Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json)
Hash identifier: +1kW2wxljwbJHcMv6ux7NwfpevOtjCw61gt7odgIalk=
Subject key identifier: 39:39:B7:08:F5:E6:A0:E2:D8:90:51:24:84:38:DB:B1:44:E7:32:C2
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019F736300B5F0612D079B9761B1D9A80D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
Manifest number: 03B8
Signing time: Sat 18 Jul 2026 04:01:35 +0000
Manifest this update: Sat 18 Jul 2026 04:01:35 +0000
Manifest next update: Sun 19 Jul 2026 04:01:35 +0000
Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: pfdi3ej/y0D0g61E2BZmhl4N8pbr3WB+DSom9R6YmKw=)
2: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (hash: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:63:00:b5:f0:61:2d:07:9b:97:61:b1:d9:a8:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Jul 18 04:01:35 2026 GMT
Not After : Jul 19 04:01:35 2026 GMT
Subject: CN=3939b708f5e6a0e2d89051248438dbb144e732c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:c3:61:08:33:35:08:7b:6d:c5:52:fa:df:
f0:34:44:b0:4f:d0:aa:0f:69:0a:e9:19:42:f6:03:
84:8f:db:2c:2d:f9:4a:d9:d6:af:ca:47:c4:38:22:
16:14:a0:bc:01:92:3c:09:20:56:36:fa:21:69:96:
5f:18:5e:eb:15:06:6d:23:ca:7c:33:52:c8:4c:f9:
bf:28:45:35:9f:ed:f2:59:e3:99:2b:68:71:b1:34:
53:de:bf:56:d1:14:e4:cf:bf:59:d8:94:b4:ce:bc:
22:dd:db:4b:12:20:a6:20:fb:cd:19:5c:e6:e6:c3:
a6:4f:c6:3a:e8:51:96:b1:43:92:48:bd:4f:cd:be:
d4:00:d3:42:60:7c:5f:89:3a:5d:ea:cd:df:bc:0b:
d2:e0:b9:c9:fb:d0:8c:8a:3d:48:9f:89:22:7a:8a:
48:2e:1b:7f:b1:78:bd:05:30:5c:f6:93:55:e4:f9:
f4:1e:b4:55:d1:66:29:58:22:13:52:95:cc:7c:60:
fe:d3:d2:46:dd:30:af:ea:90:c3:85:cc:85:dc:e9:
47:62:55:e2:4a:46:ca:1b:9f:d7:0a:8b:a0:86:e0:
18:b7:dc:16:94:ff:92:a8:fd:25:65:ba:a7:1c:76:
ec:1b:40:5e:a0:34:22:e1:4b:f1:c5:6f:a1:f6:22:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:B7:08:F5:E6:A0:E2:D8:90:51:24:84:38:DB:B1:44:E7:32:C2
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:7f:d6:aa:f0:99:d7:30:36:c2:9d:75:7c:31:95:76:25:
5e:21:d1:aa:72:71:7e:2d:a5:a5:f7:da:7d:56:c2:a5:e6:76:
1f:fa:e1:af:b9:5f:e4:73:11:b7:31:bb:46:a6:80:d3:c6:f6:
85:c7:aa:52:17:2b:df:c9:f1:65:96:c6:18:37:0e:95:18:e8:
8b:40:33:4a:46:7c:88:bf:1b:d0:35:65:33:48:5f:4a:a2:7f:
5a:90:00:bb:39:ae:32:27:92:e0:c3:30:20:e1:2e:e4:8e:47:
09:74:64:61:93:c3:a2:d1:6d:3f:0e:03:9a:d6:0b:63:3d:7b:
64:e2:2b:65:60:02:3d:68:5d:59:28:07:cc:e6:00:cb:42:80:
12:76:ee:eb:fc:90:5e:2f:95:28:1c:69:30:d0:a6:aa:ff:0a:
dd:bc:0e:b0:41:21:68:4f:8e:7c:73:55:46:bd:19:2f:fc:9a:
7b:c0:09:0b:d3:b6:85:62:85:66:d9:ce:cb:d0:48:f7:77:d5:
24:7e:ea:70:0a:d2:a5:94:c7:3d:79:dd:e5:d9:da:45:b5:9f:
a5:32:ce:e9:3e:23:02:62:b3:05:2f:92:df:59:5e:96:d0:dc:
79:fd:0d:40:7b:ad:e6:bd:15:74:71:47:69:f0:ba:e3:4c:1e:
39:c6:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:18:30 2026 by rpki-client