Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: 1lK/AbGQDbKIQ0chTHLoJs+XW6v+bd6q+BNSp64qDlg=
Subject key identifier: DA:3C:1C:B1:4D:3A:58:EF:CB:6A:7B:06:8A:93:BA:79:34:98:CA:18
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 019FA14E105509D3C415B804E51D3D621A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 046C
Signing time: Mon 27 Jul 2026 02:01:15 +0000
Manifest this update: Mon 27 Jul 2026 02:01:15 +0000
Manifest next update: Tue 28 Jul 2026 02:01:15 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: ZzhuR7QBQr+Ct5cC61TMO9mCrNQe+bzlQBDZkoWWJV0=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:10:55:09:d3:c4:15:b8:04:e5:1d:3d:62:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Jul 27 02:01:15 2026 GMT
Not After : Jul 28 02:01:15 2026 GMT
Subject: CN=da3c1cb14d3a58efcb6a7b068a93ba793498ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:76:8e:07:0b:87:d3:a7:2e:f0:aa:1d:a9:
99:99:02:02:4d:12:c9:6f:67:08:1d:5a:52:2f:1d:
4f:e0:24:47:95:2f:0a:f7:d2:95:ab:9c:b8:42:4a:
a7:49:85:ce:ac:47:73:1f:ff:07:3c:23:62:e9:ad:
22:26:85:35:71:ec:08:e2:f0:9b:ef:e4:24:7b:d7:
01:e2:95:55:de:de:75:d0:4c:b0:a5:d9:ba:0d:32:
9d:d4:29:b1:ef:42:21:dd:12:ca:73:b7:f1:60:9c:
d9:95:23:28:7c:f6:32:cd:5f:ea:ed:9a:11:cb:69:
43:95:fb:f4:ee:07:e0:a5:b5:62:42:16:28:e5:91:
b3:30:4a:c3:c2:5e:f9:6b:78:91:eb:5d:2e:5b:5e:
79:4c:81:d9:d3:1e:d1:d0:1a:8a:ab:71:76:ab:f1:
e4:2d:37:c4:70:52:d5:24:a6:35:a8:f0:98:8d:d9:
e5:05:ac:24:46:b5:a5:37:40:35:d2:88:4e:e4:22:
d6:b5:03:42:2e:d1:7e:f3:97:fd:07:07:98:53:34:
d1:7c:28:a3:36:4b:c1:04:06:68:73:9f:5d:40:28:
93:af:d7:46:f8:ae:79:6a:7f:76:75:f9:5b:04:0c:
52:76:1d:38:86:c6:90:dd:34:13:44:94:d2:5a:a8:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:1C:B1:4D:3A:58:EF:CB:6A:7B:06:8A:93:BA:79:34:98:CA:18
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:37:0e:72:f8:71:58:9b:56:91:65:4c:17:e7:ea:e1:71:bd:
7d:3b:16:5e:df:cb:56:30:51:eb:9e:0b:39:91:6b:ca:40:d5:
9a:c8:1f:91:9d:31:76:b8:83:85:64:65:43:31:e3:98:dc:21:
8f:8f:c8:7b:0c:74:2a:f1:ee:a9:5f:78:3c:81:fd:89:37:3a:
ac:24:90:95:92:03:5d:cc:da:59:da:50:55:1f:ed:b6:3d:e2:
02:d0:98:3f:a6:2d:f0:7f:b7:f2:fd:c1:8e:0f:0a:c2:10:e0:
d4:8b:e8:24:b1:d0:52:50:a6:b1:50:a4:65:c8:3c:3b:8d:a4:
0d:d2:e2:b5:53:83:a7:3c:9a:40:08:e5:21:8a:0d:76:89:dd:
d3:a6:d4:ff:df:50:bb:88:f0:1b:06:ce:b2:f7:30:e5:7b:71:
61:e5:36:3d:e8:c4:2a:f1:a3:cc:3e:79:ac:2f:91:46:6c:4e:
59:78:61:ef:c3:a6:07:d0:5f:f4:c1:a2:bf:cc:4d:af:f4:21:
03:67:5e:e9:5f:2e:5e:e7:1c:46:3d:68:dc:c2:54:07:f2:d1:
59:0e:7a:6f:9b:3d:82:e1:cb:56:34:0d:c3:12:11:6f:b3:bc:
ef:cf:59:cd:c6:37:5f:21:71:0e:b3:ef:0f:f2:75:94:ba:15:
ac:5b:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:45:33 2026 by rpki-client