Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: O66s0Nq2oOSdvEqH67HU7Dp6UojnGxJWktVIu842ywc=
Subject key identifier: 43:CD:1A:5F:6D:9C:79:91:21:86:B1:B4:35:ED:40:F5:74:B1:06:58
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019DA34172C0FE80C10D8976721E36E31E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 01:01:08 +0000
Manifest this update: Sun 19 Apr 2026 01:01:08 +0000
Manifest next update: Mon 20 Apr 2026 01:01:08 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: tEvY7Db6dStZltes90dJuw50AiaWn19HaYWLk1ZmEnQ=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:72:c0:fe:80:c1:0d:89:76:72:1e:36:e3:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Apr 19 01:01:08 2026 GMT
Not After : Apr 20 01:01:08 2026 GMT
Subject: CN=43cd1a5f6d9c79912186b1b435ed40f574b10658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:c2:73:7b:20:06:b3:0a:4e:1d:bf:10:0a:
53:28:9d:3f:f1:00:09:34:e7:09:0e:fc:a3:91:bd:
db:aa:b0:ce:6b:f9:09:ea:5b:2a:d0:b6:11:d5:df:
2e:f9:6a:4e:4d:d4:1f:a7:ef:27:99:ed:3b:62:f5:
bd:5e:c4:0b:b2:2e:43:91:8a:8f:13:de:6e:3d:04:
f9:b5:30:47:13:c5:91:42:ca:78:c3:30:c5:35:95:
11:27:52:d2:34:35:56:ce:79:db:1f:ad:b6:56:e4:
11:35:e7:16:50:09:56:7a:5c:fc:1f:b2:9e:2d:5a:
4c:b3:91:27:14:26:71:7e:0b:ea:d2:5d:95:86:d0:
e5:8c:14:2e:59:a2:8e:27:97:88:9b:5d:be:1e:74:
6c:65:0c:3d:ed:ac:e4:46:a2:60:dc:04:68:5f:f5:
ca:78:39:42:a7:a6:22:b4:31:eb:28:59:46:f1:18:
46:91:4e:b2:c4:87:e2:d5:b2:97:89:c9:a5:41:44:
18:39:f9:39:31:bd:60:fc:46:e2:8f:15:62:6b:53:
36:aa:15:5b:fd:db:6c:05:a7:51:8b:d4:96:16:c3:
7c:d4:ef:95:02:17:0e:d5:71:eb:ee:6f:ee:7a:e0:
c9:63:54:aa:47:31:ca:8a:2e:2d:45:f9:b1:d9:11:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:1A:5F:6D:9C:79:91:21:86:B1:B4:35:ED:40:F5:74:B1:06:58
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:d1:f2:71:84:27:81:98:36:12:bd:4f:4c:3d:74:ee:31:36:
3b:ea:45:0f:8f:7d:56:75:3b:fa:e7:80:59:11:d9:8d:72:44:
eb:10:01:48:54:ed:00:7b:a8:c1:f8:4a:93:98:98:08:ce:d1:
0b:36:10:55:50:98:03:7c:d1:44:46:d0:eb:8f:11:e9:37:d4:
08:3a:cb:5d:1d:c6:18:05:ae:08:ea:fa:c6:de:74:b1:1e:1c:
58:e0:8f:e4:95:d5:7e:63:46:18:29:d7:44:02:fa:16:72:46:
33:45:9c:28:27:ad:12:18:42:9c:53:0a:86:f1:20:7e:2a:d7:
e4:9f:44:97:7c:f1:43:bb:8d:ec:9b:09:ce:55:5b:03:9c:8f:
e5:6e:00:1d:e7:e1:2f:ec:05:04:83:e8:e8:e1:71:ce:4a:89:
64:67:64:0f:70:a1:96:51:2a:ab:8a:29:36:47:a6:c0:58:ad:
92:cd:ef:9d:3e:5b:85:37:87:a2:b8:a4:2a:91:08:0b:69:70:
01:3e:e6:2e:38:d7:3b:12:ea:85:f7:59:2c:ad:be:c2:88:6f:
13:74:29:6c:0f:2b:63:c5:70:e6:e7:99:f6:03:40:fb:13:6e:
d1:d7:d8:c9:c8:fa:16:d6:ee:c4:b8:78:96:d0:5d:09:b6:de:
1a:08:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:57 2026 by rpki-client