Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: +ZxSgrDKLQC7gIoJkOa/bLkV9j0VEbCwLCJIzv0djJA=
Subject key identifier: A7:00:95:31:4E:E9:47:6D:E2:B7:43:3B:B2:03:C2:2A:81:28:A9:28
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019E30DFF0066E73A640D00F4E307CD408D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 030F
Signing time: Sat 16 May 2026 13:00:42 +0000
Manifest this update: Sat 16 May 2026 13:00:42 +0000
Manifest next update: Sun 17 May 2026 13:00:42 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: 0UBv3YtPqRW/DUhBTuX5WbV3uGC8woNkzDEw7kWgrYs=)
2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f0:06:6e:73:a6:40:d0:0f:4e:30:7c:d4:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: May 16 13:00:42 2026 GMT
Not After : May 17 13:00:42 2026 GMT
Subject: CN=a70095314ee9476de2b7433bb203c22a8128a928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:86:16:8d:51:05:df:66:50:7b:e0:1a:38:
d2:ed:3d:b4:f5:fc:1c:9a:64:16:7a:4f:20:12:87:
19:0c:08:0a:f3:9b:41:a1:63:93:79:3b:fb:75:16:
16:3d:2a:d7:a1:a8:53:34:36:b0:2a:9f:07:f4:b3:
a6:c0:c4:b2:55:ee:f4:6a:eb:12:cc:23:c8:25:96:
62:bf:3e:f1:c6:5d:e3:26:73:cc:20:3f:23:bb:ab:
ab:a3:8c:10:5b:34:a4:8e:c0:4b:71:cc:cb:b6:4b:
d2:e7:34:f1:8b:61:c6:c2:36:65:c0:c0:08:49:a0:
b1:37:07:e0:7d:49:eb:03:3b:df:50:d6:01:e5:dd:
a4:ef:bd:06:b6:e8:11:f0:31:5a:66:9d:d2:d3:27:
02:17:46:3b:0e:5d:da:b6:5c:dd:e9:57:6e:ee:3e:
30:c6:27:c2:72:1e:d3:69:fb:bd:a5:99:90:c4:7e:
1e:ca:ae:69:47:fc:9e:df:fb:a5:df:83:a0:0e:7d:
c2:ec:7e:a6:14:1f:4a:e8:50:ce:cb:48:f1:6c:b7:
b9:13:d7:a5:f9:1d:86:ae:6b:4e:e1:90:8a:a7:e9:
cb:f7:9a:0f:4b:a8:93:b5:72:9c:62:62:c7:62:1d:
7a:f4:af:ee:a6:92:34:3c:21:31:03:b7:81:e7:2d:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:95:31:4E:E9:47:6D:E2:B7:43:3B:B2:03:C2:2A:81:28:A9:28
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:2b:48:ff:29:05:2b:ba:cc:14:cb:25:14:51:82:78:e4:
33:21:fa:83:82:da:1b:ce:84:2d:30:7c:c8:07:a1:c7:71:92:
21:cf:55:6a:cc:b5:55:c1:50:c2:ea:82:cf:fe:4a:64:dc:6f:
16:d6:d0:9b:47:9e:40:43:dd:ee:4d:69:e2:c8:5f:67:9f:4d:
04:9d:7e:60:1b:12:22:b3:77:74:8b:56:56:2d:81:26:03:22:
f3:c8:0f:d7:c5:17:aa:14:98:4b:3e:7f:09:fb:25:59:c6:7c:
f3:f8:06:3d:bc:b8:d2:ac:60:e5:1f:55:fa:12:c9:30:b8:dd:
f1:58:70:f6:24:52:ed:d6:ca:74:15:30:b2:e3:4a:04:ff:15:
03:cb:0b:71:ec:f6:3e:9e:7d:b3:35:71:4b:05:88:d8:fb:f3:
29:1b:6a:a4:b1:91:4c:f3:93:5b:0c:71:5f:f4:d0:c2:99:3c:
03:29:d4:31:3c:08:56:20:dc:14:3e:e1:62:77:01:89:36:67:
2a:d0:9a:63:9c:50:f9:15:ae:75:72:43:21:81:50:f7:39:03:
a5:f2:91:55:9d:00:57:5a:dd:6e:76:12:32:60:93:11:de:34:
f1:ad:41:2f:2e:e2:ed:cb:58:0e:c6:1e:5a:6d:6d:8c:40:f2:
d0:15:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:28 2026 by rpki-client