Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: kbDEBIPIb50MvleXQWHI90dIW4pDaOnEczBzCe4lCSs=
Subject key identifier: 7C:3F:E3:C0:AF:49:31:B5:78:E4:17:C9:A0:84:33:F2:80:11:06:BC
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019E30E0A696A111F6D767D419C3E86A9633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0867
Signing time: Sat 16 May 2026 13:01:29 +0000
Manifest this update: Sat 16 May 2026 13:01:29 +0000
Manifest next update: Sun 17 May 2026 13:01:29 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: ufQ2m3me9E8+IfmwN9srrKC2tOt8/rghl5e4tgc3jAo=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:a6:96:a1:11:f6:d7:67:d4:19:c3:e8:6a:96:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: May 16 13:01:29 2026 GMT
Not After : May 17 13:01:29 2026 GMT
Subject: CN=7c3fe3c0af4931b578e417c9a08433f2801106bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:cb:f0:29:99:58:5c:19:c5:8a:27:56:1d:
f0:e9:4e:cd:2c:d7:38:2e:1e:c8:40:6e:97:ba:9a:
d7:ae:75:1b:5b:57:e7:f7:88:d3:44:1f:80:f3:60:
2a:1b:06:98:46:d1:47:d1:13:50:d7:6a:46:d0:c0:
53:1c:a9:3b:ba:1f:52:a7:1e:d8:66:3c:15:d6:d5:
c2:36:a7:1b:28:ca:f2:8e:bb:4d:d8:80:27:f4:cd:
8d:fa:09:aa:58:7a:9f:53:d4:6c:a9:c6:db:d7:13:
87:f7:7f:01:03:5a:64:41:b0:cf:09:fb:d0:66:9e:
aa:15:5f:e0:9c:93:1d:68:16:6e:8a:9b:32:e0:12:
4e:8a:3e:f5:db:1c:8a:e0:1d:37:c6:39:58:4f:4c:
13:42:6e:b5:ab:91:13:71:b1:66:04:44:c7:a9:26:
20:cd:af:97:7c:87:2e:a6:3b:05:71:12:d3:28:3c:
59:11:4d:f9:2c:54:32:80:7e:32:8c:8a:d3:66:39:
00:e8:6b:dd:a0:54:34:93:c3:1c:b3:25:dc:cb:94:
7a:94:3f:76:76:91:7e:86:51:b6:d9:35:35:4b:87:
aa:77:39:ff:2b:bc:96:de:55:c6:b4:b0:3a:71:98:
c1:9d:12:aa:dc:92:db:ae:ff:50:95:95:65:0e:86:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:E3:C0:AF:49:31:B5:78:E4:17:C9:A0:84:33:F2:80:11:06:BC
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7d:2c:01:9d:4f:33:2b:f7:c2:8c:22:fd:c0:9f:53:10:f9:
a6:7d:44:20:c9:88:39:2b:fd:80:80:4c:af:06:d6:c7:9c:43:
62:a7:de:c3:02:b8:05:ce:e8:7a:08:20:fb:d3:b2:2d:c7:6c:
59:ad:b6:7c:98:fe:d4:40:1c:83:6a:75:20:6e:14:61:db:4e:
35:e2:d1:5a:a4:21:28:b0:9c:47:f3:c9:63:b4:59:f2:7a:36:
e2:af:9a:69:99:28:56:64:be:a0:89:5c:7d:c8:c0:95:b5:a2:
b6:12:53:4e:4a:ee:60:17:f5:d9:ee:a9:76:8d:47:ce:29:ec:
50:a1:73:fe:86:9c:9e:6b:23:7e:6d:d5:b8:e3:1d:ef:f7:08:
0e:65:e6:69:f2:40:01:16:07:43:5f:82:44:f3:72:a5:f3:f0:
aa:a1:24:6d:58:c0:17:53:4a:2a:bc:9c:88:c7:f5:f7:86:cf:
94:f0:78:75:3a:ff:88:da:7e:00:30:e7:92:d8:0a:6c:6f:cd:
ca:1c:7f:49:f0:8a:69:50:8b:cf:3e:0e:6f:f5:19:f8:bc:5b:
66:ce:bc:0b:19:3f:9d:b6:dc:9f:5a:35:03:61:75:d4:06:bb:
da:55:10:1c:3c:2c:0b:03:c6:45:c1:e6:cb:27:d2:0e:7a:3d:
44:75:df:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4KaWoRH212fUGcPoapYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjYwNTE2MTMwMTI5WhcNMjYwNTE3MTMwMTI5WjAzMTEwLwYDVQQD
Eyg3YzNmZTNjMGFmNDkzMWI1NzhlNDE3YzlhMDg0MzNmMjgwMTEwNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3L8CmZWFwZxYonVh3w6U7NLNc4
Lh7IQG6XuprXrnUbW1fn94jTRB+A82AqGwaYRtFH0RNQ12pG0MBTHKk7uh9Spx7Y
ZjwV1tXCNqcbKMryjrtN2IAn9M2N+gmqWHqfU9Rsqcbb1xOH938BA1pkQbDPCfvQ
Zp6qFV/gnJMdaBZuipsy4BJOij712xyK4B03xjlYT0wTQm61q5ETcbFmBETHqSYg
za+XfIcupjsFcRLTKDxZEU35LFQygH4yjIrTZjkA6GvdoFQ0k8McsyXcy5R6lD92
dpF+hlG22TU1S4eqdzn/K7yW3lXGtLA6cZjBnRKq3JLbrv9QlZVlDoaA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHw/48CvSTG1eOQXyaCEM/KAEQa8MB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX0sAZ1P
Myv3wowi/cCfUxD5pn1EIMmIOSv9gIBMrwbWx5xDYqfewwK4Bc7oeggg+9OyLcds
Wa22fJj+1EAcg2p1IG4UYdtONeLRWqQhKLCcR/PJY7RZ8no24q+aaZkoVmS+oIlc
fcjAlbWithJTTkruYBf12e6pdo1HzinsUKFz/oacnmsjfm3VuOMd7/cIDmXmafJA
ARYHQ1+CRPNypfPwqqEkbVjAF1NKKryciMf194bPlPB4dTr/iNp+ADDnktgKbG/N
yhx/SfCKaVCLzz4Ob/UZ+LxbZs68Cxk/nbbcn1o1A2F11Aa72lUQHDwsCwPGRcHm
yyfSDno9RHXfow==
-----END CERTIFICATE-----
Generated at Sat May 16 21:13:00 2026 by rpki-client