Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: Ho6IBLd1veb0IWi1sVcNcIq25G0ipz3eD7rd1JwXmdg=
Subject key identifier: 91:FF:E8:C4:A0:27:D6:FE:46:0E:90:8F:38:BB:67:D8:58:EA:01:43
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01A0CF3640578ECBB3DCE15EB858F24D870C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 07AA
Signing time: Wed 23 Sep 2026 17:00:34 +0000
Manifest this update: Wed 23 Sep 2026 17:00:34 +0000
Manifest next update: Thu 24 Sep 2026 17:00:34 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: h+K9vZXhfLmp1zBh6/ELXebBka/vh/6j9rA/EMMgB9Q=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:40:57:8e:cb:b3:dc:e1:5e:b8:58:f2:4d:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Sep 23 17:00:34 2026 GMT
Not After : Sep 24 17:00:34 2026 GMT
Subject: CN=91ffe8c4a027d6fe460e908f38bb67d858ea0143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:97:f6:7c:f4:ce:92:a1:a3:d5:75:3a:a3:
c3:8f:42:bb:3e:1c:02:77:53:f4:e5:8c:7c:a3:07:
e6:c9:ed:47:19:11:3d:48:8a:c2:47:4c:94:74:b3:
e8:be:06:c0:c4:82:fc:03:22:7c:a2:d9:bc:64:31:
ec:93:d1:33:40:0d:77:6a:12:2e:f2:20:f5:bd:a9:
42:24:f5:ca:91:43:1a:13:ed:59:fe:94:a7:35:3f:
eb:24:58:f7:76:eb:e4:80:ee:77:6a:9c:30:25:1c:
4e:c2:e8:23:e4:3a:ae:d0:20:72:05:9a:2f:eb:96:
7f:50:8a:33:1f:db:ad:9d:86:12:2d:bc:8f:83:bb:
15:92:5b:d5:08:14:14:ac:c8:11:dd:18:71:d5:4c:
25:2f:00:e6:a7:7d:15:3d:e7:9b:21:f4:bb:de:12:
7f:70:0a:6c:70:fe:9a:65:ae:db:2f:6e:cc:12:31:
f2:ee:51:69:03:ab:b7:d1:83:fe:2d:5c:1a:4e:90:
99:fa:c8:0d:a9:70:f8:0d:c2:6d:04:d9:c4:ad:6e:
7d:8b:dd:cf:ea:e5:61:b9:5b:46:42:7c:ca:c6:75:
cb:b4:21:08:d8:d3:e0:2c:78:08:9e:68:a9:5d:e1:
13:7e:24:bf:c8:5c:05:05:76:5b:21:01:1f:20:fb:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FF:E8:C4:A0:27:D6:FE:46:0E:90:8F:38:BB:67:D8:58:EA:01:43
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:f6:16:02:50:14:64:51:31:a0:ce:8c:3b:d2:31:c9:67:
15:c9:7e:c5:7d:67:72:5d:11:78:4c:19:9f:37:ac:69:7c:d9:
e3:03:99:99:cb:b7:7f:0c:89:e2:69:d1:99:dc:08:a4:c6:62:
bd:77:2c:bb:73:bc:ab:80:0b:3b:c1:04:ef:12:3b:95:82:93:
65:b6:96:49:05:f7:60:e9:79:a7:55:24:69:2d:e3:f4:fa:59:
80:4a:b9:33:1e:0f:d2:40:a9:05:52:fc:5f:05:0c:b9:b8:88:
de:bb:9d:16:05:d5:d9:9a:e7:5b:29:d1:00:de:6e:22:d4:20:
7b:77:c6:c1:cb:42:60:53:ab:2f:49:78:5d:27:dd:8d:b1:4c:
69:cb:62:ad:27:6d:8b:31:76:5e:2d:69:54:bd:4f:c0:49:03:
62:ef:10:5b:2d:da:da:c6:9e:94:5f:0b:f7:0a:28:70:a7:2a:
75:80:38:73:bb:43:b8:60:a7:e6:2f:25:81:76:34:17:27:86:
8d:32:e8:0f:13:df:c2:33:de:9e:8c:b8:94:f0:55:8c:56:6d:
2e:65:c3:4d:e3:bd:16:91:4b:36:3c:1d:91:04:5c:5b:92:14:
10:95:50:36:51:46:5c:2d:bb:83:ab:14:92:0b:fb:87:06:a9:
28:41:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:47 2026 by rpki-client