Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: PaNQ1wYI19LF2JgAZ47wOG+HZeC1WmEQ1q35PDa153Q=
Subject key identifier: 52:A8:BB:B8:33:3D:19:4B:53:DA:6B:71:C2:D6:7E:75:B8:9A:0E:23
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019FA8D010DEB408F5B3BF98B0F053A4B3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 13:00:35 +0000
Manifest this update: Tue 28 Jul 2026 13:00:35 +0000
Manifest next update: Wed 29 Jul 2026 13:00:35 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: f1xXblJn1rboUnp43mLPClmWsvMQ7Bz25b/H7H1ahto=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:10:de:b4:08:f5:b3:bf:98:b0:f0:53:a4:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jul 28 13:00:35 2026 GMT
Not After : Jul 29 13:00:35 2026 GMT
Subject: CN=52a8bbb8333d194b53da6b71c2d67e75b89a0e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:3c:3e:a8:bb:89:0f:64:62:ca:aa:04:db:
62:5e:a5:37:46:24:76:37:bb:e1:56:b6:8d:08:43:
f8:04:a3:c4:eb:66:b9:6e:49:18:a8:04:c2:56:cf:
79:1a:28:94:7a:3f:ab:0c:66:3e:d1:e6:ca:a7:b6:
9d:58:74:99:6f:c3:0f:6a:bb:94:e5:e9:39:7f:06:
c7:c1:85:22:e9:fc:a3:7a:07:56:d4:e1:03:a0:ef:
c8:df:cb:f1:05:08:80:d3:3c:de:91:3b:80:96:43:
90:b2:d2:c9:7d:e0:1c:18:83:85:78:39:71:6b:18:
97:33:f6:e8:e9:48:66:1e:6d:6a:41:54:a3:73:37:
b3:e7:c3:dc:ca:83:38:8e:8f:10:b6:87:e5:9f:ed:
6a:27:7d:7f:a9:15:ed:33:e6:1d:a2:8b:65:c0:63:
eb:54:4e:72:6d:69:9d:cc:f7:4c:c9:b8:2c:1a:2b:
6d:ff:20:76:dd:ca:2e:cd:90:01:0d:49:79:16:18:
20:eb:57:f6:2a:80:06:05:8c:3c:92:00:95:e3:4f:
24:52:64:a5:98:f7:97:99:08:ec:eb:51:ee:8d:1c:
7a:70:86:77:10:3c:6b:ca:fc:5e:84:bb:f0:d9:ba:
ed:b0:9c:45:55:a1:26:69:b2:7d:3d:98:6e:d7:c4:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:BB:B8:33:3D:19:4B:53:DA:6B:71:C2:D6:7E:75:B8:9A:0E:23
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f7:6d:17:27:86:15:15:de:5e:2f:ce:63:dd:5b:9e:f9:ba:
81:d8:9f:a6:11:35:74:96:79:31:08:b2:16:69:e4:8f:42:e9:
ca:c7:39:d1:17:b3:8f:74:20:6c:25:3b:84:ad:dc:a7:ca:52:
7b:95:af:f7:58:e5:98:ee:07:17:90:61:52:9c:d8:39:c5:f9:
1d:c0:4a:34:83:2d:a0:74:dd:45:e8:60:92:82:cc:67:8b:c2:
5d:73:eb:53:af:3d:2f:de:09:00:65:d3:a6:4a:e6:a6:9e:81:
66:37:56:6e:38:7d:66:3e:9a:41:cb:b1:6c:2a:9d:8b:53:5d:
1c:ab:7e:f9:20:c0:5d:81:fa:cb:84:b8:0a:da:f1:29:84:6e:
e0:6c:9d:79:3a:bc:fe:90:a2:d0:57:92:3b:e2:92:5c:26:33:
32:b9:29:c5:a5:4f:3f:ae:e6:58:52:d9:38:21:29:a5:bd:0e:
8f:a3:20:60:22:2c:2f:df:51:98:f8:e7:60:ae:5a:a2:ec:93:
a3:be:8f:b8:e5:b2:7a:79:b9:4f:91:ca:4e:a3:15:e6:79:9b:
22:71:f3:67:f1:88:ee:a9:f0:3f:cc:02:44:b0:c6:37:e8:f7:
13:b4:f4:b2:4f:bf:48:d5:f7:73:32:56:41:c1:ea:58:d2:8c:
f7:b2:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:07 2026 by rpki-client