Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: 2JsoiHw54TmSLlgjnhZTP38/NISaWP9n6iHMTb6tiDY=
Subject key identifier: 45:8E:F3:A0:05:69:25:B0:00:A0:29:A6:F6:35:30:4E:D0:66:0F:C0
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019F17F919F2415741E1DF24F2AB036E3B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 10:00:28 +0000
Manifest this update: Tue 30 Jun 2026 10:00:28 +0000
Manifest next update: Wed 01 Jul 2026 10:00:28 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: KX/uNWrUX2MlyETPqkUdI4aitLVcSR4hpkkm3+7Hp1w=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:19:f2:41:57:41:e1:df:24:f2:ab:03:6e:3b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jun 30 10:00:28 2026 GMT
Not After : Jul 1 10:00:28 2026 GMT
Subject: CN=458ef3a0056925b000a029a6f635304ed0660fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:0e:85:e7:60:01:24:3c:5d:c0:ce:47:a1:
da:db:77:80:0b:08:ba:72:f9:bc:92:3e:74:ce:cf:
c9:d2:6c:9a:d9:04:ce:13:d5:33:d4:2f:e1:83:34:
e7:ac:d3:13:3d:ad:5c:8d:b1:46:92:5e:a5:9e:74:
95:26:37:b2:a4:8e:5b:02:71:4e:69:aa:d8:69:88:
77:ec:a0:98:2b:02:d0:a6:d9:18:4f:a0:ba:8c:f6:
1e:d1:14:8d:df:87:1c:24:e9:56:bb:16:4c:74:ea:
b6:df:67:a8:53:e5:9c:ed:3c:06:86:58:3b:be:bd:
e2:e2:7a:90:bd:bc:48:16:a4:b6:4d:7a:78:37:93:
a1:d0:01:4a:c3:d6:d7:ce:9f:31:90:68:21:33:73:
1d:ef:a2:bd:08:22:96:86:22:a3:74:7c:cc:ed:27:
22:1c:cb:74:f5:bd:b9:10:01:3b:c2:c4:3b:0d:1b:
c0:ab:78:00:a5:7e:a0:d6:14:d5:ab:f4:4d:52:2c:
11:ba:6b:9f:fc:78:a0:1b:cd:52:82:8d:33:8e:d2:
46:a8:78:08:43:42:df:0a:a2:f5:b3:c8:76:a6:dd:
62:6f:33:b3:5f:51:0f:f7:e8:6f:51:a5:42:7f:7d:
a2:83:2a:7c:c4:73:73:f1:49:df:84:f6:ae:cb:9d:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:F3:A0:05:69:25:B0:00:A0:29:A6:F6:35:30:4E:D0:66:0F:C0
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9f:e5:be:ca:92:8b:ad:fd:f1:a7:7f:83:f5:60:fc:3c:be:
05:75:49:d5:55:57:b0:e0:28:33:a2:fb:60:73:53:7d:07:29:
31:67:dd:43:64:34:e1:fc:ac:2c:ce:d2:76:8c:30:a7:f1:67:
02:7a:b3:38:8c:0f:0e:a2:b8:67:b9:7c:ef:8e:60:25:93:93:
43:f5:4e:27:09:8e:63:1e:b9:65:79:5b:4e:16:c7:76:89:56:
a8:58:a4:55:ca:02:61:f6:af:f0:35:1b:fb:44:e5:60:b2:ed:
9a:4e:9d:79:5e:a8:04:08:39:2b:6e:48:a7:9f:38:48:d3:17:
1c:8f:36:9e:61:f6:f0:59:dd:87:4c:ee:83:5f:ef:cc:77:fb:
88:5e:36:4d:0e:a0:a6:b8:bd:74:cf:d6:dd:61:bb:67:35:1b:
4a:8a:2c:bd:70:a0:c1:15:68:a4:1b:49:f8:3c:5b:ac:b7:32:
fd:16:b7:18:fa:86:cf:63:cc:0d:d3:1f:3b:da:b3:72:57:6d:
8d:61:c8:a8:75:f2:ff:06:33:b5:80:60:b1:30:c2:0d:a7:2e:
f5:7d:4c:9b:7d:89:97:23:8b:37:6b:45:c5:75:c4:a8:fd:22:
51:0a:fe:83:52:84:4c:88:c1:39:ea:de:1b:34:df:95:f5:13:
00:0f:99:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+RnyQVdB4d8k8qsDbjsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDA0N2RhYzhlZWY4OTQ0ZDc4YzFiN2EyNjg2OGMwM2Uy
Y2U0NjYwHhcNMjYwNjMwMTAwMDI4WhcNMjYwNzAxMTAwMDI4WjAzMTEwLwYDVQQD
Eyg0NThlZjNhMDA1NjkyNWIwMDBhMDI5YTZmNjM1MzA0ZWQwNjYwZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0OhedgASQ8XcDOR6Ha23eACwi6
cvm8kj50zs/J0mya2QTOE9Uz1C/hgzTnrNMTPa1cjbFGkl6lnnSVJjeypI5bAnFO
aarYaYh37KCYKwLQptkYT6C6jPYe0RSN34ccJOlWuxZMdOq232eoU+Wc7TwGhlg7
vr3i4nqQvbxIFqS2TXp4N5Oh0AFKw9bXzp8xkGghM3Md76K9CCKWhiKjdHzM7Sci
HMt09b25EAE7wsQ7DRvAq3gApX6g1hTVq/RNUiwRumuf/HigG81Sgo0zjtJGqHgI
Q0LfCqL1s8h2pt1ibzOzX1EP9+hvUaVCf32igyp8xHNz8UnfhPauy51PeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWO86AFaSWwAKAppvY1ME7QZg/AMB8GA1UdIwQY
MBaAFNoAR9rI7viUTXjBt6JoaMA+LORmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEt
YWM5YzhhNTBmMjRlLzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83Nzk1OWEtNDFkZS00NmJlLWE1ZjEtYWM5YzhhNTBmMjRl
LzEvMmdCSDJzanUtSlJOZU1HM29taG93RDRzNUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp/lvsqS
i6398ad/g/Vg/Dy+BXVJ1VVXsOAoM6L7YHNTfQcpMWfdQ2Q04fysLM7Sdowwp/Fn
AnqzOIwPDqK4Z7l8745gJZOTQ/VOJwmOYx65ZXlbThbHdolWqFikVcoCYfav8DUb
+0TlYLLtmk6deV6oBAg5K25Ip584SNMXHI82nmH28Fndh0zug1/vzHf7iF42TQ6g
pri9dM/W3WG7ZzUbSoosvXCgwRVopBtJ+DxbrLcy/Ra3GPqGz2PMDdMfO9qzcldt
jWHIqHXy/wYztYBgsTDCDacu9X1Mm32JlyOLN2tFxXXEqP0iUQr+g1KETIjBOere
GzTflfUTAA+ZUw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:24 2026 by rpki-client