Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: HZNItp3XHJZyHN2CQ+3Pcng5EKLPxQZa63Lpx9DuDfA=
Subject key identifier: C6:5A:EB:62:B3:0D:F2:20:F6:D0:F8:1A:38:08:64:5A:1D:56:03:ED
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019D99999C47B65055220A4D97C1E1E216D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0622
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: eSTuftnyEB7dHcPUPVDKKbGsvEpaofimfFW+5kjzhCU=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9c:47:b6:50:55:22:0a:4d:97:c1:e1:e2:16:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=c65aeb62b30df220f6d0f81a3808645a1d5603ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:40:aa:ab:b6:87:2a:bf:a8:91:8c:ec:91:
18:51:e1:4a:3f:6f:89:9c:88:a4:98:ec:df:63:08:
98:1a:b1:5e:31:ee:ca:5c:21:53:7f:62:ce:47:93:
02:b4:70:07:0b:e0:45:0f:ce:4b:a4:bc:ff:4c:63:
e0:ca:1c:40:e8:6f:b2:9a:5d:fe:be:1c:ea:c1:36:
ce:04:30:24:33:a8:26:af:1b:7f:0f:37:04:7d:aa:
c2:9e:d7:5e:6d:29:bf:d5:ca:5f:23:6e:8f:2a:1a:
23:49:92:dc:62:7a:c7:8e:bd:06:c4:3f:f1:7e:1c:
1f:27:3e:fe:82:70:a6:a8:ff:ed:c9:78:99:dd:67:
28:e8:77:63:c3:67:84:3c:68:50:2d:c3:8a:25:14:
79:da:21:c5:70:33:8f:04:22:0f:9d:86:4b:f6:d8:
5f:1c:5f:f7:cd:8d:bc:11:f7:8c:0c:86:5b:ed:bf:
da:3a:e9:48:02:f8:b4:fd:10:4a:63:da:80:43:44:
05:bf:40:2c:51:b2:28:46:8d:44:f6:cd:a4:95:cf:
68:71:ad:31:3a:57:58:ef:47:d5:ff:a1:1c:66:b3:
38:05:51:5c:51:fe:e5:b5:29:63:1c:70:e6:80:5c:
12:eb:ca:ed:97:c6:0c:bf:d1:7f:a6:0d:78:48:a2:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5A:EB:62:B3:0D:F2:20:F6:D0:F8:1A:38:08:64:5A:1D:56:03:ED
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9f:dd:af:4c:f3:30:2e:05:91:be:bd:7f:08:c0:2a:6c:03:
f4:ae:69:d3:10:6d:a6:36:71:9a:27:79:7a:80:3b:ec:b9:29:
a2:a9:b9:cd:37:fe:2f:18:42:a9:d4:c3:28:f6:6d:11:e8:e0:
f9:23:5c:40:54:04:4a:93:57:90:49:51:b7:fd:9e:71:fb:61:
ec:4c:b2:2c:94:d8:b5:49:2f:c7:9a:6a:15:e6:fb:39:13:f5:
44:ee:1c:1b:11:24:52:53:41:ef:25:33:f7:71:5d:02:ff:c7:
5f:03:ab:c2:eb:0a:d1:10:a7:ee:c5:bd:50:23:f4:d4:97:b6:
0c:d4:b7:aa:e0:f1:86:8e:01:6a:23:a8:de:a2:de:12:67:b9:
a5:c7:1b:a9:59:cc:02:68:1c:d5:78:53:13:31:a1:f3:f6:c6:
b8:f3:5f:54:53:98:3d:b9:1a:b2:67:9b:7a:53:e8:7a:f7:1b:
87:c3:81:53:b2:ff:37:5b:52:67:c4:43:ab:a8:9a:d9:2c:dc:
9d:5a:82:6a:c5:44:0a:95:8c:48:02:60:0b:33:1e:a9:2f:69:
71:d8:fd:d4:af:b9:fc:41:4f:83:91:b7:1d:69:5d:1d:82:fb:
f5:a9:97:da:4c:9a:59:8b:75:fa:17:0b:0d:2d:0c:f0:fd:4d:
de:f8:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:57 2026 by rpki-client