Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: wr24nnb1mgGFGBRQ0zPGqAwqmB8jgdt9ofaVBbr94yc=
Subject key identifier: 4A:7F:06:A0:2E:5C:CE:29:8B:FB:B1:A2:AF:F1:61:22:09:D5:79:E2
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019D3865B240DF369A6AE1213B7D4A4298A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: T041Q3KWUGIgf697KRm9KQwhEq5iDAzwmsDLrg27w9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b2:40:df:36:9a:6a:e1:21:3b:7d:4a:42:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=4a7f06a02e5cce298bfbb1a2aff1612209d579e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:0b:00:32:33:e1:d9:76:bf:31:83:0b:e1:
2f:98:3d:2b:a1:d8:cd:cd:a3:63:1b:f0:78:cf:81:
ea:06:a8:b8:42:f3:e7:fa:49:a4:4c:56:7b:f3:0b:
1e:82:c0:f2:85:0a:c6:ca:d6:f2:75:36:71:b5:4f:
e6:29:06:1d:68:12:4d:0b:50:33:b3:96:80:cd:6a:
e1:12:de:1d:6d:46:cd:ac:a5:a4:b1:e1:58:38:42:
a7:27:ec:15:e2:93:ca:13:93:4f:9d:29:b5:a7:c9:
d4:3f:2f:14:be:4f:3c:4b:d6:12:c0:08:ea:fa:5d:
7e:47:a0:76:e0:0b:2a:b0:54:5a:72:07:2a:31:74:
9d:8d:8e:c4:02:55:ca:1b:70:13:75:b0:43:d2:0a:
98:6b:42:33:a2:15:f3:1a:bd:fe:c3:c7:ad:dc:ca:
77:10:42:08:bd:b3:f0:b9:bb:fe:69:e4:15:b7:a5:
30:a4:a5:ae:db:10:e7:d4:50:fe:4d:5e:3c:81:4d:
c5:99:cb:b6:de:69:b1:4f:14:e4:10:30:b0:93:2e:
b6:55:2d:e0:e6:3d:40:53:f4:7e:4f:4a:23:6c:5f:
a3:58:cb:b7:de:38:e6:7b:88:ff:88:6c:2f:b7:b7:
fe:aa:05:23:94:63:86:3f:4b:7e:ea:87:d2:0a:79:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:06:A0:2E:5C:CE:29:8B:FB:B1:A2:AF:F1:61:22:09:D5:79:E2
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:aa:e4:77:5e:2c:48:47:2f:6a:14:be:99:a2:b5:22:a5:33:
d1:97:d2:da:0c:b2:53:b8:38:d6:74:de:68:e6:c4:fb:84:c5:
e7:db:50:66:4f:0f:ae:bc:45:cc:82:3d:fe:56:4c:3c:99:53:
fa:43:dc:c4:9f:a7:d1:3d:cf:4c:70:63:f3:71:3f:5b:71:c5:
11:3e:9c:ce:21:79:3e:16:e6:2e:a3:f6:fa:73:7b:69:39:e3:
49:d9:08:08:a2:03:bf:b7:96:9c:6e:0b:8d:87:e8:6b:61:c5:
b2:ff:f5:89:52:0c:30:8a:2c:d8:72:1d:07:34:dc:20:ed:23:
86:76:5d:b7:37:de:87:75:65:39:12:69:ba:16:dd:08:35:89:
56:3f:da:a4:00:80:52:06:d9:86:60:79:de:25:8a:5c:9f:35:
80:15:21:92:67:ed:8d:44:29:49:4b:c7:6e:19:9d:93:6b:5e:
13:ae:bf:3f:98:e4:0f:27:74:0d:1a:3f:3f:01:f9:5a:6d:1f:
07:74:4c:93:07:94:e9:bd:42:ce:19:ff:f5:d6:2b:bf:8c:14:
8a:f6:df:bd:fa:cc:e0:ef:68:13:56:55:24:e6:6b:f7:58:2c:
e2:de:84:ee:91:f8:f7:7a:4a:c5:e0:f6:10:1d:e4:df:59:e2:
04:73:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:33 2026 by rpki-client