Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: DAhw8vtC++6x+XlVHWI6iRiT2MhHuGCpBfUQdRbVI/w=
Subject key identifier: 58:6D:E7:8A:E7:C8:9C:1B:D5:20:0C:12:35:29:3D:4F:72:CD:6B:0B
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019D371BD1B1A6C1993FAC0FC5FB8DAA41E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:01:02 +0000
Manifest this update: Sun 29 Mar 2026 01:01:02 +0000
Manifest next update: Mon 30 Mar 2026 01:01:02 +0000
Files and hashes: 1: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: G3hXHv8jSmxrUWxjj0k2rfgUljhE+l+HkmGofQrCRsU=)
2: xxmUvxGlUTZYlS1fzfDsE1LRkDY.roa (hash: LHuMkoFuyABxZJIkd6bMQ80Etxt39qZubcGAijE5D7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d1:b1:a6:c1:99:3f:ac:0f:c5:fb:8d:aa:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Mar 29 01:01:02 2026 GMT
Not After : Mar 30 01:01:02 2026 GMT
Subject: CN=586de78ae7c89c1bd5200c1235293d4f72cd6b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:e4:6d:b9:72:23:21:32:f0:13:57:c3:c5:
38:6a:cb:68:28:4e:98:ff:e7:ed:9c:cf:3d:23:26:
14:96:33:3c:c2:ab:48:5e:91:7f:50:1d:2f:7e:f0:
5d:11:59:64:4c:9e:d1:90:7c:4c:59:d7:52:97:a1:
77:1b:07:5c:00:9f:53:61:20:f4:1b:49:d8:78:24:
79:ef:fa:99:4f:8d:e1:e5:e3:a8:20:3a:cc:5a:dd:
9d:96:c9:14:b7:fd:00:e4:67:93:8c:f5:8b:8a:06:
92:3c:61:2f:c5:f0:c5:77:f0:ef:b1:dc:0c:e1:e3:
fc:3b:90:8b:98:40:05:4a:a4:16:44:63:6a:89:25:
4f:1b:1a:67:81:67:33:1d:b4:59:03:5b:e0:06:39:
9b:7a:97:4b:d0:64:14:16:f1:9b:38:43:27:9c:d6:
74:f0:20:db:c2:ee:03:c0:39:c4:bd:2b:13:90:0f:
c9:4a:57:2f:1f:d2:38:55:12:16:ef:11:0e:a7:1c:
bb:58:4f:57:67:a9:59:54:ee:fa:ca:96:0e:e0:c4:
44:ed:ca:55:df:c1:84:df:82:4b:19:6a:19:47:2a:
f0:f9:9a:c1:0d:ca:ab:d1:87:f6:a8:75:8d:d1:3f:
79:41:11:97:e2:c7:ed:4d:51:28:30:7d:c3:8c:75:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:E7:8A:E7:C8:9C:1B:D5:20:0C:12:35:29:3D:4F:72:CD:6B:0B
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8e:9c:2a:82:fc:de:25:eb:d3:28:80:1b:6b:99:76:81:b5:
c3:f1:84:6d:3a:de:da:44:f4:58:5b:1a:c2:08:3d:49:8c:df:
8d:e4:ad:14:73:8f:0d:00:68:ae:46:01:26:1f:6e:43:e5:a8:
54:9b:f8:b0:f7:35:ce:61:5e:47:5d:e9:29:de:4c:d4:84:0c:
50:62:6e:d3:ae:f8:e3:c8:e8:5b:76:ea:a8:ec:66:36:33:b4:
8d:68:ec:81:2e:e1:bc:40:c2:c9:ad:9c:54:28:38:4f:82:86:
98:05:8e:7e:53:e6:c0:38:cd:1d:88:06:f1:34:b1:4d:ed:09:
3f:d5:a7:0e:eb:75:58:3a:20:7d:16:88:4a:29:db:80:a8:ca:
78:cf:58:09:4a:31:d1:72:17:14:b2:95:77:bb:85:d9:af:64:
d8:21:82:12:35:6e:ae:f0:02:3c:56:2d:1d:c4:9a:b5:7d:f5:
c2:50:ef:4f:d1:b9:ca:e3:af:7b:1d:c1:22:86:98:20:3d:37:
6c:9c:d4:04:f1:d2:37:9a:0a:79:3d:fa:87:83:ec:d0:4c:1f:
89:1e:d3:79:5e:38:5e:8a:18:ad:33:c3:45:79:5a:49:05:9a:
a4:29:9b:41:3e:39:3d:ea:7b:8a:87:b9:4e:67:04:8b:b0:e1:
93:d3:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:17 2026 by rpki-client