Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: Mx6AvFyoIOv6yxGh96Uce5ZpjjBRNVf/B9kUOC7DI4g=
Subject key identifier: 8F:75:6C:8A:57:A1:64:6A:94:2B:76:1F:DA:9C:DF:2D:20:11:07:41
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A17C295EDA820DFB05CE031BEDBE1147D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0825
Signing time: Tue 27 Oct 2026 07:00:48 +0000
Manifest this update: Tue 27 Oct 2026 07:00:48 +0000
Manifest next update: Wed 28 Oct 2026 07:00:48 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: v9LzIjEYd6X/NwLV1m34BiTPCtjUr2Wz1SaVMPv3mqA=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:5e:da:82:0d:fb:05:ce:03:1b:ed:be:11:47:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Oct 27 07:00:48 2026 GMT
Not After : Oct 28 07:00:48 2026 GMT
Subject: CN=8f756c8a57a1646a942b761fda9cdf2d20110741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:a5:dc:5b:7c:68:78:f6:92:b0:87:1a:1c:
a9:89:9e:b8:f7:1f:66:fe:2f:4f:55:0d:12:c6:6d:
50:a2:f6:5d:31:26:8c:b5:c1:2a:77:35:8e:f1:a3:
c1:f9:3c:b4:48:3f:6b:83:83:41:79:76:85:a8:80:
0a:2a:e2:b2:93:e6:a2:a8:25:f2:d3:8f:ef:44:d8:
02:88:be:4b:95:d5:8b:13:70:c7:47:85:53:e7:a2:
4b:f8:33:6e:27:9a:83:6e:d8:9d:85:63:90:d9:d2:
d7:2b:29:97:cf:2c:df:b0:b2:bf:11:ed:5b:fb:a8:
a2:fc:7d:40:4f:77:4b:6d:ac:57:bf:fa:91:e6:3d:
db:ba:6c:89:9c:ee:e8:47:aa:06:cd:13:13:52:0e:
40:df:8a:ba:0d:96:0b:90:17:45:c4:93:d7:05:35:
c6:e1:be:f0:88:9a:9a:18:d5:e2:cb:f9:0f:55:d5:
65:7d:42:8f:de:3e:43:a1:27:73:b7:82:4f:7d:79:
7d:c4:3a:23:d4:f2:7b:1e:12:1a:95:2d:8c:6c:1b:
a7:aa:c3:eb:f3:31:35:90:dc:1f:69:5f:5f:00:06:
d4:e4:10:a9:17:e4:a2:1a:53:33:00:6e:88:5e:6c:
87:ff:ae:4c:2a:b2:15:ce:7e:66:46:e3:14:17:a1:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:6C:8A:57:A1:64:6A:94:2B:76:1F:DA:9C:DF:2D:20:11:07:41
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ab:d0:f0:c0:32:63:e8:14:ad:1d:28:08:f2:2b:64:c0:83:
65:a1:32:b4:eb:d0:88:91:f7:a3:c0:76:9c:e8:c9:26:0c:7e:
f6:55:0a:4c:89:24:36:20:9d:b6:85:46:85:31:41:6d:fa:f9:
bd:67:65:69:2f:c1:9c:cc:10:5c:64:2c:dc:03:5f:f5:62:7b:
c2:ec:37:b2:cb:95:03:72:01:92:ff:ab:f0:a0:e7:4c:62:c8:
ae:fc:48:90:38:98:b4:0d:5a:54:03:ae:79:22:9a:ea:68:52:
ac:9c:23:7b:25:6d:20:cf:fb:c7:9f:9c:6d:5f:e3:af:df:0a:
28:66:f5:01:f5:10:1b:c5:78:b7:81:07:44:e4:a5:92:ea:ba:
ce:43:d2:5f:4a:43:50:ec:80:14:13:e5:3a:6a:d0:e0:52:02:
79:07:49:2e:da:5d:4f:6f:7d:c9:8b:b3:11:5b:85:08:0d:0c:
a6:ce:78:af:16:b5:25:46:b9:95:c3:ce:23:27:00:95:aa:c6:
34:42:d2:23:f2:d5:d7:d9:f6:6d:ef:68:27:17:55:da:f0:e8:
c1:09:ce:97:c1:be:b7:62:c1:3a:de:8b:5d:86:86:d2:9e:35:
37:a1:18:ba:ab:69:48:68:ec:6c:98:87:86:de:18:90:e2:3d:
98:e5:65:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KV7agg37Bc4DG+2+EUfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz
NmZkZGIwHhcNMjYxMDI3MDcwMDQ4WhcNMjYxMDI4MDcwMDQ4WjAzMTEwLwYDVQQD
Eyg4Zjc1NmM4YTU3YTE2NDZhOTQyYjc2MWZkYTljZGYyZDIwMTEwNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWel3Ft8aHj2krCHGhypiZ649x9m
/i9PVQ0Sxm1QovZdMSaMtcEqdzWO8aPB+Ty0SD9rg4NBeXaFqIAKKuKyk+aiqCXy
04/vRNgCiL5LldWLE3DHR4VT56JL+DNuJ5qDbtidhWOQ2dLXKymXzyzfsLK/Ee1b
+6ii/H1AT3dLbaxXv/qR5j3bumyJnO7oR6oGzRMTUg5A34q6DZYLkBdFxJPXBTXG
4b7wiJqaGNXiy/kPVdVlfUKP3j5DoSdzt4JPfXl9xDoj1PJ7HhIalS2MbBunqsPr
8zE1kNwfaV9fAAbU5BCpF+SiGlMzAG6IXmyH/65MKrIVzn5mRuMUF6FC/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI91bIpXoWRqlCt2H9qc3y0gEQdBMB8GA1UdIwQY
MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt
YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5
LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIavQ8MAy
Y+gUrR0oCPIrZMCDZaEytOvQiJH3o8B2nOjJJgx+9lUKTIkkNiCdtoVGhTFBbfr5
vWdlaS/BnMwQXGQs3ANf9WJ7wuw3ssuVA3IBkv+r8KDnTGLIrvxIkDiYtA1aVAOu
eSKa6mhSrJwjeyVtIM/7x5+cbV/jr98KKGb1AfUQG8V4t4EHROSlkuq6zkPSX0pD
UOyAFBPlOmrQ4FICeQdJLtpdT299yYuzEVuFCA0Mps54rxa1JUa5lcPOIycAlarG
NELSI/LV19n2be9oJxdV2vDowQnOl8G+t2LBOt6LXYaG0p41N6EYuqtpSGjsbJiH
ht4YkOI9mOVlLw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:32:08 2026 by rpki-client