Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: JWNEr0XnB41Ajz8o9QjdE08cbw62+qNwbN0NIPCxhnk=
Subject key identifier: 36:70:72:2C:37:79:B1:02:0C:99:FF:81:A6:7E:6A:A2:B5:A3:6F:35
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019F909135251C8405B88FF976FB7826831D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0705
Signing time: Thu 23 Jul 2026 20:01:03 +0000
Manifest this update: Thu 23 Jul 2026 20:01:03 +0000
Manifest next update: Fri 24 Jul 2026 20:01:03 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 6NfSVX2ly2gOzNuk71uDCDpXOPKszvpUZY8p7EwF9WM=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:35:25:1c:84:05:b8:8f:f9:76:fb:78:26:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jul 23 20:01:03 2026 GMT
Not After : Jul 24 20:01:03 2026 GMT
Subject: CN=3670722c3779b1020c99ff81a67e6aa2b5a36f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:37:b0:2b:3c:af:9f:45:b0:29:97:25:4f:
c8:65:c2:e1:8f:fb:1c:40:3e:2a:fb:96:57:f2:7a:
a6:43:76:68:a5:d2:aa:b7:fa:1e:47:68:08:78:79:
b1:5a:69:37:b3:77:2b:d2:a6:8f:d7:1c:8b:fb:56:
69:82:7e:bd:39:88:b8:b2:4b:25:13:16:f5:60:4f:
17:ab:cc:e8:57:71:85:85:64:ee:42:2b:04:c9:07:
ef:ae:68:24:5a:71:4a:fd:5d:64:86:55:b3:82:77:
34:1f:4c:b7:ec:98:6f:53:4f:f7:4d:e3:33:ef:fc:
b4:03:a6:ec:2b:95:1f:75:b6:16:da:29:e5:2e:ab:
3c:ec:33:ef:47:22:b2:3b:49:2e:e2:fd:64:c1:d8:
e3:ee:1d:54:4c:f7:cf:62:fd:cc:ed:3b:10:b5:1e:
c1:f6:87:ab:47:5f:4b:51:07:60:63:c9:90:8a:3c:
76:52:08:65:31:aa:81:2e:f2:6b:cb:e0:6a:b0:61:
d2:87:f7:c3:64:3b:d0:10:36:b7:6d:31:ee:d5:05:
2c:b9:56:05:a7:94:66:f9:37:22:ef:e8:ac:32:26:
a0:13:c2:0b:00:83:c7:8f:d7:ed:51:9b:17:8c:e6:
0e:7a:49:d1:bc:4d:ed:e1:79:a8:11:cb:1e:56:6d:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:72:2C:37:79:B1:02:0C:99:FF:81:A6:7E:6A:A2:B5:A3:6F:35
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fd:cc:40:e7:d0:2e:61:f5:5a:b3:90:66:2c:7f:2a:1c:51:
0a:a7:ff:b1:71:e6:b7:2a:b7:31:17:94:aa:f8:62:78:83:3e:
83:de:4a:77:75:e5:f3:61:a0:da:88:e2:83:46:95:ba:83:98:
7b:79:57:8d:25:ac:1c:65:38:51:0b:dd:ec:b0:a5:c7:b3:13:
7a:81:18:fc:f7:79:36:6b:5c:f4:eb:71:b2:5c:26:ef:42:c6:
a6:99:7c:72:87:51:f2:ba:f8:81:5c:98:b3:dc:c6:b0:1d:66:
7f:6c:b5:76:f1:d7:3f:09:3c:ff:0f:b6:ac:4a:08:03:f4:00:
a5:58:f7:3a:b4:77:78:fe:54:18:d0:39:73:7f:e6:82:d7:40:
cb:96:15:f8:2d:85:43:1f:3c:5a:56:1a:b7:1e:73:36:3c:92:
6c:cf:8d:5a:b4:5b:52:4c:93:5d:ce:3d:c1:37:31:0f:05:a8:
9c:59:08:db:78:ee:4a:00:14:be:5b:52:ba:8e:05:66:9a:bb:
4a:07:06:74:ae:59:28:a5:cc:a1:73:f0:5a:ee:25:c8:da:58:
bb:5f:cd:e6:a9:2b:80:a2:f5:44:ed:8a:ce:37:62:b2:8c:ca:
d7:75:4e:c6:d5:e4:de:8f:22:f6:f2:71:dd:c7:48:a0:e3:64:
40:44:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:07 2026 by rpki-client