Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: L9QLVXehey1MRtX/yvoBrRnaZupSHECdLtLJgNNQbGc=
Subject key identifier: 4D:D8:F5:8B:83:66:10:C2:43:EB:D2:66:63:D3:7F:E8:11:A3:4E:F0
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A17E18730FBC1D1EDAA3A6BBF8B0CC1091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0826
Signing time: Tue 27 Oct 2026 16:01:33 +0000
Manifest this update: Tue 27 Oct 2026 16:01:33 +0000
Manifest next update: Wed 28 Oct 2026 16:01:33 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: IT0K6y2xNTerdRrM1fP+zAzV+y0IyG7CZgnav5wnPUw=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:73:0f:bc:1d:1e:da:a3:a6:bb:f8:b0:cc:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Oct 27 16:01:33 2026 GMT
Not After : Oct 28 16:01:33 2026 GMT
Subject: CN=4dd8f58b836610c243ebd26663d37fe811a34ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:4d:03:9c:73:fe:8e:0b:24:3b:e7:dd:69:
12:a9:b5:eb:b5:7b:df:8e:02:65:6e:ae:68:5c:df:
ea:cf:03:46:9b:ed:ee:54:b2:78:ed:f9:f4:3e:fe:
bb:c8:25:a3:df:59:fd:b2:b1:57:f8:eb:2d:8a:30:
d6:f9:ba:a6:7c:6e:19:5d:08:82:62:21:6e:94:90:
60:24:71:27:ba:a7:fa:2f:85:f7:fd:3f:0f:b8:68:
ce:df:2d:94:e3:24:bf:f0:dd:c6:29:d1:22:7f:20:
4d:39:0a:ed:57:d8:72:a3:28:73:55:6a:64:5f:27:
e6:75:50:8f:27:da:3e:48:c6:27:31:67:77:d7:f8:
88:e1:6f:1d:6a:19:72:db:c6:fd:bb:fd:11:c6:f7:
41:aa:b5:d3:72:f5:94:0d:6e:99:5e:5a:c3:35:5e:
2a:23:f9:98:0b:b8:f4:1c:c3:79:fc:e8:d3:59:6f:
9d:ba:8c:80:12:be:f1:be:3d:70:d6:4c:27:a9:b3:
80:64:7a:90:fe:01:fe:05:ae:07:bf:2c:da:bb:41:
7e:b1:dc:37:1c:67:7d:36:a6:88:6b:e6:b5:3d:d1:
31:6a:50:47:ce:45:70:b4:c3:d9:2f:10:98:8f:80:
85:32:34:1e:fa:d8:fa:b8:e7:df:d3:35:6a:ff:f9:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D8:F5:8B:83:66:10:C2:43:EB:D2:66:63:D3:7F:E8:11:A3:4E:F0
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e6:d1:37:2a:04:9c:e7:92:0a:6b:16:f2:c3:d9:e6:06:46:
7b:e2:0b:79:3b:5b:9b:76:e6:21:6a:06:97:82:ca:5f:05:62:
85:93:1f:da:e5:68:62:e3:b9:f6:9e:63:e5:ed:02:18:56:62:
a2:9f:03:76:56:3d:0d:0f:12:40:6a:aa:86:d5:90:43:cf:1a:
98:e5:96:68:7c:a5:d6:b2:b3:1b:5e:b8:5b:4b:ee:ea:e9:14:
e5:75:71:47:c2:3d:10:26:d9:44:bc:a6:99:7c:9e:df:a6:76:
b5:c9:12:92:da:34:79:5f:2c:ed:cc:41:ff:ce:58:1a:d9:6f:
4c:41:b6:21:40:06:2f:74:b9:4e:db:34:44:95:8e:1f:c2:c9:
ff:bf:97:96:98:ad:2b:b3:73:6d:c9:16:56:77:71:0f:c5:81:
60:87:20:0e:2f:db:a4:82:37:bf:db:82:97:57:07:cf:19:5a:
bb:0e:d3:48:b8:11:75:ef:41:e4:7e:15:00:38:83:3e:5b:8c:
0e:99:b6:f6:00:ae:2c:85:32:0c:0f:b4:3b:06:bc:8b:fc:b2:
98:5f:5a:9b:0c:2b:bb:ce:c7:32:7e:fa:ca:d0:78:3f:d8:d2:
8c:99:92:1c:68:6d:f5:3d:42:e7:a9:9e:13:21:18:60:4a:71:
2b:bf:55:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+GHMPvB0e2qOmu/iwzBCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz
NmZkZGIwHhcNMjYxMDI3MTYwMTMzWhcNMjYxMDI4MTYwMTMzWjAzMTEwLwYDVQQD
Eyg0ZGQ4ZjU4YjgzNjYxMGMyNDNlYmQyNjY2M2QzN2ZlODExYTM0ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNZNA5xz/o4LJDvn3WkSqbXrtXvf
jgJlbq5oXN/qzwNGm+3uVLJ47fn0Pv67yCWj31n9srFX+OstijDW+bqmfG4ZXQiC
YiFulJBgJHEnuqf6L4X3/T8PuGjO3y2U4yS/8N3GKdEifyBNOQrtV9hyoyhzVWpk
XyfmdVCPJ9o+SMYnMWd31/iI4W8dahly28b9u/0RxvdBqrXTcvWUDW6ZXlrDNV4q
I/mYC7j0HMN5/OjTWW+duoyAEr7xvj1w1kwnqbOAZHqQ/gH+Ba4Hvyzau0F+sdw3
HGd9NqaIa+a1PdExalBHzkVwtMPZLxCYj4CFMjQe+tj6uOff0zVq//mBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3Y9YuDZhDCQ+vSZmPTf+gRo07wMB8GA1UdIwQY
MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt
YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5
LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+bRNyoE
nOeSCmsW8sPZ5gZGe+ILeTtbm3bmIWoGl4LKXwVihZMf2uVoYuO59p5j5e0CGFZi
op8DdlY9DQ8SQGqqhtWQQ88amOWWaHyl1rKzG164W0vu6ukU5XVxR8I9ECbZRLym
mXye36Z2tckSkto0eV8s7cxB/85YGtlvTEG2IUAGL3S5Tts0RJWOH8LJ/7+Xlpit
K7NzbckWVndxD8WBYIcgDi/bpII3v9uCl1cHzxlauw7TSLgRde9B5H4VADiDPluM
Dpm29gCuLIUyDA+0Owa8i/yymF9amwwru87HMn76ytB4P9jSjJmSHGht9T1C56me
EyEYYEpxK79Vuw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:00:40 2026 by rpki-client