Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: n+rEHGpCW1RNi6bA+Leiwk4JgAxifzxj/YCKAOPR8w8=
Subject key identifier: F0:46:06:AD:E0:5B:61:D7:11:63:52:CE:4C:97:A4:E5:28:15:E5:75
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019CAC0FF16D33F502238B6C49D55490BC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 05A7
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: FM2dxR1lbtfiwYzBhpSHaDLIG9F/ZZHdqGb+8GKhikY=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f1:6d:33:f5:02:23:8b:6c:49:d5:54:90:bc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=f04606ade05b61d7116352ce4c97a4e52815e575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:77:c9:d6:d7:7d:84:d5:b2:ad:e1:c2:ee:
2e:18:dc:d8:ea:65:e9:8f:a2:29:a1:7c:51:40:e8:
22:c8:db:68:aa:7b:fe:8e:fc:2a:6c:a0:a3:f0:95:
44:ad:11:42:9d:bb:4c:97:8d:2e:f7:c0:51:1e:47:
6a:88:9c:b0:8e:13:7b:da:1b:5c:11:d3:a4:52:8b:
53:20:34:42:bc:e8:a9:02:3f:12:51:a8:e4:e4:28:
2b:11:ec:a9:bc:b4:36:91:39:34:af:3b:ca:1e:ab:
9a:6c:31:4d:51:10:61:db:e6:4c:69:76:92:05:22:
87:6b:7a:fc:91:32:e6:df:6a:91:b2:48:2e:57:8b:
c1:a0:92:a4:3a:32:5d:7c:b9:24:31:76:6e:17:cd:
94:f6:13:fb:be:d4:50:b7:a4:b0:0d:ed:d5:37:3f:
cd:c8:44:e6:6d:97:64:1f:65:c8:b8:bc:2d:79:03:
78:89:8c:9f:37:1c:03:7c:0e:e2:88:a1:7e:2c:73:
36:fa:a2:a4:52:b6:5e:3e:ff:45:ab:ab:7f:b1:89:
e8:aa:45:01:6d:19:19:99:88:b1:36:b1:1a:09:cd:
91:49:88:46:3d:b9:62:d6:f8:f1:2c:f8:84:4a:d6:
8f:11:ee:04:29:8a:6b:86:94:d4:b4:a9:f0:a9:17:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:06:AD:E0:5B:61:D7:11:63:52:CE:4C:97:A4:E5:28:15:E5:75
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a9:27:f4:4b:63:5c:c8:20:e7:74:53:50:8d:76:91:80:4e:
11:96:05:ae:06:f0:0c:e1:7c:a0:e6:8f:05:f5:c1:44:07:66:
4f:a3:6c:15:c0:4a:62:5d:e0:95:9e:fd:dc:15:84:48:44:72:
ec:85:55:d3:b3:4f:f0:4a:df:02:17:67:c9:a2:32:38:e1:3d:
f3:12:ce:94:cf:71:e0:2d:dc:13:1d:3e:50:00:a9:49:01:44:
00:aa:75:34:bb:66:f6:e8:7b:3a:e6:8f:c0:03:56:51:47:5b:
26:67:c5:62:36:61:2e:c1:ec:45:11:95:e3:71:05:22:4c:72:
30:c9:40:ba:a1:ef:b8:6c:6e:68:2b:9e:94:a3:e6:00:ad:a9:
bc:d5:0b:76:81:71:f9:26:cb:2e:d9:7c:46:31:02:2d:f0:c3:
f3:df:8b:82:d6:9a:00:26:ca:53:74:91:8c:19:07:f3:a9:99:
5b:9a:ef:b7:dd:b8:e4:7e:9e:54:61:5e:2f:43:88:b8:b8:d4:
f5:3e:05:90:e2:63:bd:f1:10:54:8e:53:43:d2:4e:bb:03:08:
0c:b2:83:d0:7c:8d:3c:80:69:d6:91:13:17:a1:b6:b0:e9:1a:
9e:11:78:77:25:bd:73:a6:a6:f8:38:ba:33:48:03:00:25:fd:
57:e2:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:28 2026 by rpki-client