Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: nDlQHz5mYpny9xWcdgNhRzAYSgQPZjplwlYAzyz9w+M=
Subject key identifier: 38:3C:CB:3B:68:66:3C:B8:B4:56:11:A4:4A:41:21:E4:39:2D:17:BF
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019E1DC78422CBBAE0093403718E6A665EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0645
Signing time: Tue 12 May 2026 20:01:15 +0000
Manifest this update: Tue 12 May 2026 20:01:15 +0000
Manifest next update: Wed 13 May 2026 20:01:15 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: G/NSOxUwk0h905pjkfR6egRty4JDN752w8xkTCZO5oQ=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:84:22:cb:ba:e0:09:34:03:71:8e:6a:66:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: May 12 20:01:15 2026 GMT
Not After : May 13 20:01:15 2026 GMT
Subject: CN=383ccb3b68663cb8b45611a44a4121e4392d17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:14:a8:04:aa:83:2b:cc:66:95:0b:1d:3a:
fc:9c:cd:b2:e5:98:ac:89:bf:18:71:7e:f7:c7:5f:
84:a4:d0:bb:88:08:cd:d6:7b:79:be:eb:05:9e:57:
7a:60:54:30:9b:05:71:18:d6:80:3e:e6:6e:41:c9:
6c:b4:94:f6:5f:7e:cf:38:90:1d:59:a5:44:72:03:
d1:9d:0f:58:06:bf:6e:90:0e:bd:19:81:c4:59:21:
41:c1:a0:86:3b:bc:38:80:0f:2b:e9:49:ff:03:72:
5c:7b:43:c2:c8:fc:89:68:ca:0b:e9:20:03:e1:b1:
cc:6d:c3:4d:9f:53:76:62:9e:cd:c8:2e:19:13:8b:
1a:c2:d5:ac:51:f0:88:27:d8:aa:30:b6:08:34:f0:
46:4e:e9:a5:df:1f:b0:bb:3a:63:04:57:b4:87:82:
18:2b:b9:4b:fd:4d:c7:28:89:ad:90:4f:90:ec:cd:
0c:fa:9a:c4:51:67:0c:ff:91:b4:e3:47:6c:02:ab:
1f:4d:a8:ea:4a:4e:bb:bf:2d:7c:37:69:07:e3:a6:
93:90:37:18:a2:5e:3c:8f:6d:42:48:d3:0e:d4:59:
1d:5e:6e:35:9d:9f:e5:28:b8:ef:9d:13:3b:69:81:
08:4d:50:3f:da:a2:56:32:10:d9:5b:71:6f:6a:79:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:CB:3B:68:66:3C:B8:B4:56:11:A4:4A:41:21:E4:39:2D:17:BF
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:2f:2b:e3:d7:75:97:f0:5f:51:74:c0:ca:9d:b1:21:2e:
57:82:5a:73:22:f9:02:95:62:38:8b:3d:52:62:60:d7:80:ab:
cc:2e:cf:e3:47:44:c0:c6:a2:cd:f2:b7:6e:d3:08:29:a3:42:
ae:83:ab:00:1e:1c:db:9a:aa:0e:46:e5:0c:08:6b:c2:e6:f2:
8f:ba:59:21:fc:c5:19:83:b6:43:94:06:3f:d0:cc:c9:49:24:
1b:07:6e:78:58:ea:83:6c:10:b5:33:13:9d:10:b7:0b:25:71:
b0:cf:e5:5e:d6:ae:69:25:1d:06:00:3d:e6:18:66:ff:1b:24:
b2:1a:76:8f:16:1f:ff:91:33:19:e7:94:1a:d2:73:de:81:4a:
1a:dc:0f:80:9c:c3:00:b2:6c:c8:23:6f:c4:97:f3:e2:3c:59:
34:7e:11:7a:1c:4d:58:83:f3:f4:48:90:55:97:6f:82:a7:28:
69:f9:6d:b3:f5:08:43:10:ae:28:dc:f9:9d:7f:d7:5f:e5:15:
8e:dc:7b:b6:43:a5:fc:c3:b1:06:f7:a3:8a:da:c4:ad:3e:c1:
a2:84:46:20:e9:0e:eb:03:f0:60:15:b6:fc:9a:a6:c9:69:e8:
5d:42:4f:07:85:be:ed:5a:00:cc:0a:d5:35:38:38:56:26:a9:
53:04:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:12 2026 by rpki-client