Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: g3KpTPDOqMhM9u43dbFbD3sSmXTtcDVBgkbqKEVgd5E=
Subject key identifier: 93:47:D5:61:A9:B3:C1:4A:58:F1:1C:6B:B7:E4:E5:80:A5:DB:E3:3F
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 01A08CB1930A360BAAB58E9C6A72E5A2FBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 07A9
Signing time: Thu 10 Sep 2026 19:00:42 +0000
Manifest this update: Thu 10 Sep 2026 19:00:42 +0000
Manifest next update: Fri 11 Sep 2026 19:00:42 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: EQ61jNU82JpcVpwFjq2Qa5SgyrsnV7WxSB93dwiz9ZQ=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:93:0a:36:0b:aa:b5:8e:9c:6a:72:e5:a2:fb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Sep 10 19:00:42 2026 GMT
Not After : Sep 11 19:00:42 2026 GMT
Subject: CN=9347d561a9b3c14a58f11c6bb7e4e580a5dbe33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:af:b5:63:c9:d3:ab:d0:89:28:38:28:dd:
a2:be:07:af:76:d2:fc:0c:4d:8f:2a:0e:8d:99:24:
18:ea:50:db:be:1a:f9:a5:c4:a1:71:1a:85:1a:ac:
4a:70:ac:af:2b:55:a4:16:6d:05:0a:96:23:e6:f2:
9a:76:c3:16:5f:4c:96:d5:4d:e3:da:ee:84:eb:7b:
19:38:81:45:74:13:05:b0:1b:c0:7e:e3:83:17:79:
60:6d:ba:96:ef:a0:f4:86:b3:9e:7e:c5:35:92:c2:
bf:9a:02:c9:b7:62:d6:3d:56:e6:aa:f0:f1:19:a9:
f0:d8:da:67:a4:c0:2f:b8:36:f9:ac:7f:f3:ad:15:
c5:60:47:36:83:81:52:72:37:b9:d0:ed:d0:9a:cc:
76:8e:e8:11:78:a3:fa:69:58:f7:68:a7:81:6e:18:
8c:60:7a:ec:f1:a2:f0:32:1f:c1:bb:26:76:a9:12:
67:85:bb:e6:c3:92:c3:9c:aa:d7:ee:71:95:eb:1a:
5e:72:9c:3e:46:c0:fc:94:84:a8:aa:e9:fe:7d:23:
a5:aa:8c:82:21:d9:ee:74:32:a3:23:2e:9f:26:fe:
26:83:a8:33:b9:af:95:f3:3f:ab:fb:d5:a6:57:5e:
f1:b5:0c:ad:4f:f2:21:05:4a:e8:90:5b:e0:4f:67:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:D5:61:A9:B3:C1:4A:58:F1:1C:6B:B7:E4:E5:80:A5:DB:E3:3F
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:b2:12:67:f4:b3:0b:7c:fc:6a:66:c2:be:20:ff:64:82:
ea:80:a8:9f:97:de:26:6a:8b:76:bb:d2:95:aa:36:aa:2c:d9:
8f:01:a5:9a:fc:d3:ed:20:d7:58:47:e8:6b:1e:73:97:ca:cc:
b7:05:9f:27:15:9c:58:d6:04:94:e5:11:3d:79:a9:57:b8:18:
4c:2d:e4:9f:fb:3e:49:2d:e9:ea:b6:35:7e:69:cc:ff:02:4b:
28:6e:85:49:fd:29:cc:e0:33:9d:fd:3d:98:0c:0c:3d:68:af:
b2:89:e4:58:91:75:91:1e:b7:fc:1b:27:b5:9d:10:2c:26:0f:
24:0d:04:dd:b7:c8:d9:4f:f2:a8:0d:ab:e9:9e:d4:cb:41:ed:
50:d7:0c:cf:24:f1:a6:da:88:77:30:a4:5d:96:dc:89:41:9f:
01:4a:a8:32:1e:2c:8d:9b:93:37:2b:f8:56:0f:ec:1f:67:12:
09:17:d4:a6:6d:b4:38:d5:5a:20:82:cd:44:62:9a:48:58:f3:
ff:4e:82:bb:73:d9:85:b3:83:a5:39:ae:ac:fa:7b:c7:19:03:
cd:e4:8c:ca:54:91:3a:55:a6:75:ca:40:7f:4b:b7:8b:2c:52:
14:9a:46:a5:ed:c8:fc:4c:13:8b:c4:14:cc:29:82:45:18:39:
da:71:2d:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsZMKNguqtY6canLlovu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NmI5YzE3NzhhMDUyOWVlN2UyMzIwMDNjYmU1Yzk5M2Mz
NmZkZGIwHhcNMjYwOTEwMTkwMDQyWhcNMjYwOTExMTkwMDQyWjAzMTEwLwYDVQQD
Eyg5MzQ3ZDU2MWE5YjNjMTRhNThmMTFjNmJiN2U0ZTU4MGE1ZGJlMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzemvtWPJ06vQiSg4KN2ivgevdtL8
DE2PKg6NmSQY6lDbvhr5pcShcRqFGqxKcKyvK1WkFm0FCpYj5vKadsMWX0yW1U3j
2u6E63sZOIFFdBMFsBvAfuODF3lgbbqW76D0hrOefsU1ksK/mgLJt2LWPVbmqvDx
Ganw2NpnpMAvuDb5rH/zrRXFYEc2g4FScje50O3Qmsx2jugReKP6aVj3aKeBbhiM
YHrs8aLwMh/BuyZ2qRJnhbvmw5LDnKrX7nGV6xpecpw+RsD8lISoqun+fSOlqoyC
IdnudDKjIy6fJv4mg6gzua+V8z+r+9WmV17xtQytT/IhBUrokFvgT2e89wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNH1WGps8FKWPEca7fk5YCl2+M/MB8GA1UdIwQY
MBaAFNhrnBd4oFKe5+IyADy+XJk8Nv3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQt
YTgwYTk1ZTVhMDk5LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85NzBmOWEtOTQ4MC00ZmRkLWE0ZjQtYTgwYTk1ZTVhMDk5
LzEvMkd1Y0YzaWdVcDduNGpJQVBMNWNtVHcyX2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZiyEmf0
swt8/Gpmwr4g/2SC6oCon5feJmqLdrvSlao2qizZjwGlmvzT7SDXWEfoax5zl8rM
twWfJxWcWNYElOURPXmpV7gYTC3kn/s+SS3p6rY1fmnM/wJLKG6FSf0pzOAznf09
mAwMPWivsonkWJF1kR63/BsntZ0QLCYPJA0E3bfI2U/yqA2r6Z7Uy0HtUNcMzyTx
ptqIdzCkXZbciUGfAUqoMh4sjZuTNyv4Vg/sH2cSCRfUpm20ONVaIILNRGKaSFjz
/06Cu3PZhbODpTmurPp7xxkDzeSMylSROlWmdcpAf0u3iyxSFJpGpe3I/EwTi8QU
zCmCRRg52nEtQA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:14:27 2026 by rpki-client