b2:17:2e:9b:83:55:5e:4b:8a:ea:
78:10:7e:2c:91:b5:ab:74:e3:85:f7:6e:dd:45:ab:01:59:c8:
e6:07:f4:45:cb:37:b4:4d:18:67:6b:53:9e:c9:31:42:64:7b:
ac:86:61:01:87:81:5d:82:05:19:9a:1b:07:b8:ab:95:dd:38:
6b:dc:31:a1:5e:63:68:15:7c:2d:b4:bd:2e:52:6a:74:77:d1:
60:7e:96:4c:fd:6e:65:c2:f9:be:a8:2a:3a:35:c7:0d:cf:b1:
85:c6:ad:d5:4f:15:a9:a5:aa:6e:b0:7a:d6:94:15:39:08:1e:
38:d4:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:37 2026 by rpki-client