Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
File: 2gqeca1dVkIzqUTR9HmFGNGDH30.mft (raw, json)
Hash identifier: a6uyHQmWHbmOsndf2URk0NyJLYLdfZxTthl4gp/uzy0=
Subject key identifier: 49:A6:0B:19:EA:51:5C:86:84:00:DB:C2:AF:7F:80:44:3A:DF:B2:F9
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 01A1803D3037DE0A5F156952D02B05F58202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
Manifest number: 0564
Signing time: Wed 28 Oct 2026 02:00:55 +0000
Manifest this update: Wed 28 Oct 2026 02:00:55 +0000
Manifest next update: Thu 29 Oct 2026 02:00:55 +0000
Files and hashes: 1: 2gqeca1dVkIzqUTR9HmFGNGDH30.crl (hash: UGV7N43Xo5w95qYnmMcdmrPf0vNdoKPOkvOWWBJYk90=)
2: Q2vpD-6qwdt6qZcrU-tjbUdpExw.roa (hash: 9jt19Pmi5Pq9O2NgyYR6RNuRjtmVOOQv0b/3LhJW/n8=)
3: R5Ny2GNWyvWN4eVgxscGnQpmsec.roa (hash: yuz8CGjGv+WQ63pJgwYXIvJqRS9943OTx1hb3hcTZKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:30:37:de:0a:5f:15:69:52:d0:2b:05:f5:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: Oct 28 02:00:55 2026 GMT
Not After : Oct 29 02:00:55 2026 GMT
Subject: CN=49a60b19ea515c868400dbc2af7f80443adfb2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:82:7d:89:0c:6b:d5:17:75:93:48:1a:13:
5d:d8:b9:79:86:21:67:5a:13:62:4b:29:09:8e:bb:
58:f5:16:13:92:ff:72:73:35:68:1f:96:9c:52:61:
91:8a:82:87:54:6d:73:65:f2:c4:6a:c2:18:f2:69:
e2:1a:48:16:4c:06:14:81:69:7c:6c:fa:c1:f9:b2:
12:9c:82:bb:02:a6:55:42:55:1e:7b:d0:f2:f0:60:
51:6c:72:43:c7:c9:10:c1:d3:5d:f9:e8:3d:d7:76:
64:9e:93:41:7c:4c:53:35:97:19:12:e0:51:73:09:
f1:56:0f:4c:ea:84:34:d2:1e:3f:a6:da:c2:83:db:
09:9f:fc:4d:2f:ee:80:f5:10:6e:be:8f:78:50:fb:
37:81:40:10:ba:92:37:a8:33:b2:e0:fa:f1:09:1b:
5f:05:e5:14:94:6b:dc:0e:b6:c0:c3:19:71:a9:00:
60:b2:8d:42:7f:47:64:2d:91:b1:04:ee:d9:76:ed:
ed:3a:1a:dd:1d:2b:74:32:6f:91:73:28:9a:fd:1d:
52:0c:a3:94:20:11:fc:15:0e:81:1d:3e:a5:67:a2:
1e:b5:09:cf:bf:a2:83:d5:6b:0a:77:18:60:f4:88:
19:f7:26:e1:c8:0c:87:da:98:fd:37:f8:ef:c3:6c:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A6:0B:19:EA:51:5C:86:84:00:DB:C2:AF:7F:80:44:3A:DF:B2:F9
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:2a:ba:d8:cb:77:47:ca:82:9c:bd:66:0b:8e:40:4d:03:
6f:e9:e7:c3:93:f7:7d:44:f5:55:e3:ac:17:72:11:7b:61:c2:
bd:05:b2:cc:00:4c:8d:6c:64:4f:ef:1e:69:3d:ad:36:83:50:
e1:14:19:60:dd:e2:18:ba:25:4d:3c:0f:1e:68:0c:04:91:e0:
a6:d3:c0:4f:81:01:15:0f:2f:31:3d:25:70:28:b7:75:79:13:
16:e0:34:2b:7f:7c:b3:ac:58:17:2b:7d:be:c9:7d:23:41:1d:
1b:9c:50:f9:63:e8:17:10:ab:5f:2a:b0:21:19:f4:98:b9:c7:
da:e6:bf:1c:0d:56:c6:9b:aa:5f:af:12:c0:43:5a:ba:34:6c:
c5:58:6e:f0:e4:0c:ec:ff:e8:a9:a2:9e:a1:b8:84:bc:6f:b4:
cf:f8:2e:c3:24:18:f6:9c:65:8f:5c:f0:13:30:84:f6:5d:a7:
80:a4:a9:a7:4a:15:64:9e:b8:34:a5:f7:ce:a9:d6:ec:a2:27:
44:04:62:8d:78:92:c9:c9:2c:b1:b0:45:12:ea:e6:8a:59:da:
ad:1f:77:8b:51:70:dd:24:67:dd:cd:7e:fe:0e:7b:8f:1f:ef:
3b:82:c7:51:f8:12:37:f2:28:b3:74:4a:13:bb:10:99:a5:e6:
a3:3c:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:10 2026 by rpki-client