Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: 6Ri6JNOfKmmpjlreEyR9MHGm9x4fu0SDbcZMdKaEZdg=
Subject key identifier: A2:B2:35:F8:20:61:F5:2E:78:18:0C:3C:1B:98:3E:AD:C5:66:1F:C6
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01A13C6E8A880D75A60D339072A985F909F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 1909
Signing time: Wed 14 Oct 2026 22:00:39 +0000
Manifest this update: Wed 14 Oct 2026 22:00:39 +0000
Manifest next update: Thu 15 Oct 2026 22:00:39 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: 4AsDyIyeA6lDuwr4GPN2GSixCnSaYql3LjE+pLnlTiI=)
2: DxbjZgR_Gk8kYf0VDX2R_XiSjcU.roa (hash: JVgVC0LCArCDmjerKJgthDfyaomX44CrzYfqDeiW1Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:8a:88:0d:75:a6:0d:33:90:72:a9:85:f9:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Oct 14 22:00:39 2026 GMT
Not After : Oct 15 22:00:39 2026 GMT
Subject: CN=a2b235f82061f52e78180c3c1b983eadc5661fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:53:ec:10:ba:9f:64:74:3f:32:6f:41:88:
32:0a:a6:04:8e:7a:ab:d1:25:4d:57:02:f5:3a:49:
f6:19:68:fa:1f:4f:7d:12:dd:2f:38:54:e5:80:da:
3a:23:55:69:f9:25:72:48:b8:6e:01:ef:06:1c:69:
e7:ca:5e:69:5a:39:3e:b4:8f:6e:cc:8b:d7:f2:35:
9e:ed:ab:81:4a:a5:05:0a:22:c6:68:b3:d0:b0:1c:
cc:6e:71:ef:2f:7f:95:b0:aa:c2:76:f0:97:2c:ee:
22:2b:e0:b9:6f:e3:c9:44:99:fd:bf:c6:5e:b8:0a:
8d:c7:44:7e:d6:75:c2:50:44:b3:ee:90:bf:40:11:
cf:cf:3f:59:7f:b7:ae:c6:bd:5c:0d:14:28:77:ab:
e3:74:ce:61:73:14:4b:ba:99:f2:bc:42:24:38:cd:
b6:32:27:28:ab:c5:50:a6:c3:2a:aa:52:7a:f9:13:
63:e3:1d:5f:1f:3f:25:0f:9b:3a:7e:67:7f:2a:63:
d9:f9:b2:9a:27:ca:8e:b5:bf:5b:a7:0c:b8:d9:a2:
de:98:75:47:95:a7:3d:a5:10:eb:11:12:3b:3b:a6:
a7:6a:f4:e6:08:f5:13:b0:a3:0d:a2:c2:d6:0e:07:
a4:c7:16:1e:e1:47:93:8f:f7:25:50:6b:a3:e6:54:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:35:F8:20:61:F5:2E:78:18:0C:3C:1B:98:3E:AD:C5:66:1F:C6
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:c9:42:d9:b1:a6:1f:fc:6a:a5:b5:af:71:91:80:44:f5:
0a:f9:c6:d3:93:a2:e6:b9:95:95:70:8e:18:ef:c8:d3:a3:20:
83:2b:1f:f1:1d:d3:02:00:f7:b7:aa:f5:c9:df:bf:52:46:50:
91:df:e0:bf:d2:de:cc:b3:b0:94:14:5d:0b:55:53:c9:1a:bc:
81:3d:cd:e4:79:23:84:3a:31:8e:e5:21:f8:89:23:73:20:31:
c2:6b:9c:d4:f0:8d:5b:d1:a1:a8:84:3a:dc:94:3c:b0:3f:a1:
24:18:45:fd:d4:a6:95:1d:9e:35:76:e8:35:e3:e6:24:29:8f:
43:45:98:3b:63:95:d6:71:b3:53:38:3f:95:33:9d:c6:29:ce:
da:3d:17:ab:34:4c:eb:e1:58:60:c4:8c:e7:ca:34:b5:81:6d:
56:3c:b7:0c:f4:4a:b3:cf:08:77:e1:07:3e:0e:d4:56:4c:d0:
3f:55:cb:fe:d5:43:22:11:d2:fa:b5:bc:6c:7e:7d:15:b0:da:
f1:d3:ba:11:73:d3:6d:f3:6c:0e:73:97:d3:84:0f:a5:57:b2:
2b:80:32:3f:b6:ae:40:ab:bc:23:ce:74:9a:ee:0f:04:a1:46:
2e:67:3e:f8:23:a7:ac:c0:8d:57:aa:e7:8a:13:d2:8b:3e:d0:
b0:b8:88:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8boqIDXWmDTOQcqmF+Qn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcyMTA1NzUyYjk4MjE3NGQxMDQwYzEwMzgxNzU3MGI4
ZDM0ZDYwHhcNMjYxMDE0MjIwMDM5WhcNMjYxMDE1MjIwMDM5WjAzMTEwLwYDVQQD
EyhhMmIyMzVmODIwNjFmNTJlNzgxODBjM2MxYjk4M2VhZGM1NjYxZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJZT7BC6n2R0PzJvQYgyCqYEjnqr
0SVNVwL1Okn2GWj6H099Et0vOFTlgNo6I1Vp+SVySLhuAe8GHGnnyl5pWjk+tI9u
zIvX8jWe7auBSqUFCiLGaLPQsBzMbnHvL3+VsKrCdvCXLO4iK+C5b+PJRJn9v8Ze
uAqNx0R+1nXCUESz7pC/QBHPzz9Zf7euxr1cDRQod6vjdM5hcxRLupnyvEIkOM22
Micoq8VQpsMqqlJ6+RNj4x1fHz8lD5s6fmd/KmPZ+bKaJ8qOtb9bpwy42aLemHVH
lac9pRDrERI7O6anavTmCPUTsKMNosLWDgekxxYe4UeTj/clUGuj5lTFZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKyNfggYfUueBgMPBuYPq3FZh/GMB8GA1UdIwQY
MBaAFNhnIQV1K5ghdNEEDBA4F1cLjTTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUt
MTUxOGE3MzNmOTcwLzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lNzMyZjQtYmU4NC00MjliLWExOGUtMTUxOGE3MzNmOTcw
LzEvMkdjaEJYVXJtQ0YwMFFRTUVEZ1hWd3VOTk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGHJQtmx
ph/8aqW1r3GRgET1CvnG05Oi5rmVlXCOGO/I06Mggysf8R3TAgD3t6r1yd+/UkZQ
kd/gv9LezLOwlBRdC1VTyRq8gT3N5HkjhDoxjuUh+IkjcyAxwmuc1PCNW9GhqIQ6
3JQ8sD+hJBhF/dSmlR2eNXboNePmJCmPQ0WYO2OV1nGzUzg/lTOdxinO2j0XqzRM
6+FYYMSM58o0tYFtVjy3DPRKs88Id+EHPg7UVkzQP1XL/tVDIhHS+rW8bH59FbDa
8dO6EXPTbfNsDnOX04QPpVeyK4AyP7auQKu8I850mu4PBKFGLmc++COnrMCNV6rn
ihPSiz7QsLiIKw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:15:44 2026 by rpki-client