Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: bHyanQR/VbJsEzL6Vr/dMKldjJmHzoVPFRr+QjvORIw=
Subject key identifier: 5C:43:2A:14:D3:74:16:FE:92:B2:86:42:7C:53:DE:90:6C:09:8E:FA
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A0C6A0C69D03366CFC04575EA8570F38B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 07C7
Signing time: Tue 22 Sep 2026 01:00:20 +0000
Manifest this update: Tue 22 Sep 2026 01:00:20 +0000
Manifest next update: Wed 23 Sep 2026 01:00:20 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: p48K7NtfR+qsI5qBtMDvRs1a4EOnS5qccNdny0vpaEU=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:c6:9d:03:36:6c:fc:04:57:5e:a8:57:0f:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Sep 22 01:00:20 2026 GMT
Not After : Sep 23 01:00:20 2026 GMT
Subject: CN=5c432a14d37416fe92b286427c53de906c098efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:3a:00:dd:ec:17:7c:f3:69:24:e1:7d:c6:
5c:b3:9d:4f:3e:d3:d3:48:6a:59:eb:ce:6b:f8:28:
8f:cb:60:f1:8c:59:8f:44:96:72:1a:63:24:57:15:
a6:8f:5f:6f:45:e2:64:c6:bb:eb:0b:3b:fa:64:c5:
2d:1d:ea:51:97:75:91:39:fe:4a:f9:d8:cc:12:99:
c2:4c:f5:1c:dd:76:21:07:ab:41:80:ab:f6:c9:90:
b1:87:f1:e4:84:4b:ed:02:62:ba:c9:2e:29:6e:4c:
0e:14:5f:8d:2a:6c:f2:1e:73:13:a4:dd:e5:12:94:
c3:d9:ec:9f:84:90:e9:34:55:0b:97:2b:c0:25:0e:
97:52:f6:78:41:55:f3:cd:2b:79:a3:80:89:11:52:
8b:3a:10:43:2f:7e:e3:04:ac:fc:64:7b:50:29:24:
02:b3:93:3a:8f:96:c8:52:e3:b5:75:67:03:5b:02:
38:5c:f9:74:82:b5:8a:46:00:1f:46:df:2b:0b:1d:
ae:c0:21:c7:1c:84:dc:bb:8d:65:15:64:d8:20:df:
c2:f4:7e:51:4b:fc:78:95:f4:77:62:e9:46:6f:86:
35:64:c6:96:e6:57:07:31:08:3c:6d:57:ea:ea:c8:
c2:40:5c:db:ae:1e:86:17:fd:33:2a:79:21:e9:8a:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:2A:14:D3:74:16:FE:92:B2:86:42:7C:53:DE:90:6C:09:8E:FA
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:78:92:ab:c3:9b:fb:cf:25:16:b1:ed:dd:46:df:ec:11:
75:48:55:b3:ea:8f:76:92:a3:7e:f5:71:ac:95:9d:79:26:ea:
4f:58:1f:35:e6:27:dc:6b:07:2b:0b:46:20:a6:ca:66:80:e1:
98:d1:5f:ce:e1:6d:e4:c7:29:d3:1a:9b:53:5c:be:ae:30:1a:
68:78:2c:af:5b:81:64:ee:cb:a2:61:18:3c:23:e9:6f:81:46:
da:e7:69:6e:59:7e:e3:02:11:86:91:8d:ca:7b:f9:2e:65:a6:
a0:c6:18:ed:4c:6c:c1:4d:c8:9a:bd:01:3e:89:f6:be:eb:60:
ec:f2:4e:1e:84:60:11:0d:c0:b2:3c:4b:64:b1:b7:e6:a9:08:
0d:d9:73:a8:13:2d:f5:c5:e2:85:7c:87:a8:10:7b:d9:3a:26:
76:7b:88:8a:43:b1:67:dc:de:54:c6:f6:c2:30:7b:df:92:9a:
61:be:70:32:1d:db:ab:56:f1:66:4d:ce:b9:01:32:fc:20:3e:
10:be:00:33:66:a0:36:c1:c0:ba:34:38:6b:48:69:1f:35:a5:
17:24:2e:fc:ee:99:57:44:1b:9c:c6:d3:16:20:11:55:bc:1c:
9d:7a:a2:52:41:b7:45:ad:5f:80:ad:a3:d0:93:be:0e:48:35:
69:c9:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:04 2026 by rpki-client