Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: li/QqBa4mFbgQExLir/TiVRR7O/kci+S+mfK8IzQfVc=
Subject key identifier: 49:F2:0A:D8:3E:64:59:BD:B6:BE:80:0C:38:8D:4B:3C:C1:9A:59:A8
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01A0D0128DE10D867CAA61E80CA7F3E49683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1773
Signing time: Wed 23 Sep 2026 21:01:11 +0000
Manifest this update: Wed 23 Sep 2026 21:01:11 +0000
Manifest next update: Thu 24 Sep 2026 21:01:11 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: lQFZPQFgEfk5yRKrHbrBBvgOutZqfq+BBKSpgi7P3LY=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:8d:e1:0d:86:7c:aa:61:e8:0c:a7:f3:e4:96:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Sep 23 21:01:11 2026 GMT
Not After : Sep 24 21:01:11 2026 GMT
Subject: CN=49f20ad83e6459bdb6be800c388d4b3cc19a59a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:47:87:62:98:ca:05:e5:7c:ee:af:ee:20:
ee:a7:5f:70:9d:b7:87:4d:24:7d:b8:85:62:da:67:
fd:23:a5:00:1e:82:a6:f5:8e:24:db:83:15:bf:68:
df:5d:ed:ac:3d:fb:04:13:51:6c:2d:73:e1:d4:ba:
90:ed:b7:87:d2:cc:91:55:b4:1e:6e:3d:6f:34:e5:
00:0f:70:fc:aa:e9:30:f0:f8:85:15:18:c8:b2:17:
11:96:c9:32:3f:02:40:69:ea:ca:2e:4e:94:d9:44:
81:39:36:ba:64:d1:5f:93:ab:57:8f:3d:c1:70:f7:
7e:23:41:33:05:ae:4f:47:fc:47:74:2a:2b:45:0b:
47:61:0c:96:dd:19:65:4e:54:fa:83:5d:31:e8:23:
4e:01:3c:0f:7a:4d:44:ed:10:01:c6:39:42:0a:e8:
fe:e7:91:f6:9d:af:7e:a7:8a:37:10:de:0b:d2:73:
57:2d:9c:de:9e:6e:7f:af:28:47:d5:7a:e3:ea:1b:
6b:5c:35:b1:2a:31:cf:bb:8e:d5:24:ae:63:8b:3c:
e8:67:55:eb:f9:9e:a2:a4:0d:b0:33:19:e6:97:22:
41:db:0f:ad:3b:30:a8:b5:03:3e:f1:f4:09:8d:c0:
b5:1e:3f:2e:a9:53:80:c2:b6:26:15:77:c1:9a:e0:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:0A:D8:3E:64:59:BD:B6:BE:80:0C:38:8D:4B:3C:C1:9A:59:A8
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:21:2b:54:37:cf:3a:23:f8:69:a3:81:3c:ab:ee:31:1c:
24:97:78:c7:ab:cf:ba:e2:5e:89:c6:67:31:f4:84:6b:bc:23:
dd:16:e5:ad:4b:ed:a1:c9:48:86:3b:af:c0:35:2b:ae:dd:9b:
1a:2e:2b:fd:6b:89:e7:56:3e:ee:a0:37:10:d0:83:ee:d6:24:
51:d9:95:e8:30:2b:aa:1a:ce:eb:38:2b:ce:d6:8f:e9:8e:04:
1f:2f:d4:a0:45:99:bb:17:7e:86:ea:2d:f9:87:67:3b:d2:df:
b9:fb:71:e6:14:f9:ae:c7:f7:b8:ef:9c:06:49:ce:6b:7a:4f:
f8:e1:d0:6d:46:75:f1:9f:87:5d:aa:88:8f:c0:aa:fa:48:ac:
fd:b1:05:5a:70:39:4d:97:a2:14:ef:fe:45:f6:83:86:5a:70:
db:17:96:62:81:e4:c0:59:ef:87:70:f8:86:9d:8a:cf:5a:92:
a8:39:3f:ad:f0:d8:0b:c3:17:c9:10:c1:04:f4:24:d7:bd:c9:
a7:a1:00:d6:8d:81:7d:b0:1b:4d:cb:95:3b:db:55:f0:86:de:
67:49:aa:38:bd:27:b3:42:60:1f:00:ae:fc:0c:20:af:71:26:
65:0d:bf:38:8a:9b:c4:77:20:2e:a2:9b:fa:f6:ff:db:76:9e:
61:70:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:38:52 2026 by rpki-client