Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: FOj5aKI4lun+qw9HfZu38WN0IpLXLraC5hYrzd/zcnk=
Subject key identifier: D7:22:4C:9A:C1:5B:AF:C1:9A:72:0F:49:9C:30:1A:5B:E9:17:49:C6
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 01A06E711E38268B4A60CB99B7A74767F4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0990
Signing time: Fri 04 Sep 2026 22:01:42 +0000
Manifest this update: Fri 04 Sep 2026 22:01:42 +0000
Manifest next update: Sat 05 Sep 2026 22:01:42 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: YstJ8oZTmQav5/Y8Fz7YQmjWpkWab/mZgQPIEVNtDR4=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:1e:38:26:8b:4a:60:cb:99:b7:a7:47:67:f4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Sep 4 22:01:42 2026 GMT
Not After : Sep 5 22:01:42 2026 GMT
Subject: CN=d7224c9ac15bafc19a720f499c301a5be91749c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:20:d1:fc:fb:f4:eb:d0:4c:ce:a1:1d:75:
ce:86:7e:cf:36:bb:7d:86:fd:15:97:4e:da:1d:88:
e2:55:8a:f5:bb:5c:4f:93:ef:f1:e4:b4:c7:9e:fc:
e1:e7:03:b9:ee:4f:d9:22:92:b2:2e:70:25:b5:f5:
b6:27:2b:12:37:41:a4:04:1a:b7:f1:5d:4b:c9:04:
05:c1:16:71:34:ee:dd:54:9f:28:a6:83:b5:e7:48:
9c:1c:03:3e:e8:f1:f5:9d:05:98:cd:9f:2c:31:78:
7a:36:89:8d:a5:5d:c1:6a:dc:3a:3d:74:21:df:a5:
b5:64:64:c8:1a:d9:00:77:18:6a:80:75:7a:1d:27:
cb:b9:06:7f:d8:69:ce:c5:a9:0f:0b:de:07:e5:c9:
ab:75:3e:8c:6e:19:aa:7d:71:f3:dc:79:5e:a2:f5:
7f:69:b3:e1:39:5b:be:80:fd:e0:0d:34:c3:55:66:
1e:06:51:31:99:b9:87:80:ce:21:87:64:bf:90:b0:
1c:9d:ed:45:34:a1:e9:2d:54:e0:64:2a:1d:97:6a:
af:34:cc:3d:61:03:14:6e:a6:b3:44:66:d8:e9:ef:
db:94:06:81:3e:9c:4b:a6:8f:ba:70:20:ff:b4:8b:
f0:03:5a:11:7e:44:26:96:fd:0d:18:39:7e:cf:22:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:4C:9A:C1:5B:AF:C1:9A:72:0F:49:9C:30:1A:5B:E9:17:49:C6
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c8:ca:57:53:b7:a6:c8:ad:b5:bd:a5:9c:99:1b:39:71:64:
fd:66:06:9d:7a:57:60:64:bc:dd:e8:0c:55:89:e1:f7:5c:e4:
86:d2:58:4a:95:1f:4a:a6:21:54:54:2b:d3:f5:2b:3b:92:13:
a3:c5:3a:c5:6c:1b:54:44:00:ae:b4:23:4a:b3:72:4d:9f:fb:
af:df:6c:d1:50:45:25:04:ca:62:fa:f2:a3:bc:7f:19:e0:2f:
6e:16:17:52:c1:db:7f:1f:49:44:94:47:80:e0:c3:b6:b7:75:
54:6d:33:30:20:b1:08:b8:63:4b:33:16:70:95:a1:c4:da:e0:
47:a4:57:7c:9b:bd:d1:6b:1d:09:79:8c:a7:b7:88:f9:1f:8f:
ac:55:6d:c9:1b:ec:0f:de:15:d4:69:5c:47:40:21:d1:dc:68:
1f:d6:23:a8:2a:ee:7d:2a:6f:8e:3a:a7:4e:de:9d:f7:d0:25:
91:43:08:25:66:5f:1e:8b:d5:19:33:04:cd:82:cd:af:7f:87:
c5:e7:27:13:b2:e5:0c:48:09:45:83:38:e6:37:f0:89:b2:6e:
8b:53:7c:83:4c:35:4c:fe:b9:1e:be:b8:f9:f0:05:68:66:87:
e4:cf:fe:66:43:7c:0c:28:58:32:05:b6:ec:94:5c:05:46:b7:
81:6a:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:36 2026 by rpki-client