Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: 2lZ75QC01joAjUzu9ZV8kh8iYEDr86YlfnDgRwiCTgg=
Subject key identifier: 5E:74:6F:2F:10:58:47:FB:16:56:52:D4:92:D4:4A:96:2A:7C:8B:57
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019FA8D082082A7D6B58203C52D9EEE1FD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0733
Signing time: Tue 28 Jul 2026 13:01:04 +0000
Manifest this update: Tue 28 Jul 2026 13:01:04 +0000
Manifest next update: Wed 29 Jul 2026 13:01:04 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: aMJvZ3pnUYDnte9Z6IiLIbWr3ETRH9vTocj0r2wgr5Y=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:82:08:2a:7d:6b:58:20:3c:52:d9:ee:e1:fd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jul 28 13:01:04 2026 GMT
Not After : Jul 29 13:01:04 2026 GMT
Subject: CN=5e746f2f105847fb165652d492d44a962a7c8b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:e5:2e:63:9b:97:cb:9e:5e:a8:ae:77:6d:
92:ec:87:73:e1:90:d8:79:15:c4:f1:96:15:9a:8b:
8b:82:11:b0:99:53:87:de:1c:b6:3b:7a:ee:3a:b9:
5d:97:5b:b7:89:95:15:12:4b:71:18:8f:03:5f:6f:
39:5b:50:96:34:01:c3:5e:70:56:21:10:45:a5:b0:
6b:86:4f:e8:95:2e:25:c6:9c:9c:98:a0:66:2c:c0:
03:b5:9b:80:65:ad:95:77:5f:61:d5:5e:98:c2:d5:
5b:5d:93:cd:6d:41:a4:88:75:9e:85:9b:74:2d:e6:
4d:18:72:93:06:4a:99:61:e6:4a:af:22:9b:ce:77:
f4:74:f8:bd:58:90:ad:f4:95:32:c4:84:0f:a8:9b:
20:60:08:5f:a7:6f:e8:3a:fe:c0:9f:c9:88:ef:9f:
24:6e:e6:ba:d0:7b:28:64:12:e7:0f:32:32:96:21:
d9:3e:71:1f:21:af:7d:35:c2:86:93:a8:46:1c:3a:
f1:2c:8b:89:67:1f:70:b6:42:33:07:7e:fb:81:a3:
c7:84:bc:04:19:f2:1c:52:01:de:f7:68:09:95:5b:
37:14:60:88:fc:e0:bc:64:b4:51:d1:51:9c:c2:b8:
e3:e8:3a:83:12:09:3c:7e:34:4e:8e:3f:95:32:dc:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:6F:2F:10:58:47:FB:16:56:52:D4:92:D4:4A:96:2A:7C:8B:57
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c1:4f:55:e2:44:8b:2b:73:9c:4d:69:39:70:eb:27:96:06:
f5:40:a2:f0:1d:61:11:f4:61:5d:af:4d:b1:be:32:18:0d:e5:
46:45:bf:47:e4:e8:9f:90:bd:96:1b:f2:33:fa:5e:2e:f1:ab:
91:9d:65:6f:cd:bf:c4:a3:b5:90:68:95:d1:98:2a:6f:05:19:
e0:c6:91:14:eb:14:5e:94:71:9b:6a:36:ce:c7:22:68:72:1f:
0a:98:39:17:87:99:77:cd:0f:90:9a:a1:ad:51:a2:2f:1a:5f:
50:7a:b5:73:05:3a:db:00:59:96:50:ea:50:57:d6:83:4b:3e:
e0:e6:c4:61:04:20:02:9d:54:8f:78:82:4b:cd:f3:ef:15:d0:
04:60:ca:32:4c:ac:b8:8e:e1:fe:b5:31:4a:37:16:d8:71:1c:
b5:6b:93:a9:3e:87:e5:ab:65:99:49:25:3d:fa:c5:d4:5b:51:
99:45:ab:e1:37:97:c8:53:ec:2a:a6:b6:9b:61:84:23:3f:91:
da:1c:48:95:e5:a8:db:69:25:fd:df:94:96:76:78:d9:c6:b1:
7f:77:72:32:eb:16:7b:f9:d1:55:4c:6a:28:4b:59:97:f6:b8:
90:3a:e4:91:b4:9b:98:13:aa:ef:15:e8:31:82:4f:41:2c:26:
69:bc:b3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0IIIKn1rWCA8Utnu4f0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz
NmZkZGIwHhcNMjYwNzI4MTMwMTA0WhcNMjYwNzI5MTMwMTA0WjAzMTEwLwYDVQQD
Eyg1ZTc0NmYyZjEwNTg0N2ZiMTY1NjUyZDQ5MmQ0NGE5NjJhN2M4YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF3lLmObl8ueXqiud22S7Idz4ZDY
eRXE8ZYVmouLghGwmVOH3hy2O3ruOrldl1u3iZUVEktxGI8DX285W1CWNAHDXnBW
IRBFpbBrhk/olS4lxpycmKBmLMADtZuAZa2Vd19h1V6YwtVbXZPNbUGkiHWehZt0
LeZNGHKTBkqZYeZKryKbznf0dPi9WJCt9JUyxIQPqJsgYAhfp2/oOv7An8mI758k
bua60HsoZBLnDzIyliHZPnEfIa99NcKGk6hGHDrxLIuJZx9wtkIzB377gaPHhLwE
GfIcUgHe92gJlVs3FGCI/OC8ZLRR0VGcwrjj6DqDEgk8fjROjj+VMtz5NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF50by8QWEf7FlZS1JLUSpYqfItXMB8GA1UdIwQY
MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt
YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5
LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8FPVeJE
iytznE1pOXDrJ5YG9UCi8B1hEfRhXa9Nsb4yGA3lRkW/R+Ton5C9lhvyM/peLvGr
kZ1lb82/xKO1kGiV0ZgqbwUZ4MaRFOsUXpRxm2o2zsciaHIfCpg5F4eZd80PkJqh
rVGiLxpfUHq1cwU62wBZllDqUFfWg0s+4ObEYQQgAp1Uj3iCS83z7xXQBGDKMkys
uI7h/rUxSjcW2HEctWuTqT6H5atlmUklPfrF1FtRmUWr4TeXyFPsKqa2m2GEIz+R
2hxIleWo22kl/d+UlnZ42caxf3dyMusWe/nRVUxqKEtZl/a4kDrkkbSbmBOq7xXo
MYJPQSwmabyzFA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:14:25 2026 by rpki-client