Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
File: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft (raw, json)
Hash identifier: AKWh5DU4dzEmYlPbVaXo50qEucSUYybzyyTnzl75mBI=
Subject key identifier: BD:9B:48:1C:D6:A3:53:0D:FB:9E:C4:CC:85:8D:8A:DF:3A:88:90:43
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 01A13E25C0BA1A011438DCC7E78FB9B25D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 06:00:23 +0000
Manifest this update: Thu 15 Oct 2026 06:00:23 +0000
Manifest next update: Fri 16 Oct 2026 06:00:23 +0000
Files and hashes: 1: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (hash: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8=)
2: 2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl (hash: nRDTMdMUIQ9UOPH0hezUEHKAt78BKlb8ZHDBiKVtUSI=)
3: k9UuQfoQ3x1App0ZI_fz4inm010.roa (hash: 4EB2k7R0veJnPJDrivb11s4A8xWwFMnfL1uLGRvezwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:c0:ba:1a:01:14:38:dc:c7:e7:8f:b9:b2:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Oct 15 06:00:23 2026 GMT
Not After : Oct 16 06:00:23 2026 GMT
Subject: CN=bd9b481cd6a3530dfb9ec4cc858d8adf3a889043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:7e:a4:0c:bd:99:8f:a8:8c:aa:dd:ff:10:
a2:15:be:46:8c:6e:c7:02:b3:7f:0f:a8:a3:ab:f7:
ba:fe:30:72:d8:98:0e:0b:a5:43:d1:65:cf:03:37:
b7:bf:c0:2a:05:55:85:f5:30:93:14:da:bf:bf:44:
4f:a0:60:88:ae:8c:2a:82:db:cc:83:1c:d8:d3:5f:
e6:7a:53:6c:58:c0:82:29:fe:92:55:45:31:9f:ef:
4a:68:df:f1:87:c2:5f:f3:8e:22:4c:13:4f:7d:1e:
98:1f:fa:9a:47:08:09:0c:c4:cb:4d:f6:e6:d7:15:
06:92:24:5b:9d:db:ea:b3:97:cd:10:67:31:3e:bc:
ca:86:28:3b:20:71:9a:f2:08:6a:ea:b8:a6:9c:cb:
ac:ef:0a:62:4b:38:70:d4:07:9d:93:31:e7:01:b6:
d8:0c:35:b5:9f:67:9e:7c:6b:90:e6:5f:00:65:1d:
be:2c:92:2e:5b:e5:3e:17:46:25:87:38:3b:51:59:
42:b9:c2:06:e1:5a:8b:f2:f4:09:48:e1:0c:e6:a8:
1e:26:40:2a:c1:fa:e4:8b:7e:0f:aa:08:2e:d5:07:
fe:d6:64:06:24:34:e4:9b:10:92:c1:49:d7:d9:b8:
79:6a:38:de:5f:fa:9f:94:8c:6d:82:2e:69:ff:27:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:48:1C:D6:A3:53:0D:FB:9E:C4:CC:85:8D:8A:DF:3A:88:90:43
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d7:6d:23:83:e6:d6:10:47:b6:58:7b:bb:af:0d:8b:89:26:
36:3d:cb:c4:55:39:82:2e:e2:f1:e4:30:09:1b:2f:21:fb:55:
85:3c:18:6f:be:af:d0:40:ff:a8:a6:a2:8f:18:9d:bb:a3:a3:
2c:a1:cb:27:c6:99:ef:41:3e:67:e1:49:cd:88:7c:e8:c9:18:
83:45:9c:61:f7:0c:df:0f:31:7b:fc:fe:29:91:62:c0:08:6f:
27:c4:7a:12:95:26:11:81:60:0c:c6:fb:08:98:dd:26:13:60:
9c:8f:d0:90:aa:7e:3c:d0:d6:e2:c9:9d:c6:72:69:eb:0b:ee:
9f:e2:88:ee:32:9a:13:69:87:01:2b:e9:e6:3c:e1:b8:3d:a1:
7b:12:a2:85:9a:38:3d:86:6c:4f:98:16:cd:85:1c:3e:a2:df:
6c:08:64:5a:db:88:8b:c8:5b:35:b3:7c:fa:8b:5c:6c:81:f7:
ec:65:1f:36:83:9e:c2:6c:bf:53:18:d8:8c:e2:97:0d:81:03:
b0:97:72:1b:fd:37:5f:0d:d9:02:eb:3f:7a:cd:8c:e5:9c:4b:
56:87:9a:ec:90:9c:d9:76:25:c9:7e:47:1d:36:df:39:1c:f0:
d4:39:5e:9b:55:98:38:fc:10:03:a2:85:9e:b9:46:38:b2:83:
f5:70:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:55 2026 by rpki-client