Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: ZSeeCi0L2qNrDDUt0pjyQQrE3Wrtb1rz/goXOb2OTBE=
Subject key identifier: 87:8A:76:08:FF:80:5B:46:99:05:EF:27:B5:11:4B:4D:7D:3A:0C:FC
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019FA304DFDE85F54804829414BCA3095D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0730
Signing time: Mon 27 Jul 2026 10:00:33 +0000
Manifest this update: Mon 27 Jul 2026 10:00:33 +0000
Manifest next update: Tue 28 Jul 2026 10:00:33 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: HAcxhyXUXTaRzPPuMJZsI4xp10+6Klur2sPoxBEInIQ=)
2: so3uet9HxmTT1e6-Xaeu7Xu47R4.roa (hash: YS3OlsV7nqbX92XpohfbsDi48e2F2cYz3EHfcdxmOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:df:de:85:f5:48:04:82:94:14:bc:a3:09:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Jul 27 10:00:33 2026 GMT
Not After : Jul 28 10:00:33 2026 GMT
Subject: CN=878a7608ff805b469905ef27b5114b4d7d3a0cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:9e:8a:9f:28:99:ee:71:5a:4c:71:c4:bc:
5c:d7:f7:60:01:04:1e:3f:a9:5e:a8:47:dc:ef:be:
d8:a9:ef:e4:3e:e5:a4:08:01:a8:e5:3c:da:1b:05:
5b:43:1c:ee:1b:33:11:7b:9e:7c:27:78:f0:a5:b1:
a3:26:26:8c:a0:70:79:42:1a:3b:67:48:7a:d1:d2:
68:75:75:3b:32:14:80:ec:4a:54:d7:f6:22:89:f6:
7a:2a:3e:b3:12:22:59:2a:58:41:be:59:3c:ac:ee:
92:a7:79:7c:72:d4:5d:5f:63:13:31:fb:9f:5d:35:
43:01:1f:05:16:40:52:6f:68:15:1a:23:63:d3:52:
b9:2d:19:50:7c:12:f4:85:6d:a6:6b:9d:97:e7:d5:
52:85:9c:74:11:6e:87:d4:57:80:05:61:18:27:8b:
a5:b6:44:c5:ef:11:12:7c:16:dd:95:4c:51:d8:de:
06:47:f6:82:94:69:4d:7d:d9:8f:26:53:df:4d:1e:
6c:9b:9b:da:64:87:a9:ad:f9:95:0b:2c:0b:13:0d:
41:a7:77:ef:73:dd:9e:72:f9:cd:51:c6:12:31:6e:
b9:07:d2:22:e0:5b:00:c5:8d:bd:4c:ba:98:61:6c:
39:bc:2b:ac:e0:46:8b:97:b1:7d:f2:34:fc:ce:87:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:76:08:FF:80:5B:46:99:05:EF:27:B5:11:4B:4D:7D:3A:0C:FC
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:1b:f9:5c:72:a6:2c:07:b4:5f:51:94:e4:75:5c:cc:cf:
e6:6c:00:df:ae:3e:e0:ee:bb:c5:9d:eb:f2:61:99:d6:d3:78:
69:6a:0c:6c:93:18:f9:c2:91:8d:c1:80:21:de:50:e5:3d:02:
73:a9:7a:af:82:2e:00:a1:70:f9:68:a3:51:25:29:6a:f6:1f:
bd:79:d2:18:31:48:ef:3f:4e:c6:b8:08:5e:c2:80:fe:05:19:
b3:d6:f6:5b:59:88:ff:39:51:5b:69:2e:28:73:b1:f9:fc:29:
02:27:cd:c6:98:7f:e1:52:e0:08:d8:f7:e2:de:f4:5c:12:fc:
2a:2e:40:8b:c5:75:e0:73:59:7f:f5:40:43:99:87:ea:de:77:
a7:b9:d6:39:9e:a9:7f:ff:bc:2d:63:37:7e:df:36:7a:1a:8e:
3c:3e:73:34:41:9d:44:8b:c2:44:2f:c9:e9:e1:b2:4a:fa:17:
31:15:3b:a5:03:7e:f0:ed:d8:d5:19:7e:dc:71:8a:22:3f:51:
b0:95:8b:98:8c:e7:4d:3c:a5:ca:b0:bf:96:8f:b7:88:6e:1e:
c7:a3:7b:60:2b:88:c8:13:67:3e:1c:b0:e4:9d:00:1c:33:ec:
de:1d:2f:d7:f9:21:fb:7f:7e:32:f2:79:e6:ef:92:a1:e2:02:
2e:12:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:57:43 2026 by rpki-client