Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: IACUNcxd/UwQdcLfBLezfGDhkXoXbw39W7iB+7Zeo2E=
Subject key identifier: 3A:8A:01:8F:A8:90:47:21:BC:35:27:24:7F:3D:C2:CE:62:C5:37:E0
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019EBF235F2D68F136E46273BC1EBBC47432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 06BA
Signing time: Sat 13 Jun 2026 04:00:26 +0000
Manifest this update: Sat 13 Jun 2026 04:00:26 +0000
Manifest next update: Sun 14 Jun 2026 04:00:26 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: hyFCtWYapot/mvrkdBC2tOIEE3me90GwPzdJFPbj6Hs=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:5f:2d:68:f1:36:e4:62:73:bc:1e:bb:c4:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jun 13 04:00:26 2026 GMT
Not After : Jun 14 04:00:26 2026 GMT
Subject: CN=3a8a018fa8904721bc3527247f3dc2ce62c537e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:6d:d9:5c:10:4e:f6:68:24:70:98:73:9a:
49:c5:10:84:3c:de:6b:83:3f:08:1b:17:27:c4:19:
a4:a6:5e:ef:4a:1b:e0:14:de:4d:bb:45:64:01:77:
0c:e4:b6:10:4f:59:75:e8:5d:49:33:3d:1c:0a:ca:
b8:ee:fc:c9:84:88:52:42:76:98:d6:63:d5:87:69:
1a:25:e3:2e:e3:f5:9d:70:76:b9:b2:b2:11:d3:d5:
28:f8:89:a5:42:7b:b4:8e:17:c5:e0:31:7f:e8:36:
74:8a:e3:93:00:6e:bd:38:dc:50:fd:fc:58:e1:fc:
34:b5:36:8f:f0:4b:6a:35:4b:b7:cd:3e:aa:99:54:
c6:39:c4:36:e5:e3:dc:5f:16:eb:69:64:fd:3f:43:
01:7b:03:6d:cd:a4:b9:11:08:de:1e:65:93:27:31:
44:1c:2f:6c:0f:1b:52:9c:b5:5e:7b:2a:32:8a:ab:
30:77:17:6c:d4:a8:0e:9f:8a:d6:c2:26:04:e3:08:
f9:41:5e:bd:c5:83:7d:68:41:d2:2c:96:81:3d:5b:
69:ba:e4:60:bb:15:75:d8:4b:9a:7e:5c:9b:5a:c1:
59:0e:39:2a:cc:d3:15:13:36:19:91:07:83:a5:41:
f9:72:8c:22:f3:13:f9:a8:f5:93:20:7c:70:53:a8:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:01:8F:A8:90:47:21:BC:35:27:24:7F:3D:C2:CE:62:C5:37:E0
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d9:fb:f5:19:b6:ac:90:b9:b2:c0:b9:b8:ea:9b:7f:5d:ce:
73:f2:03:95:bf:65:79:34:97:56:01:62:38:06:e8:bc:40:e4:
dc:78:58:ad:27:a6:a9:34:5d:74:b1:41:6a:fe:be:5d:1c:e9:
33:91:32:f9:10:9a:ba:fd:35:7c:49:78:8c:91:7b:d7:09:27:
58:43:1d:4f:75:85:16:f0:78:4e:63:47:8d:35:80:20:ab:f5:
c4:22:ab:fa:4f:e9:48:49:0d:dd:d5:2f:b4:ed:3d:29:9c:e1:
57:f2:11:cc:20:b5:cc:af:9b:0e:d9:60:8c:40:a9:82:d1:fa:
c8:3d:4e:b4:91:64:d8:68:76:1c:7f:20:f4:3d:2a:ca:b8:be:
f6:0a:33:a8:fa:6f:1d:88:45:18:55:ea:52:f7:ab:7b:0e:73:
cb:d6:a7:25:02:74:91:61:51:02:56:74:a5:13:35:29:f9:b6:
51:d5:21:19:bf:93:72:be:7e:c9:8a:bb:27:c1:55:e7:01:75:
9d:fe:e4:8f:bc:7c:4c:92:64:c8:e1:9b:3a:e8:54:2d:b4:5a:
4d:83:3a:04:d5:8c:76:13:5f:c0:c9:66:1c:97:41:44:53:3e:
a4:23:d4:7d:29:2f:b5:4f:3a:47:d8:bb:9a:16:29:ae:cd:8e:
71:c5:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:04 2026 by rpki-client