Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: BoJiWH7sTcdeM+bshkz652zJ+U6pyzJhe+f1avcNToo=
Subject key identifier: 54:57:35:E2:8C:5B:28:CF:5E:CF:39:1B:48:E7:81:B4:15:4B:5B:C2
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019D37C0BF7C62846AB3CC883EAC8D59688B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 07E6
Signing time: Sun 29 Mar 2026 04:01:11 +0000
Manifest this update: Sun 29 Mar 2026 04:01:11 +0000
Manifest next update: Mon 30 Mar 2026 04:01:11 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: dz10wHE4/McTjbG2GwNH06yY8Who24BZoUw8rPozy+U=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bf:7c:62:84:6a:b3:cc:88:3e:ac:8d:59:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Mar 29 04:01:11 2026 GMT
Not After : Mar 30 04:01:11 2026 GMT
Subject: CN=545735e28c5b28cf5ecf391b48e781b4154b5bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:ea:26:35:e1:62:b5:96:8b:dc:be:2c:40:
f5:bc:58:eb:fb:4e:2d:d7:6f:65:2a:71:fc:ad:b4:
9a:a3:29:58:d7:30:f1:b9:36:a9:fb:7b:f9:ac:fd:
2a:45:81:72:f9:c6:c2:6a:4e:4d:01:61:5a:44:2c:
30:d8:37:cb:c7:1b:2a:2c:bf:27:42:7a:f2:a8:b8:
ae:61:94:55:3d:71:09:e1:43:f2:02:19:d8:12:92:
1f:b1:d0:9f:3e:0c:f7:9e:8a:73:b6:93:09:47:a2:
01:29:d5:db:30:10:0f:db:d2:02:c6:78:3b:18:9f:
e9:01:08:38:60:cd:ad:09:d8:fa:d6:bd:ef:46:69:
c0:00:86:6e:3a:d4:e6:df:93:80:03:82:36:8d:1f:
ba:72:5a:92:4c:4d:c7:db:4e:d1:b7:19:fc:9c:cd:
fd:28:45:02:1c:ac:78:c1:32:50:9a:91:5a:dc:9a:
69:c3:b7:1c:5e:75:fd:99:34:12:d5:2a:9d:79:be:
51:cc:38:4c:2a:f5:2f:97:ab:c9:fa:80:32:c3:43:
43:b8:32:85:f0:9d:9f:fb:f6:c6:2d:fd:67:34:7e:
8e:14:90:fd:3d:23:27:4a:81:24:23:09:0e:ee:4e:
73:1e:0d:0a:a9:70:08:83:7c:25:29:86:fb:5d:12:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:57:35:E2:8C:5B:28:CF:5E:CF:39:1B:48:E7:81:B4:15:4B:5B:C2
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:ca:d8:2b:4d:ef:d4:2a:58:17:a4:28:ac:d3:b4:66:33:
6d:c9:96:dc:a4:6b:2b:3e:c6:76:57:d7:25:58:f7:25:2b:ee:
5e:d0:75:bc:65:dd:7e:81:50:ec:f7:23:2a:13:f3:e4:90:2d:
b7:c0:37:54:da:53:3f:b6:ac:f7:6e:ab:d2:da:a9:0c:82:ad:
f0:3f:a4:fe:c9:b2:d4:5b:5c:10:77:55:79:de:40:47:c0:61:
ea:43:61:df:11:89:fe:67:95:fb:94:5f:56:ff:72:ac:ab:3f:
17:e1:4d:6b:d2:2b:13:b9:05:7b:11:2a:d9:58:b0:82:ac:28:
08:c9:f1:cf:9a:32:cc:28:da:a4:d4:bd:47:a1:61:28:45:76:
e3:be:c5:e1:a9:27:93:d4:04:e6:57:b2:46:1c:37:2a:0f:74:
29:b9:1d:8c:ad:c8:da:47:8c:24:3e:96:db:1d:6d:09:8f:70:
29:21:ff:a0:fe:dd:79:77:05:9b:e2:df:bf:87:3f:0f:3f:38:
16:b3:fc:e1:a1:2b:fd:cf:4b:bb:92:ee:ac:37:16:dc:ab:3e:
ec:de:24:26:08:50:14:b6:81:6f:33:6e:48:58:04:0c:79:c2:
5f:a9:d9:51:7f:e4:8b:93:95:0b:04:5c:ab:5c:76:e7:34:d2:
9a:86:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:34 2026 by rpki-client