Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: z7qae/n1n/XG8YlA/eLDyIvoXbNcnTd19GO0D60KBU0=
Subject key identifier: 55:36:D8:D7:65:0C:D3:A4:AC:A5:0E:46:51:9C:01:BD:0B:EC:54:95
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019D3A5484C89BDAD07C9066E2DFEAFC1C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 1665
Signing time: Sun 29 Mar 2026 16:01:50 +0000
Manifest this update: Sun 29 Mar 2026 16:01:50 +0000
Manifest next update: Mon 30 Mar 2026 16:01:50 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: MNBpXlcr8YunjyS5XE3/vXGc6hC4D0qcYIBAA6/V/4w=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:84:c8:9b:da:d0:7c:90:66:e2:df:ea:fc:1c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Mar 29 16:01:50 2026 GMT
Not After : Mar 30 16:01:50 2026 GMT
Subject: CN=5536d8d7650cd3a4aca50e46519c01bd0bec5495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:ad:c7:ca:ea:27:79:7a:17:1b:70:38:aa:
86:d0:80:83:ed:c1:f5:f9:c3:ea:e4:e6:03:05:2e:
f8:50:e7:7c:75:2a:bb:56:e3:67:77:95:7a:ac:93:
6a:78:97:a0:32:23:a2:67:47:6b:99:58:55:99:e5:
5b:4c:48:cd:ef:10:4b:7d:13:fa:d7:e6:52:45:68:
39:31:c2:b1:7e:c7:e7:b8:dc:5d:5f:9e:d6:ab:d0:
ef:89:92:bb:6e:b8:5d:1b:f7:8f:6b:59:cb:08:bb:
ac:66:d7:45:fe:77:c6:f6:a4:9e:9f:32:c0:9a:39:
bd:8e:da:2b:87:50:0d:b1:37:cb:25:f5:e8:28:5c:
1e:8a:03:5d:95:b7:88:e1:08:e7:fb:5d:ce:a2:46:
5f:7a:b0:d6:49:e2:93:bf:8c:77:2d:b3:99:ab:36:
f3:f6:b9:98:20:54:3b:7e:db:a1:be:2f:dd:1e:d9:
5a:94:1b:46:14:9f:67:46:89:25:fa:31:0d:17:41:
cf:5e:a3:04:e9:d3:3d:08:8e:47:15:1f:e6:43:62:
df:49:99:dd:46:60:07:df:42:8b:f6:0a:69:56:f3:
73:f4:49:4f:00:58:a6:84:e8:db:1d:4d:5e:db:46:
93:8a:a5:c6:d7:41:44:2a:3e:99:22:1f:b9:ed:f9:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:D8:D7:65:0C:D3:A4:AC:A5:0E:46:51:9C:01:BD:0B:EC:54:95
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:cc:86:92:6c:d3:b6:77:10:f6:f4:4d:18:e5:37:59:ef:
40:86:12:c8:ed:73:84:54:af:74:ee:9c:14:9e:ae:a5:34:83:
5e:5a:58:4d:61:c5:29:ba:37:c6:80:8c:e0:50:09:03:e8:da:
df:64:d4:7c:a6:db:40:07:49:3f:2b:d3:b9:58:06:bb:c8:6f:
12:0f:95:72:30:74:32:14:35:dd:f1:e4:96:a2:c1:92:4c:6c:
a3:00:fa:91:aa:e7:3f:38:27:17:63:c5:9f:e6:cd:42:b4:be:
75:aa:8c:ac:bd:51:56:ea:40:3b:1b:26:25:1f:1a:2c:d7:2e:
9a:40:40:c9:49:d6:78:fa:84:9c:10:13:61:be:37:fa:77:c6:
5a:93:6f:2f:3e:2b:50:e0:38:e2:de:27:15:3a:b4:00:ca:41:
fe:bf:f1:0e:a3:45:74:9d:1d:86:87:69:45:2e:99:15:48:6b:
0a:3e:58:4b:ed:84:7d:9b:ae:f7:b3:6c:b7:d6:6f:ff:33:1e:
1a:46:fd:4c:73:c0:a0:9a:e2:9e:54:02:c9:5c:bc:5a:10:b2:
0a:04:83:e8:b4:51:05:96:d7:c1:61:d3:22:a3:d2:82:38:a0:
44:f2:8c:ef:20:f0:ae:75:65:1b:b2:13:c1:14:3a:db:6d:d1:
a0:41:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:52 2026 by rpki-client