Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: D2SWNj2oq2j5IeyeGyn8/O2rK2v1of09vJQWaFQwcRI=
Subject key identifier: E5:BC:99:8B:14:FD:80:EF:8A:46:1E:0F:9D:AD:A2:4E:36:85:56:81
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A1C1AF78834405BB55079B696F6DFD2140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0849
Signing time: Mon 09 Nov 2026 19:01:04 +0000
Manifest this update: Mon 09 Nov 2026 19:01:04 +0000
Manifest next update: Tue 10 Nov 2026 19:01:04 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: Ak6e+0OyX7ahEs0bzsBd+c/kKqfQ9Mqcl9muhxO9RMg=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:af:78:83:44:05:bb:55:07:9b:69:6f:6d:fd:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Nov 9 19:01:04 2026 GMT
Not After : Nov 10 19:01:04 2026 GMT
Subject: CN=e5bc998b14fd80ef8a461e0f9dada24e36855681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:2d:2d:1c:64:c5:49:99:19:16:32:2a:a9:
d8:04:33:4e:22:0f:8e:30:c7:53:7e:af:1f:26:1e:
15:d9:96:c6:a2:cf:57:fd:ab:e4:66:84:ad:6c:cc:
39:89:3c:1d:20:14:72:93:83:86:90:61:d3:2b:07:
e0:cb:66:58:ef:0a:3a:8c:ee:c2:5d:31:0a:a5:3d:
a8:a7:b9:49:ef:15:69:bd:9d:6a:65:bd:d2:04:95:
c3:e4:3e:09:8d:ad:c3:a9:68:a6:89:0f:d3:80:f3:
bf:67:57:c1:d5:c5:76:86:3f:57:35:61:a7:6d:b1:
fb:a0:83:bd:5a:86:ab:a1:b5:c2:18:0e:b6:1f:a2:
67:0d:40:6b:52:4f:a3:2f:fa:81:27:72:e9:64:75:
60:1d:84:db:cf:87:97:c5:96:ca:90:5f:7e:3f:c1:
8f:d0:5f:84:37:23:88:76:8f:53:2d:3d:e2:36:e6:
0a:33:8d:b8:f2:b9:d9:3a:6e:a4:3c:12:7f:31:5c:
8d:a0:b9:1a:81:c7:6e:f2:79:f2:c1:ab:5b:07:22:
18:eb:db:ed:45:56:d0:2f:32:d0:f4:26:2b:ae:53:
a7:4b:0e:49:d8:a9:7e:1a:fc:05:4f:4a:9b:2f:f5:
ab:a3:a7:91:de:e9:29:31:ab:59:dc:30:13:af:33:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:99:8B:14:FD:80:EF:8A:46:1E:0F:9D:AD:A2:4E:36:85:56:81
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f5:02:4f:3c:82:70:25:99:ce:26:de:16:e8:bd:5f:e4:c2:
d9:43:94:c3:28:60:ef:37:46:ed:34:ea:10:2e:1f:dd:c3:b8:
46:36:b8:18:4b:5d:13:0a:66:ae:ba:32:70:68:0a:38:ef:4c:
a6:28:e1:8e:c7:36:92:9e:21:39:00:50:c2:0c:3d:99:84:bf:
ec:bb:79:a9:c6:de:26:65:4c:19:a5:a7:e6:ed:2a:44:87:90:
4b:79:53:b6:12:5e:9b:8e:8a:57:00:52:e9:38:f7:f4:70:20:
81:b8:cf:95:20:35:7a:b3:4d:1e:64:ea:cd:74:be:df:f2:b8:
49:c9:40:a9:1b:61:1a:71:21:71:d2:4a:61:65:d4:2c:4b:06:
8b:c9:40:60:fd:5e:32:0e:c6:2a:26:c7:87:3f:6a:76:dd:05:
77:bb:ed:cb:4b:8f:2d:ac:26:04:66:d4:23:b8:fe:b9:b7:a0:
3f:77:18:81:00:05:e0:38:82:af:3e:5c:07:e5:a4:20:db:ec:
f0:8f:6e:69:39:7b:5b:30:2e:1f:1d:e0:3d:b5:e2:41:5c:67:
e6:4c:b6:19:4a:e6:3c:2e:b9:c4:77:8e:8f:13:2a:8f:cf:4b:
b5:b5:f6:b8:fe:a2:8a:0c:15:1c:34:2e:92:3e:c5:ee:6b:1a:
ae:10:2c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:48:55 2026 by rpki-client