Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: XI/klarQE6fTQI2lI0CEHx1+kp5YwmUqQl/bev9MDpM=
Subject key identifier: 46:50:E8:41:91:E3:0E:B4:0B:68:66:9E:E4:7D:4F:D3:B4:49:00:B0
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019F91DB15C1C0BEA1B33252C0D8F2089696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 142C
Signing time: Fri 24 Jul 2026 02:01:21 +0000
Manifest this update: Fri 24 Jul 2026 02:01:21 +0000
Manifest next update: Sat 25 Jul 2026 02:01:21 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: qfHvWZLNlJOLUuOYkKCWE/N3W4zmtZBzZQzSLBoMIls=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:15:c1:c0:be:a1:b3:32:52:c0:d8:f2:08:96:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jul 24 02:01:21 2026 GMT
Not After : Jul 25 02:01:21 2026 GMT
Subject: CN=4650e84191e30eb40b68669ee47d4fd3b44900b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:8e:63:79:f3:95:1a:6d:85:f7:f9:a1:69:
d4:98:25:36:e0:32:ca:aa:5d:ac:0e:65:46:9d:dc:
ec:c2:bc:e0:1a:d7:cc:a4:37:74:0e:ea:3e:f6:94:
97:38:79:6f:d9:ec:f3:64:44:a4:d3:fb:71:04:89:
ca:01:a2:46:34:16:19:e0:84:80:f7:1c:5e:50:de:
2d:12:52:58:20:bf:3b:ec:00:5d:05:81:6e:21:b8:
62:2b:58:be:db:df:73:e0:a8:08:ce:b9:5f:c2:dc:
13:ad:dd:94:97:9b:67:f2:44:95:f9:fa:ae:6e:09:
e9:5d:03:09:c0:ca:b3:fc:2c:38:79:6f:28:76:d7:
43:fc:da:14:54:e4:3d:07:9f:07:d7:0e:7e:96:16:
57:08:67:bd:50:d6:b3:7c:bb:16:70:fb:8a:a4:d1:
56:c9:fb:22:b8:f0:c5:3a:5a:2f:1b:86:df:5c:3f:
eb:10:10:38:cb:98:93:11:56:2a:31:e8:c9:4f:d7:
f8:6d:c5:81:c5:73:f0:b5:ff:38:fc:c6:a9:1c:2b:
02:8e:d8:1b:66:2f:cf:4d:7e:6a:b8:09:c7:37:0c:
a7:74:82:af:51:bb:5f:5e:23:a3:05:40:7c:ab:6e:
6e:7e:89:94:ba:88:5b:e9:7a:4e:40:4a:d6:52:74:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:E8:41:91:E3:0E:B4:0B:68:66:9E:E4:7D:4F:D3:B4:49:00:B0
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cb:7c:90:d2:e3:49:93:27:e4:ae:64:48:49:94:99:9a:3c:
91:02:e1:16:72:1c:9b:4c:dd:23:5d:c0:01:66:0c:a0:f8:e5:
f0:df:60:ab:73:bd:9c:30:fd:83:c4:96:22:1d:68:ea:70:b7:
dc:5a:a5:dd:a0:dd:c9:85:a0:17:11:3e:41:58:8b:8f:c0:9a:
2a:11:19:ac:9d:f8:28:b7:d2:fb:fa:66:49:74:21:da:8a:95:
c8:7f:9f:20:63:d1:0e:cd:1c:25:18:0a:9c:fd:e5:82:dc:16:
da:a4:a3:5e:80:3a:dd:25:20:da:b1:e4:99:b0:de:36:37:a3:
9f:5c:f5:a5:64:2e:9e:56:b0:ff:3f:b9:4e:6f:0b:71:fa:8d:
54:9a:9b:b0:63:8d:79:7a:d4:61:61:f3:8b:90:58:19:ed:81:
e6:91:74:f2:b9:88:10:cd:62:2c:26:b8:e6:77:f9:ec:e9:50:
91:8d:05:28:b2:c1:7e:bc:59:70:be:c7:32:22:a3:77:54:29:
94:36:85:8a:9c:9f:4f:cf:c4:f7:87:e7:44:18:01:5b:11:32:
c5:29:8f:29:d8:01:6f:34:e2:ce:63:3e:29:1e:fa:fa:b8:72:
38:3a:f2:80:81:d4:40:82:1d:56:6b:bc:47:0e:b3:ae:0e:e8:
c7:43:93:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2xXBwL6hszJSwNjyCJaWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh
MGIwMDkwHhcNMjYwNzI0MDIwMTIxWhcNMjYwNzI1MDIwMTIxWjAzMTEwLwYDVQQD
Eyg0NjUwZTg0MTkxZTMwZWI0MGI2ODY2OWVlNDdkNGZkM2I0NDkwMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuemOY3nzlRpthff5oWnUmCU24DLK
ql2sDmVGndzswrzgGtfMpDd0Duo+9pSXOHlv2ezzZESk0/txBInKAaJGNBYZ4ISA
9xxeUN4tElJYIL877ABdBYFuIbhiK1i+299z4KgIzrlfwtwTrd2Ul5tn8kSV+fqu
bgnpXQMJwMqz/Cw4eW8odtdD/NoUVOQ9B58H1w5+lhZXCGe9UNazfLsWcPuKpNFW
yfsiuPDFOlovG4bfXD/rEBA4y5iTEVYqMejJT9f4bcWBxXPwtf84/MapHCsCjtgb
Zi/PTX5quAnHNwyndIKvUbtfXiOjBUB8q25ufomUuohb6XpOQErWUnQf3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZQ6EGR4w60C2hmnuR9T9O0SQCwMB8GA1UdIwQY
MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt
ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw
LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMt8kNLj
SZMn5K5kSEmUmZo8kQLhFnIcm0zdI13AAWYMoPjl8N9gq3O9nDD9g8SWIh1o6nC3
3Fql3aDdyYWgFxE+QViLj8CaKhEZrJ34KLfS+/pmSXQh2oqVyH+fIGPRDs0cJRgK
nP3lgtwW2qSjXoA63SUg2rHkmbDeNjejn1z1pWQunlaw/z+5Tm8LcfqNVJqbsGON
eXrUYWHzi5BYGe2B5pF08rmIEM1iLCa45nf57OlQkY0FKLLBfrxZcL7HMiKjd1Qp
lDaFipyfT8/E94fnRBgBWxEyxSmPKdgBbzTizmM+KR76+rhyODrygIHUQIIdVmu8
Rw6zrg7ox0OTYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:29 2026 by rpki-client