Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: S3cE3QxEkqLPgkhkUO4hmsDn+ofRVMoghfcXr4RunwM=
Subject key identifier: 9E:4A:DE:C2:4F:53:1C:0B:D7:E4:4A:1C:55:4F:CF:A6:63:DD:39:52
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019F194406025F01F8C781374819407654DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 16:01:56 +0000
Manifest this update: Tue 30 Jun 2026 16:01:56 +0000
Manifest next update: Wed 01 Jul 2026 16:01:56 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: 7JzPamzRkzlNOkSX44Wl6laKKi/FgYHqSevfI3c7yFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:06:02:5f:01:f8:c7:81:37:48:19:40:76:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jun 30 16:01:56 2026 GMT
Not After : Jul 1 16:01:56 2026 GMT
Subject: CN=9e4adec24f531c0bd7e44a1c554fcfa663dd3952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:95:35:91:85:38:f2:2c:58:a3:9f:a7:80:
d1:2d:06:6c:bc:c9:fc:51:4c:13:20:cf:a6:93:31:
ff:0e:97:c7:69:d8:32:7d:a4:55:e1:71:78:a8:e5:
f2:df:be:4d:65:cb:f9:92:3b:43:31:20:15:33:af:
a6:d9:6a:71:17:02:f3:9a:da:01:00:41:c2:03:18:
5f:e1:d8:15:ab:9b:86:62:9b:34:a3:5a:5c:c3:cb:
2b:14:61:55:34:6d:6f:30:6f:1f:ca:5b:0d:55:00:
ec:cf:8e:97:2c:b5:04:e2:7b:10:b0:fd:fd:5a:da:
cc:8c:00:85:9b:88:cb:1c:66:64:b5:7f:97:0c:67:
c1:ea:da:e5:17:fc:00:cd:d9:6b:75:e5:82:20:92:
0f:ca:eb:eb:2d:75:45:e0:e1:eb:a4:b3:20:2f:aa:
b2:11:91:45:0b:b7:d5:0f:a3:ba:d5:ab:27:57:9b:
1c:0a:1b:5f:85:ea:d9:ff:0d:bd:16:4f:7c:6d:2f:
d0:82:7b:a6:9c:94:24:e9:b4:a3:9a:f0:a6:b5:9a:
bc:4b:b5:00:d3:33:77:c4:8f:0b:16:88:9e:0a:d0:
4a:7c:4e:79:40:7c:ae:74:fc:21:b5:0d:b8:c1:e9:
d1:a9:c7:09:9b:d6:08:7f:cb:4e:d5:7a:0f:03:03:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:DE:C2:4F:53:1C:0B:D7:E4:4A:1C:55:4F:CF:A6:63:DD:39:52
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a6:f8:f9:09:58:47:bb:53:4a:29:f0:5f:87:58:ea:1a:8b:
5d:41:39:da:3a:b6:c8:81:ff:16:55:84:2d:ae:fc:37:57:45:
5e:ad:00:e1:f5:0e:06:e5:40:13:7f:9f:d8:44:27:a4:22:60:
5c:f8:94:26:a4:28:9f:5e:44:24:d6:59:45:24:06:76:e5:1c:
b6:9e:48:39:77:60:2e:31:0c:6e:1c:f0:08:11:59:ef:e9:b7:
2c:a1:9a:be:66:9f:a7:67:fa:2d:16:26:a6:a5:f6:cd:a8:54:
c3:d0:81:cf:1b:81:16:80:6a:17:48:bd:5b:b0:53:10:61:19:
8c:f0:4f:54:a9:3d:2c:83:af:23:fb:d8:8a:77:78:2d:f5:33:
4f:03:02:1a:31:89:25:78:75:89:e1:97:7e:1d:ef:37:c9:13:
c4:00:3d:6e:05:13:fd:01:08:11:83:f7:be:95:0f:64:f4:52:
8c:02:d2:e5:df:30:fe:e7:a0:39:a5:6f:be:f1:d8:40:81:15:
32:42:b1:74:9e:84:7b:6a:c8:6e:75:12:af:7b:32:d7:c4:fc:
31:a0:65:5e:74:17:01:79:0c:14:8a:ac:97:b2:59:a8:f0:9a:
a8:42:33:ab:16:1d:62:d3:65:e7:38:bb:fc:62:29:3f:c9:61:
2f:f3:fb:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZRAYCXwH4x4E3SBlAdlTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDgyOTFjZmM3MjhkMDE3NjBlYzQyNzgxMDk2YWM2YjRj
NzRhNWQwHhcNMjYwNjMwMTYwMTU2WhcNMjYwNzAxMTYwMTU2WjAzMTEwLwYDVQQD
Eyg5ZTRhZGVjMjRmNTMxYzBiZDdlNDRhMWM1NTRmY2ZhNjYzZGQzOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUeVNZGFOPIsWKOfp4DRLQZsvMn8
UUwTIM+mkzH/DpfHadgyfaRV4XF4qOXy375NZcv5kjtDMSAVM6+m2WpxFwLzmtoB
AEHCAxhf4dgVq5uGYps0o1pcw8srFGFVNG1vMG8fylsNVQDsz46XLLUE4nsQsP39
WtrMjACFm4jLHGZktX+XDGfB6trlF/wAzdlrdeWCIJIPyuvrLXVF4OHrpLMgL6qy
EZFFC7fVD6O61asnV5scChtfherZ/w29Fk98bS/QgnumnJQk6bSjmvCmtZq8S7UA
0zN3xI8LFoieCtBKfE55QHyudPwhtQ24wenRqccJm9YIf8tO1XoPAwNfGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5K3sJPUxwL1+RKHFVPz6Zj3TlSMB8GA1UdIwQY
MBaAFNoIKRz8co0Bdg7EJ4EJasa0x0pdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgt
YjA1Y2ZmYjE4N2ZhLzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80NGRhYzAtMTY3YS00OTkzLWI5YTgtYjA1Y2ZmYjE4N2Zh
LzEvMmdncEhQeHlqUUYyRHNRbmdRbHF4clRIU2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKb4+QlY
R7tTSinwX4dY6hqLXUE52jq2yIH/FlWELa78N1dFXq0A4fUOBuVAE3+f2EQnpCJg
XPiUJqQon15EJNZZRSQGduUctp5IOXdgLjEMbhzwCBFZ7+m3LKGavmafp2f6LRYm
pqX2zahUw9CBzxuBFoBqF0i9W7BTEGEZjPBPVKk9LIOvI/vYind4LfUzTwMCGjGJ
JXh1ieGXfh3vN8kTxAA9bgUT/QEIEYP3vpUPZPRSjALS5d8w/uegOaVvvvHYQIEV
MkKxdJ6Ee2rIbnUSr3sy18T8MaBlXnQXAXkMFIqsl7JZqPCaqEIzqxYdYtNl5zi7
/GIpP8lhL/P7Gg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:04 2026 by rpki-client