
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: de631m2iAkeKoPbsO4rrC4YpStuif2oakfASMW9Pnsc=
Subject key identifier: 00:A5:08:88:90:5F:80:0C:7B:4D:AD:B3:FF:0D:C9:87:E5:13:49:E2
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 019F1943B84C3C4DCE6282352DA4FFDDA87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 175D
Signing time: Tue 30 Jun 2026 16:01:36 +0000
Manifest this update: Tue 30 Jun 2026 16:01:36 +0000
Manifest next update: Wed 01 Jul 2026 16:01:36 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: vaw5fU76X6hFffTFRW0lcXW9QKpOlSw3c/lhfaiJOfM=)
2: jdHMVRkeTn1Nth9vlUo9BvR2wng.roa (hash: AAK6SfAISoxobwueyJaaBYkoMj4IspGZGMaQBhwb7VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:b8:4c:3c:4d:ce:62:82:35:2d:a4:ff:dd:a8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Jun 30 16:01:36 2026 GMT
Not After : Jul 1 16:01:36 2026 GMT
Subject: CN=00a50888905f800c7b4dadb3ff0dc987e51349e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:b4:54:39:31:f0:b6:69:b4:87:04:ee:bb:
12:d2:90:08:e4:1d:48:51:8d:6b:b7:9e:9f:72:34:
1b:a2:44:d5:9d:49:af:c6:bc:4d:85:d9:dc:96:33:
88:40:1b:a1:13:4c:db:cd:ea:e1:63:5f:d8:67:b3:
ad:c4:56:ac:e0:ba:38:c2:ff:c6:7e:74:da:e2:f4:
e9:01:4d:1f:e1:bf:81:e6:b3:96:08:c2:f4:00:07:
47:eb:43:37:b7:36:f2:7b:3c:34:ce:5f:3a:1c:94:
fd:c3:f3:3f:f9:2c:fc:0c:6e:3d:b6:d0:96:45:b3:
fb:5b:a7:26:3b:2d:59:98:2d:20:93:48:4c:82:d4:
3f:d1:57:f1:3c:45:37:38:ce:9a:d1:9e:cb:02:db:
6e:e4:03:09:35:3b:51:5e:1a:e0:c0:3c:2c:63:34:
18:c2:93:f0:d7:ca:87:95:a9:a9:40:55:03:ca:10:
e3:6b:94:d5:76:13:22:a7:eb:93:9d:af:64:ee:da:
46:db:9b:02:0d:25:ea:a0:a8:a4:1a:4d:13:14:d3:
39:99:a0:e5:fe:c6:94:23:00:cc:e9:be:77:31:f6:
46:6d:88:e7:9c:f3:d1:56:50:33:8b:3e:30:b9:b8:
ac:94:59:a5:f8:17:f8:33:49:a3:15:51:9a:b6:a2:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:08:88:90:5F:80:0C:7B:4D:AD:B3:FF:0D:C9:87:E5:13:49:E2
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:73:48:fd:31:c4:65:6d:4c:aa:4e:b2:24:59:00:fe:4f:
84:e4:c7:ac:0d:cc:34:f1:8c:9d:df:11:77:aa:7d:8c:2d:82:
f0:4d:b9:c1:d3:77:5c:d1:48:21:4f:fc:9f:0b:91:1f:68:13:
99:1b:95:16:c7:b6:5e:92:90:4b:d2:12:74:6f:38:16:1e:36:
a0:e1:08:c2:5f:54:e6:16:12:39:d3:c4:70:c9:39:51:3c:08:
cc:b7:65:f3:9b:1b:7c:03:99:5f:9e:cf:23:bb:03:16:5e:78:
98:e4:91:a9:04:22:30:e4:ea:9c:81:6c:dd:f9:c2:ee:5d:82:
2c:fe:28:6a:40:7e:4a:bf:55:c5:24:44:3b:de:89:40:36:95:
a0:d2:df:ff:67:d5:2c:06:82:21:a0:31:87:c6:4c:a3:f2:a8:
91:4a:1f:e0:10:05:ce:2d:31:58:91:2f:df:25:2e:e4:3e:a5:
c7:d0:ab:e0:67:b6:6b:a9:8e:ba:2d:dc:ee:42:38:41:f4:65:
52:ef:55:ce:7a:e9:79:9a:ee:e2:c3:da:17:91:83:54:a8:cd:
40:0a:c2:be:ab:40:a1:8b:77:1b:99:95:34:81:ea:79:53:db:
8d:ed:22:46:ce:ed:13:7f:f3:73:57:fb:9e:70:c3:a4:7b:bb:
5c:70:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:18 2026 by rpki-client