Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: nN+sRtCnEujohuBKwgd9y8PL7CCALiwgv7tCKXeqAEY=
Subject key identifier: CA:8D:A9:14:1E:63:10:BA:84:24:2F:BF:02:23:AB:E7:61:6C:36:6E
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019EBD356632AC120CD12443F7712F001B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 19:00:53 +0000
Manifest this update: Fri 12 Jun 2026 19:00:53 +0000
Manifest next update: Sat 13 Jun 2026 19:00:53 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: 4GMR+kqAj+oE+IDhpXlT4yUhfwc4owzxT2l/aPleoGU=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:66:32:ac:12:0c:d1:24:43:f7:71:2f:00:1b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jun 12 19:00:53 2026 GMT
Not After : Jun 13 19:00:53 2026 GMT
Subject: CN=ca8da9141e6310ba84242fbf0223abe7616c366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:4f:0e:1f:cf:81:d1:a8:9f:ab:d2:1d:db:
f2:18:ee:bb:aa:82:7e:bc:0f:32:29:ce:c1:f3:d4:
6e:f7:3f:ba:fe:75:2c:72:04:75:45:a7:07:97:49:
c7:65:6d:30:63:94:0e:70:61:15:0c:4b:2c:da:8d:
c1:cf:08:f4:7c:2b:e4:92:e1:ea:cb:51:e9:5c:e3:
df:4c:f2:8a:f2:0d:dd:48:b2:e3:40:e2:4e:34:50:
02:11:6b:7b:11:c1:70:b8:ba:d9:d6:5f:54:92:94:
ac:c3:18:81:9a:c1:e3:86:f5:b5:7b:68:2c:8d:a2:
6c:77:50:14:0b:7d:6e:3c:66:8e:49:13:2e:e8:63:
4f:62:71:39:1f:46:4b:4b:7e:46:92:57:8d:18:8d:
ce:b9:63:de:87:d1:af:b8:ab:2c:f9:67:60:d4:7b:
2b:6e:ee:f8:78:6d:4c:df:91:98:2e:ee:ae:eb:ca:
ac:32:19:fd:08:6c:f7:a6:04:fe:04:40:31:ad:0e:
6f:d0:5f:65:52:7f:e2:84:88:b0:ef:e1:95:5f:a3:
6f:58:28:c8:0d:ba:48:26:e3:4a:92:5e:19:82:c0:
72:b6:ac:e9:ad:dd:52:43:8e:9f:6c:03:56:ea:e7:
cd:4a:8f:e1:ad:09:9c:a4:a5:06:8f:ee:a4:ba:4a:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:A9:14:1E:63:10:BA:84:24:2F:BF:02:23:AB:E7:61:6C:36:6E
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0d:fa:14:90:47:25:55:f8:ac:17:ab:98:f7:83:3c:6f:fc:
fd:10:35:e7:a2:d0:b0:93:3b:8a:c7:f4:35:02:37:31:07:75:
70:a9:10:1d:78:39:c5:4c:21:32:57:94:ed:c3:07:ec:66:62:
7c:ad:8f:74:b6:fe:7a:68:4e:6d:63:69:01:c2:8f:76:44:1f:
6b:80:56:ae:1a:02:15:49:d7:83:2e:2e:4d:62:67:0f:84:b1:
98:32:f9:09:71:01:cc:87:a8:e0:a9:12:05:c1:ae:20:81:c8:
d9:9a:56:c2:e4:66:98:a3:49:c4:04:67:5a:18:5b:65:f3:12:
8b:e6:43:19:74:a1:44:79:8e:5e:b6:f2:d5:7f:80:9d:f3:bc:
7e:48:9f:ac:c0:39:44:6e:d9:b8:75:2d:e5:3f:04:c8:82:a3:
f6:e5:d4:a7:54:3f:7f:b2:85:a9:a8:d8:67:71:25:19:a3:86:
e9:ea:75:a2:0d:e0:31:2f:07:7e:4c:ca:0f:2b:ec:df:7d:5c:
11:47:e4:46:cf:3d:80:9e:8d:7f:18:cb:2a:7c:4d:e9:79:c6:
21:77:4f:2d:40:64:b7:16:9a:f0:bb:a8:ed:63:90:32:77:0f:
68:d5:a7:64:d4:5c:99:8f:46:17:2f:6a:b8:31:22:0c:07:87:
a8:2c:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:06 2026 by rpki-client