Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: Y7F5dhLLOcCwP0GWw/yBYSwfr6tKDvpbgiXdS26ZFJ8=
Subject key identifier: FF:55:AD:B1:81:C1:FD:81:53:28:8E:20:72:6C:34:A6:B9:B9:D1:74
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 01A0016FF3B149793CCEF5474D4EAC0F53DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 18:01:48 +0000
Manifest this update: Fri 14 Aug 2026 18:01:48 +0000
Manifest next update: Sat 15 Aug 2026 18:01:48 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: s1AORWLkfkO90s8YXw3806cUgQ/yDyGBksRqZ7/qGb4=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:f3:b1:49:79:3c:ce:f5:47:4d:4e:ac:0f:53:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Aug 14 18:01:48 2026 GMT
Not After : Aug 15 18:01:48 2026 GMT
Subject: CN=ff55adb181c1fd8153288e20726c34a6b9b9d174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:7b:46:70:48:a7:0b:53:3e:bf:57:6c:f5:
b8:55:d9:09:13:13:a6:4c:e8:74:3c:87:dd:74:ef:
16:a3:77:25:39:d1:7b:d2:ba:8b:32:2d:35:be:eb:
da:28:b5:bd:90:30:5d:76:98:fe:a7:8a:f7:78:9c:
38:e5:6c:c9:29:18:26:28:1b:b0:6b:9b:eb:89:76:
65:e4:97:0a:54:6b:50:56:88:7d:4a:65:77:b5:68:
0a:df:b0:2f:12:82:de:c9:36:9f:fc:cd:2b:56:41:
22:d8:88:d5:9b:58:c3:5a:f5:45:6d:23:cd:66:bf:
8b:15:de:0c:28:bb:70:7a:65:d8:4b:44:7e:50:3c:
b3:a7:82:d4:e8:66:60:f1:0c:c1:5c:72:01:bf:5f:
54:3e:98:23:f5:3c:65:d0:55:0f:9e:d7:99:13:04:
82:09:9b:c6:e4:19:26:05:e8:98:5e:3e:c4:56:e7:
fe:db:8e:0d:8d:7b:0f:6b:b3:4e:86:6c:0c:a3:a7:
43:4d:8c:77:2e:c3:c4:a2:60:e2:64:e6:9d:7d:d0:
3b:c8:0c:f1:68:13:41:b1:c0:0a:d6:9a:3f:cb:6e:
7b:f9:e7:ad:79:33:53:48:cb:ca:f6:07:72:b0:69:
7c:2f:e1:34:39:d7:36:6f:e9:9a:90:02:ab:b0:56:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:AD:B1:81:C1:FD:81:53:28:8E:20:72:6C:34:A6:B9:B9:D1:74
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:36:a8:89:1d:27:c2:03:75:81:41:5d:ad:cd:3c:c5:6b:
d5:18:3c:b4:27:c9:9c:a2:dd:09:7c:73:3c:99:7c:f0:cd:dd:
15:d1:cf:38:c3:2e:0d:12:c2:42:aa:a4:cc:95:d4:e8:44:a3:
f4:e9:ed:35:f8:39:27:92:3e:ab:77:f4:ee:29:3e:f2:65:7a:
9f:28:df:9c:02:43:a1:7d:8b:45:3d:fd:61:d5:19:bf:e6:d5:
00:4a:92:94:c0:f2:d6:92:95:3e:53:63:b8:d2:d1:dc:b9:5b:
93:99:fd:ef:7b:3a:7a:bc:80:59:b7:6f:4c:0c:e1:7e:09:fe:
b0:cf:63:06:fb:42:12:ef:12:48:0d:af:a0:f0:45:6b:08:1f:
c5:e4:37:8f:28:c9:4f:41:f4:fc:52:e7:74:91:f1:c7:b7:a0:
8c:8b:18:7e:5e:23:0f:d4:75:e6:08:29:c5:8b:c9:50:bf:d1:
a5:74:f9:0d:74:11:9b:6e:c4:06:ec:cf:98:85:21:36:4a:6c:
66:42:5c:d7:ec:bb:80:c5:4e:b9:a3:87:98:a0:6e:93:cd:88:
24:d9:b6:4c:6b:18:1e:6f:e6:d1:69:4c:86:c4:ba:c2:3b:43:
7f:76:2e:f8:29:51:6c:3d:74:4b:e6:77:df:ac:f5:77:ba:eb:
c7:8e:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:11 2026 by rpki-client