
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
File: 2J8W9XSSQzePgUyUskA010s5J98.mft (raw, json)
Hash identifier: tyeSuR/JuCYYs2Q9hKJVxf0b1zPJPKfcYwniZDNms1E=
Subject key identifier: CA:86:BE:D8:F4:D7:B2:81:2E:53:3D:BD:E7:50:62:F9:99:67:8D:C9
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Certificate issuer: /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial: 019E1EA32D43BE58A58223D1745B8BB2BF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
Manifest number: 05B5
Signing time: Wed 13 May 2026 00:01:10 +0000
Manifest this update: Wed 13 May 2026 00:01:10 +0000
Manifest next update: Thu 14 May 2026 00:01:10 +0000
Files and hashes: 1: 2J8W9XSSQzePgUyUskA010s5J98.crl (hash: j2zzQIWZOJfqJ0mKioQksmUtY5Ra6ffBv8mKFIdKn7o=)
2: 4vjv7ETAasx0tRKIpHxecSePkHs.roa (hash: 2AsMwZr9rbOc2Qfm0AhPalnC6K6xXB1YyB0oF7P/lrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:2d:43:be:58:a5:82:23:d1:74:5b:8b:b2:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
Validity
Not Before: May 13 00:01:10 2026 GMT
Not After : May 14 00:01:10 2026 GMT
Subject: CN=ca86bed8f4d7b2812e533dbde75062f999678dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:14:6e:31:93:09:3d:01:68:3c:99:fd:1b:
34:0d:1b:47:33:b2:6e:8d:81:ab:a3:c4:e5:00:f7:
53:7b:24:cd:b1:be:21:e8:f3:11:8c:93:a7:47:bd:
b8:87:a5:0a:1b:60:aa:50:41:bf:5b:8d:34:49:85:
b5:0b:6f:fe:15:1c:0b:41:28:5f:eb:2f:72:6b:e2:
1c:a6:0e:1e:9d:70:23:e8:0e:04:e8:80:36:6f:3d:
07:10:28:72:da:ad:07:50:e0:84:34:8f:88:fe:cd:
9f:47:8f:16:2c:01:a8:21:2a:ab:d5:50:8f:1d:22:
d8:ea:76:fd:0f:34:65:2c:37:af:88:21:33:0b:3c:
aa:2d:ac:22:1d:0c:ce:55:88:3f:31:44:90:08:84:
e6:d0:7a:13:f6:fe:72:9a:61:63:40:36:73:c8:63:
9d:d1:20:8e:52:54:c8:94:7d:4f:88:82:85:90:17:
84:69:55:d1:29:1f:13:ad:6f:6e:e4:23:b4:52:55:
69:8a:cc:f2:cc:b5:1c:be:6f:c8:50:ab:26:47:4c:
95:8e:db:95:bc:96:6e:14:bc:9d:33:e3:66:d4:54:
47:29:7b:aa:50:41:da:ef:6d:87:25:cb:d3:46:67:
83:e8:26:44:d0:89:b6:4e:b6:48:2d:a2:7d:c3:5f:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:BE:D8:F4:D7:B2:81:2E:53:3D:BD:E7:50:62:F9:99:67:8D:C9
X509v3 Authority Key Identifier:
keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:28:e5:e9:d5:c6:44:a6:a2:c7:ed:3c:6a:cb:ab:ea:6f:
65:29:bf:8f:01:ea:a5:2c:b1:49:ae:53:29:a8:5e:a2:18:39:
12:90:ee:a4:4c:d2:6f:0d:c9:5a:30:42:6f:1a:2b:43:8b:0d:
88:6b:3d:9d:37:4b:af:c7:bd:8f:b2:e3:9d:64:9d:88:10:7b:
f6:f5:63:07:5b:6a:4d:e3:e3:b6:40:cb:7e:2a:b3:09:4a:9e:
d3:5a:40:01:8e:ca:b1:37:1f:e6:83:7f:d4:a3:24:9a:07:9c:
d9:09:15:82:2e:b8:79:b9:ef:d3:c6:62:62:2b:25:8f:9e:bb:
e4:8a:5d:54:e2:0a:b5:de:94:10:cc:1b:7f:79:be:cf:30:3b:
a0:14:8c:a5:8f:fa:b8:02:d0:11:b2:9b:56:5c:3e:36:11:80:
57:20:20:f6:cd:0a:49:ab:bc:10:9c:53:12:cd:eb:dd:ef:fa:
21:91:85:ed:42:b5:9b:ea:3d:07:a7:d4:79:38:19:dc:75:a6:
f8:9e:de:68:cb:df:52:4c:ef:e6:ee:8d:d9:02:ac:0a:7b:9a:
a3:24:e3:7b:2a:89:70:85:48:86:74:c1:ac:f6:ba:61:58:30:
cb:55:ed:c2:92:c1:bb:d6:14:89:b1:6e:ea:fa:2a:70:26:90:
10:f5:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:35 2026 by rpki-client