Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: sSD3c3WeR5ZKNPuTE2YpNQaMjSr/nnD8brdQDtfGi+k=
Subject key identifier: D0:ED:00:4D:87:57:ED:FD:42:88:7B:E9:AD:3A:CC:0F:B8:A6:85:22
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 01A00101E50D945BBFD19A8039C6E4A68CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:01:36 +0000
Manifest this update: Fri 14 Aug 2026 16:01:36 +0000
Manifest next update: Sat 15 Aug 2026 16:01:36 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: 7IPBSAEMc0mkAvuNaDmBDZvJFeysuEZdivKLpuE/gpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e5:0d:94:5b:bf:d1:9a:80:39:c6:e4:a6:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Aug 14 16:01:36 2026 GMT
Not After : Aug 15 16:01:36 2026 GMT
Subject: CN=d0ed004d8757edfd42887be9ad3acc0fb8a68522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:68:1a:95:e2:8a:8a:69:7d:76:c1:65:1e:
05:87:3d:69:1f:be:02:c6:b6:3c:84:b6:91:3f:a0:
ed:a2:9f:40:a7:66:01:9d:f0:e9:90:15:fe:71:8a:
f0:85:51:62:3c:2f:fb:d4:aa:34:5f:a3:e1:88:75:
fb:2f:65:07:17:77:ae:ac:d0:b0:dd:cc:d5:f5:df:
5e:2f:88:49:fc:b1:8c:cd:12:b7:0a:b9:d1:d8:cc:
03:ea:fa:06:b2:ea:63:90:0b:f2:b2:5f:a6:17:33:
84:1f:de:c8:75:49:32:90:99:46:b8:6b:78:f5:8e:
a7:60:f5:4b:03:46:3a:06:bb:bc:e3:83:9f:64:84:
25:ff:e3:ce:87:cd:f5:de:30:d9:cf:4a:ea:d0:39:
d5:2b:c8:60:59:5c:ac:3a:9b:fc:30:fa:e6:33:0e:
ea:ec:2f:5c:11:fa:23:dd:35:b3:57:74:99:a5:0c:
40:a5:df:74:b4:17:9a:19:c8:ff:6b:1c:6c:ff:a3:
ec:64:fa:4e:d3:12:1e:6c:35:22:6a:ec:72:fe:5d:
db:44:10:e7:27:63:b4:36:b2:57:d0:62:4d:7d:66:
41:39:fe:aa:37:ff:fc:1c:47:af:35:bb:ed:9e:7b:
19:ff:da:ed:90:ab:ab:af:37:25:f6:35:7e:64:1a:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:00:4D:87:57:ED:FD:42:88:7B:E9:AD:3A:CC:0F:B8:A6:85:22
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:d8:76:d6:65:3e:28:e2:d9:0a:47:30:51:da:dd:92:66:
f5:52:37:40:38:3b:f3:47:b9:70:78:df:c5:de:f5:1b:bf:40:
24:76:eb:4a:ec:c9:e0:95:3e:91:84:81:27:22:1e:f0:f4:b5:
5e:e7:63:af:9a:c0:2a:1a:7c:82:18:20:d2:5e:60:9b:6d:0f:
7a:e1:c2:6f:a4:f0:b2:03:ea:57:c8:f6:1b:45:a0:e4:8e:cd:
36:61:bf:61:1a:07:14:6a:38:bf:52:9b:e2:0f:e0:4d:14:ad:
a6:05:ea:71:5f:33:9a:d1:be:f6:71:42:88:f9:c7:1e:ff:c2:
79:21:4b:21:94:1c:d0:50:17:03:a7:44:07:e5:ec:15:96:c1:
c2:04:9c:ec:d4:fd:b1:72:2b:10:76:92:fd:ad:c1:12:1c:9d:
37:d8:37:61:a8:31:38:36:df:80:b8:1a:5a:16:ef:6c:47:61:
39:ae:1a:44:79:35:15:1a:60:7c:ff:11:21:f5:a8:a9:02:29:
dd:b9:d2:fc:0f:5d:69:90:55:cb:f8:b9:e2:48:92:63:bf:0a:
a6:e8:d4:49:76:0c:e9:87:e1:2e:ec:87:93:3a:d3:b0:71:c1:
bd:32:f7:ac:8f:09:a8:e9:d4:8f:68:04:d6:7b:57:ad:02:a4:
3e:bb:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:52 2026 by rpki-client