Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: 28Zcah7gQgYdz3JBo4mGViLuXFB/RwbrMj2Wx2YpjT0=
Subject key identifier: CD:FE:D8:0E:2C:27:BE:D1:E1:6F:C6:DC:37:BB:E2:98:9C:3E:53:A9
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 01A08B68A7A99CE51C2CBC5521FE384D0F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 0449
Signing time: Thu 10 Sep 2026 13:01:26 +0000
Manifest this update: Thu 10 Sep 2026 13:01:26 +0000
Manifest next update: Fri 11 Sep 2026 13:01:26 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: SWiDxNOIO7g90hSpnCADP5FkHNeiCLqa2YrJgJzVvIA=)
2: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (hash: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:a7:a9:9c:e5:1c:2c:bc:55:21:fe:38:4d:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Sep 10 13:01:26 2026 GMT
Not After : Sep 11 13:01:26 2026 GMT
Subject: CN=cdfed80e2c27bed1e16fc6dc37bbe2989c3e53a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:a3:d5:4e:5d:a4:5c:04:a8:7f:27:58:67:
05:40:40:01:7a:d0:43:f7:27:be:24:52:17:e8:46:
ca:45:e9:a9:96:20:1f:bd:29:1c:a2:ba:1d:5e:b2:
45:2b:9b:c5:f4:41:18:6b:34:5b:a8:9b:37:15:21:
36:15:9d:7a:0c:a9:5d:fd:68:bb:2b:eb:95:f4:e3:
bd:5f:9f:66:10:60:a8:ac:4a:0e:dd:83:c9:3f:98:
f9:e5:a3:5c:5e:05:9a:9e:48:da:a6:88:d4:87:97:
a4:0b:66:77:9c:8f:84:2a:48:8b:93:ab:51:53:eb:
32:81:56:e0:39:a8:5e:75:86:fe:a3:16:c0:0c:bd:
31:2d:be:13:88:00:ac:b6:c8:09:7f:0c:79:62:15:
e0:c0:ec:c9:c1:e0:4b:fd:1f:d8:34:f5:34:b4:28:
0c:22:e9:47:26:1d:19:09:9e:f1:45:24:95:2a:34:
16:15:aa:6c:b4:8c:0a:22:d8:bc:32:af:a0:1b:8b:
c8:17:26:25:87:5b:85:11:f4:0d:d0:d4:20:70:da:
d8:2e:fa:64:52:e3:8a:80:72:13:86:2b:13:7a:a0:
b1:24:2b:87:3d:15:0b:3d:91:67:b7:17:67:57:33:
90:c4:74:3b:b0:9e:9e:f3:3a:23:7e:01:80:6c:0f:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:D8:0E:2C:27:BE:D1:E1:6F:C6:DC:37:BB:E2:98:9C:3E:53:A9
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:81:5a:94:f3:cb:16:bf:92:34:25:f1:eb:86:69:55:2b:
f1:1e:66:9e:d1:48:d1:c3:69:91:7f:be:02:38:59:5f:b6:c0:
d1:7a:bd:bd:d7:b5:7c:df:72:10:8f:0e:1f:be:c1:33:7b:bd:
2a:84:f2:20:2a:c8:5c:e2:44:96:ed:72:1b:41:cc:1a:ad:0d:
32:1e:bd:5e:c1:e2:ed:a2:f9:dc:59:d9:02:e1:74:1d:58:bc:
4a:2c:af:91:9d:e3:06:b3:ad:4f:61:13:06:62:29:06:c5:6c:
6c:21:8f:9b:80:7f:d2:69:11:fd:b6:39:2e:45:2c:4c:67:6b:
5c:97:a9:44:fb:5b:fa:c5:de:9d:ba:63:b1:ec:3d:e2:03:b7:
17:9d:33:5b:df:35:a4:60:25:52:0c:b3:73:1d:f2:16:8c:fb:
6e:e9:1d:e7:4d:8a:92:21:6b:b9:df:a6:16:6a:ea:f8:63:c3:
a9:ae:7b:85:dc:c5:67:33:0a:47:d1:9f:13:05:ef:9d:ae:c7:
41:f7:c2:59:6c:67:b5:62:4f:fa:9a:da:a1:c3:7f:bd:ac:6f:
13:57:fa:1a:0b:89:b0:a7:af:20:8e:5b:be:47:76:bf:4e:ca:
25:ca:89:bc:d3:47:f7:cf:b2:25:92:70:3f:c3:bc:68:d4:d6:
89:e8:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:00 2026 by rpki-client