Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: 0aGrS/YWnfQvNy+cJjMTjKNobbwmW0uclpH1SjsgTeo=
Subject key identifier: 7F:B7:75:25:DB:FB:63:F5:BF:33:8E:9F:F9:E4:8B:44:F0:AF:67:3A
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019F84C455C508DB12BD1D7F6E2F8BA975B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0917
Signing time: Tue 21 Jul 2026 13:01:27 +0000
Manifest this update: Tue 21 Jul 2026 13:01:27 +0000
Manifest next update: Wed 22 Jul 2026 13:01:27 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: c1NeZW1VB/0cpfvgOEfkZ186BEEtvSDok/cgeothcD4=)
2: IqfljPmovMw0h8ewZdeewCrDYzo.roa (hash: F5c+FwRQPizdSJcZKPHuANU8/2CYQYjIuD51CmmE3Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:55:c5:08:db:12:bd:1d:7f:6e:2f:8b:a9:75:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jul 21 13:01:27 2026 GMT
Not After : Jul 22 13:01:27 2026 GMT
Subject: CN=7fb77525dbfb63f5bf338e9ff9e48b44f0af673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:7e:b2:f2:d5:66:d7:e2:9b:91:cc:f2:99:
83:e7:3b:3a:d7:5c:dd:45:b8:b8:d9:ec:b4:d3:92:
55:eb:e2:17:21:95:7c:e1:e7:21:66:17:ad:a7:35:
57:75:de:9f:d4:ec:74:8d:c7:31:39:a3:35:53:49:
c6:a6:2c:c7:3a:d0:42:09:97:42:74:6f:35:0e:74:
8d:4d:09:e4:e3:f0:03:11:ff:f2:40:95:f6:00:06:
c4:37:e1:ca:1f:35:b3:8b:13:93:82:d4:2d:ab:21:
17:b9:bf:ea:16:36:70:bc:9c:f5:b9:18:b5:f1:15:
f1:02:c7:bb:16:fc:b4:19:db:63:ab:4c:f0:d0:d1:
1a:ef:ac:99:4b:f0:89:db:07:1c:31:5e:c1:c4:d8:
b5:9c:52:a1:86:cc:f4:51:94:08:05:d6:5e:8b:ef:
a9:da:17:65:ec:3f:83:87:2a:98:01:85:59:fd:4d:
08:27:a9:02:c3:ec:6e:bb:64:cd:18:7d:e1:da:78:
ca:36:f9:5c:e9:49:33:c9:6c:e6:8c:fd:d7:81:1e:
1f:a5:d7:aa:4d:79:97:49:80:a3:1b:4e:0d:7d:c5:
10:e5:9d:cb:48:7c:74:51:a8:84:e2:1a:50:06:83:
07:d6:ed:4b:fb:02:a7:6c:e9:13:09:62:e7:1b:dd:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:75:25:DB:FB:63:F5:BF:33:8E:9F:F9:E4:8B:44:F0:AF:67:3A
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:d6:48:c4:dc:c8:32:43:87:9d:22:cb:7d:61:12:bb:71:
83:76:e2:5f:0f:3b:0b:e3:4f:cd:75:25:5a:a7:54:de:c3:07:
81:31:cd:fe:de:f2:8e:96:81:b2:a9:64:e2:80:3c:5d:60:2e:
16:b9:07:cb:52:f6:c6:0d:b1:ef:ee:8b:e6:8d:74:b9:df:e4:
41:0e:05:f2:76:26:c1:0e:72:24:c2:14:4e:e0:f9:d9:98:24:
24:d4:73:1c:99:57:dc:b2:8e:db:97:1e:f2:00:ed:6a:b7:43:
65:76:65:22:91:10:f9:f6:05:68:a9:70:bc:6f:46:7d:cb:28:
db:28:f9:2f:99:12:b8:33:5e:ae:0b:10:0c:1a:2e:ec:99:ab:
68:25:ed:e7:e7:c2:50:e1:55:56:a4:50:5b:ac:d7:0f:15:f7:
56:c4:56:d5:82:71:d4:bc:c9:f1:04:fb:76:3f:72:2e:60:8e:
43:7e:b1:22:99:1a:37:a9:b2:a3:33:f3:bc:cc:75:8c:48:b5:
0e:13:4b:a5:40:f9:95:f1:d8:07:ec:8b:a8:e2:1f:92:97:ec:
ab:cf:eb:63:d9:f5:ca:6e:45:c9:5b:69:06:7b:93:7c:44:c6:
90:9b:ee:18:cc:73:bd:c5:52:f0:8b:51:77:00:4b:db:d3:49:
6b:f8:33:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:19:47 2026 by rpki-client