Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: S1G87BNjxuWDi+OR3KuSprq8IeioCG2gagkwfAWzMOM=
Subject key identifier: B1:64:3D:EB:DB:14:E9:7A:9A:95:0A:70:BF:08:23:3F:5A:F5:4A:10
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 01A13E5D225FF72BBC12E72DF0296C48B479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 07:00:53 +0000
Manifest this update: Thu 15 Oct 2026 07:00:53 +0000
Manifest next update: Fri 16 Oct 2026 07:00:53 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: OVq6+mDhh0GCfK2qxsmj7TDy3eGOevVZhz2nFTI+Xx8=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:22:5f:f7:2b:bc:12:e7:2d:f0:29:6c:48:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Oct 15 07:00:53 2026 GMT
Not After : Oct 16 07:00:53 2026 GMT
Subject: CN=b1643debdb14e97a9a950a70bf08233f5af54a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:0d:5f:03:c7:0d:23:1d:dd:d2:f6:01:1c:
10:59:73:89:b3:f6:fc:dd:b6:e1:16:5b:97:d8:ec:
39:89:26:5b:3d:83:54:ce:da:71:27:df:10:04:5b:
3f:06:19:48:50:b4:0a:05:0a:fc:80:ce:e5:68:c4:
2e:00:ba:c3:51:d5:cc:9b:c4:b4:4a:6d:8d:9d:bb:
8d:38:5e:12:a4:b5:aa:d6:89:23:54:9b:5a:65:e5:
7a:af:88:19:cb:d3:34:80:26:aa:15:dc:a4:6f:c2:
1d:08:0b:2d:0c:83:5c:aa:fc:a7:11:03:e7:0e:14:
35:11:4b:0e:b3:b7:6c:b9:3d:3e:d7:83:f6:b5:7e:
db:2c:0a:45:ac:a4:d8:05:b3:f2:e1:ae:e2:6d:26:
0e:ec:c8:16:cb:31:c4:e2:ef:7b:a1:07:02:f7:f1:
8c:07:50:a5:11:5f:b5:17:d5:20:a6:cc:ff:61:16:
46:6b:6e:ef:30:75:6c:c8:87:0f:f2:d2:5e:13:0e:
97:81:7b:6a:71:de:76:c4:4b:af:af:67:d9:b7:44:
02:88:36:3a:05:51:b9:85:3f:94:e9:3e:5e:bb:97:
66:6f:c3:47:92:41:6d:89:b5:c6:93:f2:3a:f3:cd:
9e:66:cf:d9:68:cf:0a:44:c0:14:27:da:2e:cf:be:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:3D:EB:DB:14:E9:7A:9A:95:0A:70:BF:08:23:3F:5A:F5:4A:10
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9c:69:e1:f9:b4:2f:1c:28:e6:04:22:fb:00:1f:9f:e6:d0:
80:89:73:32:fb:3c:ff:86:00:7e:25:13:23:a9:87:82:46:aa:
2d:68:27:21:ad:81:2a:13:6b:06:33:fc:38:d1:3b:30:01:7f:
aa:31:c7:40:dc:b1:c7:00:34:a8:3e:22:72:56:2f:10:be:d9:
98:6c:b4:f5:c8:ca:71:e2:17:24:11:0f:03:f7:06:5d:dc:90:
fe:76:bc:3f:92:09:00:f6:f4:eb:53:ea:b9:6f:f3:3b:75:b9:
47:1f:9f:ce:1f:ad:bc:3b:9f:d7:69:32:df:b8:b0:d9:09:0f:
27:6c:42:ed:58:82:9a:e7:39:50:b7:03:a7:bb:63:3d:d4:09:
e5:07:e7:fb:e2:63:17:61:e1:ec:63:49:9d:ce:31:6e:6b:34:
3e:8e:19:74:ff:27:d5:88:88:26:aa:5e:72:24:05:99:76:b9:
69:fe:01:ec:c2:7a:b1:a7:b6:57:ee:83:8e:fe:ac:a9:39:c1:
52:f8:54:83:0d:0d:56:b6:b8:5a:b2:6b:f0:a8:5d:b8:26:25:
4d:d4:5f:85:53:10:17:1e:7d:40:29:d1:13:04:e2:89:10:2f:
dc:d1:d8:91:9d:fb:c6:03:95:b7:4a:c0:7b:f7:86:d7:ab:26:
09:60:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:25:06 2026 by rpki-client