Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: r7x7lqpUqKBwBROsBHA9OUBTNM9CAiI+fM3JtvXHS04=
Subject key identifier: 24:4E:DA:28:85:FD:4C:96:94:60:D4:5C:38:DE:CD:80:78:78:D3:95
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 01A13FA75013634DD52307812FD3457E9B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:01:31 +0000
Manifest this update: Thu 15 Oct 2026 13:01:31 +0000
Manifest next update: Fri 16 Oct 2026 13:01:31 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: H+u0m2lNMjSOZ1q6gUlNJgjmzbmZGad0p90cBg/69MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:50:13:63:4d:d5:23:07:81:2f:d3:45:7e:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Oct 15 13:01:31 2026 GMT
Not After : Oct 16 13:01:31 2026 GMT
Subject: CN=244eda2885fd4c969460d45c38decd807878d395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:db:e9:09:3e:af:79:d5:dd:9c:63:f3:5f:
23:27:d5:75:e0:fd:0d:9e:33:fa:fe:b7:e1:ad:7a:
76:24:e2:7f:dc:26:ea:4f:b4:c6:70:85:82:a5:be:
0c:44:f6:93:1c:37:60:72:11:f5:e9:66:59:80:7a:
cb:79:9d:74:fe:b8:78:f8:51:fd:61:87:c6:0d:4a:
31:96:b6:b5:16:97:6f:45:55:65:73:46:cf:b6:84:
c5:df:1f:85:9c:ab:d0:79:a8:d3:9f:99:e8:e6:92:
95:55:c9:f5:2a:75:8b:e4:92:02:3c:84:b3:49:24:
cf:01:7a:25:6d:13:ad:fc:e9:49:0a:ec:dd:d2:48:
39:12:a1:07:9d:f3:e0:fa:a7:13:cd:0a:8e:65:f1:
d6:1b:f1:40:3f:fd:c6:73:d5:26:f7:e5:84:1f:7d:
03:6a:8c:77:02:24:26:4e:27:95:cb:e9:69:3d:b1:
fc:a0:3c:4f:23:2c:c4:88:9d:15:ba:3e:9d:83:e2:
d6:95:41:fc:97:47:f8:a8:7f:63:05:72:aa:56:a5:
7c:48:05:ec:16:62:f4:50:63:73:c6:5e:f4:ce:4e:
c6:15:2d:d6:16:8f:fc:0d:b9:33:0e:d8:cb:f7:4c:
c0:7d:91:a5:07:75:90:ca:ae:72:e6:ce:9f:d9:e7:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:DA:28:85:FD:4C:96:94:60:D4:5C:38:DE:CD:80:78:78:D3:95
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:75:ae:7b:8b:55:1d:71:ec:8d:4b:09:09:83:4b:8f:55:dd:
4e:19:d1:02:bb:0a:c2:b7:c8:a7:df:63:0d:a8:fe:04:4c:7f:
20:e3:d3:04:20:e3:c2:68:15:b2:b5:f3:f4:07:ae:a6:35:8d:
5b:33:42:31:70:26:df:c9:d2:e8:82:90:d2:68:42:4b:74:b0:
dd:3a:21:87:8d:0f:a5:4c:df:c3:ac:4f:9c:d6:2b:4b:e0:0e:
09:8b:6c:d9:31:90:18:d9:fe:f8:7e:73:5b:ac:83:8c:04:56:
7e:a4:17:f5:e4:6b:b0:3e:b0:9f:d3:34:52:f7:50:99:3c:4c:
50:89:97:1b:5d:4b:e6:bd:0b:4d:1e:9e:6a:5f:ef:61:05:95:
10:02:47:da:46:9e:40:07:de:e7:53:72:ba:b4:3e:57:09:72:
69:f4:99:7a:32:66:96:10:4f:53:81:79:76:46:0c:c2:8e:23:
36:c9:b2:bf:0d:93:9a:62:c6:e8:96:2f:ab:57:5d:ad:bc:46:
6b:14:67:d7:85:cf:7b:c0:30:ef:3d:d4:3a:0a:4f:41:b7:69:
25:f2:95:ab:2b:c6:46:08:dc:0e:4a:4e:b8:86:db:78:cb:50:
8f:2b:ff:e0:89:90:85:c6:05:70:d1:26:33:2b:f4:00:ad:7e:
cf:44:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:30 2026 by rpki-client