Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: HAC0zq04ei2Oa7UWoUa7k7Io8pzrGdNI0ajN3R2I6bk=
Subject key identifier: F2:28:A7:8D:02:31:3C:92:4E:E8:0F:5D:FA:E5:5D:BD:E9:1C:82:4B
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 01A0CCA3156EB72C8AA13698959FA163174C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0FD0
Signing time: Wed 23 Sep 2026 05:00:34 +0000
Manifest this update: Wed 23 Sep 2026 05:00:34 +0000
Manifest next update: Thu 24 Sep 2026 05:00:34 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: GHj3kZQond0PsD+1/3mxaS6y5qN0X4QirvfCHGKx2hE=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:15:6e:b7:2c:8a:a1:36:98:95:9f:a1:63:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Sep 23 05:00:34 2026 GMT
Not After : Sep 24 05:00:34 2026 GMT
Subject: CN=f228a78d02313c924ee80f5dfae55dbde91c824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:ab:65:96:44:9a:8d:d5:32:06:b2:e4:6c:
39:f2:53:34:e5:c6:e8:3c:82:53:aa:de:65:79:cc:
e1:15:14:98:6d:af:c9:82:47:6b:c8:12:f3:bf:11:
58:aa:0c:26:2d:b1:58:fe:5f:73:5a:b2:f6:d5:f2:
53:b4:f5:d6:8c:00:e5:21:00:a5:16:54:b0:00:5a:
3d:0e:5b:80:bd:b0:69:5f:23:0e:b9:fa:2e:83:6f:
36:e1:f1:1d:c0:54:b6:ae:ae:20:50:91:16:23:62:
40:04:dd:1d:ad:b8:f0:e7:f6:8e:74:ca:ff:93:fd:
d6:9d:8e:10:40:90:02:b2:06:4a:71:cb:65:43:ee:
d2:94:d5:d2:2a:bf:71:cd:ad:0d:1e:93:79:ba:33:
cd:89:cd:9a:16:39:5c:a9:1d:21:35:a7:a6:e7:31:
46:6c:26:f6:35:1e:b2:eb:83:25:32:f7:68:8c:f5:
1d:ea:b4:5d:b8:18:20:5a:f4:89:c7:12:7b:69:df:
9c:1b:49:a0:39:30:c2:de:fb:b6:98:c7:c8:4a:66:
34:f3:26:70:a0:79:3b:9d:b3:8d:15:07:27:d8:76:
09:1c:cc:36:de:00:53:cd:9d:2f:25:b5:39:ac:cc:
c9:d6:1b:8c:31:3e:cd:f2:0e:43:44:fc:bc:35:c4:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:A7:8D:02:31:3C:92:4E:E8:0F:5D:FA:E5:5D:BD:E9:1C:82:4B
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:e0:e5:8f:2c:86:a2:fc:03:f3:53:cc:2d:5d:3a:c3:88:
7a:f9:61:3d:4a:39:d3:81:f6:72:9f:77:a7:8a:6a:80:c2:c1:
93:ef:fa:1e:10:8b:04:4b:3f:c5:b6:e0:ca:cc:93:80:71:0c:
c7:3e:97:06:a4:64:5c:d2:78:82:d4:cf:f4:b2:66:cb:5d:c0:
10:64:4d:29:a1:5c:93:f3:fa:ff:5d:e3:bf:b8:f6:2d:d4:83:
0d:f9:00:3e:7e:5e:a1:6b:66:c0:5f:2b:cf:97:32:41:9c:41:
23:e0:e3:a9:48:f6:c6:65:a4:8c:6f:d8:e1:a3:0e:e6:c7:27:
20:4e:81:4f:ed:e9:25:55:11:87:a5:d9:a3:6d:3e:03:4c:5f:
a3:56:a9:6f:d3:09:d5:13:96:45:c2:a5:ec:e5:fd:ed:65:88:
93:85:95:6c:eb:79:44:0a:0d:d0:fd:c0:d7:19:92:c6:a1:49:
ef:5c:6f:71:a1:10:e7:87:9c:cb:dc:74:3c:17:f5:02:7a:89:
67:de:b6:61:41:ef:5e:a1:b4:9f:e0:39:6c:d1:0c:d9:7d:bf:
0a:c8:2d:41:67:16:0c:b8:11:b5:a5:7b:80:e8:27:ce:89:1e:
28:9e:6d:a3:d5:0b:7a:86:57:a4:eb:a9:eb:0d:96:aa:ad:73:
07:b5:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:41:26 2026 by rpki-client