Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: rqkn9tYpJaGjhF+elzUYP73wj8XiI/gG8a8yn1MgYkU=
Subject key identifier: D6:B5:76:95:E4:6F:1C:F5:B6:3E:B4:96:C5:76:BF:6A:93:A6:EE:3F
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019DD19A5DFD9ECA88A720BD65C62BA33B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 063F
Signing time: Tue 28 Apr 2026 01:00:47 +0000
Manifest this update: Tue 28 Apr 2026 01:00:47 +0000
Manifest next update: Wed 29 Apr 2026 01:00:47 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: 4gFwvjCfir8hKqHNcQVHCdEJXMPfiXhQ3FHOxfljkc8=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:5d:fd:9e:ca:88:a7:20:bd:65:c6:2b:a3:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Apr 28 01:00:47 2026 GMT
Not After : Apr 29 01:00:47 2026 GMT
Subject: CN=d6b57695e46f1cf5b63eb496c576bf6a93a6ee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:c7:f1:c9:77:43:4d:5d:5a:53:bb:b5:5d:
b3:2e:1b:8c:ae:72:17:56:17:0a:0f:f9:11:d8:04:
2f:b9:95:21:ca:67:4f:63:22:03:e7:75:ca:37:0f:
f7:85:af:83:9a:15:3b:8c:f9:f3:77:23:df:88:04:
44:29:3a:c2:e2:50:60:de:49:1f:8f:22:c3:87:66:
6f:5f:9d:8f:12:7d:cd:4c:4f:0a:73:b2:b6:9b:da:
8f:9a:53:79:6e:0e:83:5b:6c:89:48:dd:36:51:42:
43:29:f4:4d:be:1c:d0:98:7b:60:9f:da:24:6d:ac:
25:ea:8a:cd:ab:ed:7e:55:4e:55:df:4a:62:ca:a4:
8d:37:7a:64:d6:c5:f6:1f:3f:c4:48:4d:3e:e7:d1:
dd:19:9f:03:e4:66:35:92:e5:d7:c2:50:ca:bc:75:
09:eb:a3:17:79:d6:8c:84:e0:cc:ad:f5:11:54:e6:
4c:15:9b:e4:1c:6e:fa:4a:be:3a:ea:fe:bb:1d:07:
f9:ec:1e:51:34:e8:55:54:c4:e3:3c:4b:ec:25:5f:
fb:80:da:86:9a:d7:b7:d2:ad:eb:e5:58:ff:b5:04:
de:70:e1:e8:0a:10:48:2a:4b:03:4d:78:50:0f:8c:
12:90:b4:00:6a:5b:0b:a0:d1:21:66:ec:1d:3d:d4:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B5:76:95:E4:6F:1C:F5:B6:3E:B4:96:C5:76:BF:6A:93:A6:EE:3F
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:75:04:38:11:e8:4e:05:78:17:c5:f6:69:62:70:c4:6b:
8e:19:8e:ff:ca:0e:61:4e:40:ed:47:fd:a6:bb:c7:fb:3c:62:
0d:4c:03:69:82:2a:95:2b:33:cd:7b:66:19:f8:80:92:ed:3c:
eb:a1:de:ef:43:4d:b5:d5:4e:d4:e6:1b:d9:50:ac:90:48:1b:
d4:10:ec:f4:60:de:c5:c2:9c:6a:d0:2c:57:7b:59:44:e6:ff:
0e:f6:7a:60:ac:87:4d:10:12:d6:86:b9:dc:a9:2c:aa:d8:d2:
2b:a5:28:d2:33:be:fe:9d:6d:e6:2b:04:ef:ae:23:1d:3c:c3:
18:0a:e3:89:4e:25:03:36:81:33:46:aa:be:a5:7e:b6:03:a6:
f3:d7:65:4c:a9:ef:38:72:7b:d5:82:ea:ff:4a:aa:2b:97:26:
c6:80:e6:21:6f:de:5f:66:53:b7:45:12:fe:29:99:ed:87:01:
3f:a6:d3:ce:51:8d:27:79:55:18:fb:c8:c9:e0:5b:97:07:c7:
a6:6c:71:02:2b:90:66:eb:ca:2f:e3:ae:ab:25:fe:a6:0b:42:
cb:89:ac:b4:5c:63:96:41:9c:3b:36:fe:c2:be:58:d2:45:7b:
ad:41:6b:af:2f:3d:c9:67:a4:24:aa:44:0b:f1:29:20:6d:60:
44:e3:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:21:31 2026 by rpki-client