Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: bouQwdl6sRGG1iRzQ7fvSgV0q3Jp1jCrIyer+NwGVlI=
Subject key identifier: 3E:B1:88:D9:19:25:6C:1A:16:5F:54:C7:24:5C:6F:42:BE:05:78:01
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019D2884637CABD4D296BCAE7D8691BB6840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 05C6
Signing time: Thu 26 Mar 2026 05:00:57 +0000
Manifest this update: Thu 26 Mar 2026 05:00:57 +0000
Manifest next update: Fri 27 Mar 2026 05:00:57 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 9mQjEEbKcnQWEi4yxz5yCwFswjQYRhILaXQd4mEnHVo=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:63:7c:ab:d4:d2:96:bc:ae:7d:86:91:bb:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Mar 26 05:00:57 2026 GMT
Not After : Mar 27 05:00:57 2026 GMT
Subject: CN=3eb188d919256c1a165f54c7245c6f42be057801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:a8:4f:30:9b:2f:53:9a:30:ce:20:e3:0d:
e4:bb:79:99:29:69:d0:9d:60:d8:1e:69:0e:23:a0:
51:0b:0e:61:8a:70:82:d8:47:61:4e:64:62:ff:fe:
40:d4:90:24:0b:15:c3:2d:e4:8b:49:aa:5b:6f:7c:
fc:89:16:ff:6c:a0:5b:0d:58:a4:01:7a:a4:60:d9:
3a:e8:cf:f1:c1:68:78:f6:93:e9:32:18:86:67:04:
99:b2:bb:b1:0b:84:d1:67:6a:66:88:f2:dc:65:d2:
99:55:6f:17:c8:d0:10:01:a6:94:d3:32:85:22:4b:
56:15:d1:1f:42:4c:31:bc:23:5e:e4:15:85:a1:db:
3d:cf:69:d4:41:58:85:18:cf:ae:78:79:6b:5a:be:
f4:60:ad:fb:f5:97:b4:10:4b:22:1c:c2:54:0f:e4:
e5:f6:45:43:8e:9e:5c:57:2d:a9:07:68:ba:27:8a:
87:53:0f:48:3b:4e:c2:ed:f3:9d:b6:31:e1:64:5d:
6f:ac:32:0e:b0:43:eb:34:2c:e3:de:fb:05:17:6e:
4c:8e:d9:85:e6:4b:a1:79:15:d0:bc:b3:37:09:bb:
9e:a3:43:ed:b5:a2:29:30:a2:f4:9f:93:5b:a8:2d:
a6:f6:0c:c7:19:d7:c3:ec:7f:11:bd:4b:ef:55:92:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:88:D9:19:25:6C:1A:16:5F:54:C7:24:5C:6F:42:BE:05:78:01
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:c8:11:e3:57:d0:9c:bd:8f:7f:17:30:d0:85:e2:1c:9d:
d6:81:6e:95:81:32:8b:03:8e:de:32:27:ee:e7:55:03:f9:b9:
49:e9:70:af:f2:9d:d2:14:79:5c:ef:1e:e9:70:46:d2:66:35:
5f:24:ab:00:01:b9:f2:39:de:f7:59:c1:bb:71:75:b6:c9:4c:
f2:a5:c3:f8:f7:29:ae:b9:ea:e9:58:68:fb:4f:f2:80:1c:94:
a0:c0:d3:08:60:6b:ee:c6:62:62:15:ee:58:0d:54:e4:24:2d:
4f:5d:20:b3:da:40:68:7a:7c:84:a7:49:a6:d1:f2:b5:67:b9:
bb:f3:69:f7:0a:ba:33:a1:15:13:f9:29:96:66:61:f2:6b:9a:
8b:c8:98:15:0f:ff:de:7d:d0:ad:b4:88:97:a5:1f:95:32:81:
69:4f:9b:41:7d:ee:d5:88:04:f4:69:ad:97:89:c9:63:ee:9d:
4b:c4:76:d1:bc:33:e6:05:db:cb:3f:54:9f:91:6a:ea:3d:58:
ec:38:66:c2:25:5d:5f:4d:d4:a6:ac:33:e5:71:b9:bc:b1:79:
f8:81:36:e5:29:25:ae:18:f5:91:0c:9c:e5:4c:cd:b4:94:3c:
a7:c3:b9:40:ce:ed:49:66:7a:95:96:1f:a0:65:e2:36:43:ba:
49:f8:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:39 2026 by rpki-client