Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: bd+ag5SDpOBg3Lq9bBMoV/ISXbnZ9XhyaIvrQZmQNF4=
Subject key identifier: 9B:71:F4:A5:7A:90:D9:B3:5F:FC:95:41:42:4B:C0:29:21:68:A7:82
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019F8FEC160BFAB74DEF515AB4E39196CC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0F2C
Signing time: Thu 23 Jul 2026 17:00:41 +0000
Manifest this update: Thu 23 Jul 2026 17:00:41 +0000
Manifest next update: Fri 24 Jul 2026 17:00:41 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: cKlhq4KozFGUu6OnDjc2c1sJazkmghiJprmNlDS1M0g=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:16:0b:fa:b7:4d:ef:51:5a:b4:e3:91:96:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Jul 23 17:00:41 2026 GMT
Not After : Jul 24 17:00:41 2026 GMT
Subject: CN=9b71f4a57a90d9b35ffc9541424bc0292168a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:59:25:be:b6:f1:d2:5d:65:c8:4b:79:2b:
1f:2f:f0:65:3a:b7:bd:f2:57:5a:02:09:83:86:d1:
f3:b0:34:aa:c0:44:e5:58:ad:63:6f:74:cf:8e:3b:
6f:98:42:75:e1:dd:78:1d:96:d6:31:d8:b6:72:39:
8e:03:80:18:ba:a7:97:38:e7:e9:a1:16:53:54:00:
3b:2c:ad:bb:8d:e2:45:64:4a:77:26:13:47:7e:7b:
06:07:89:67:71:d6:a5:0e:41:53:e2:5c:b0:48:17:
94:8c:ec:80:21:d5:b7:87:ec:13:96:d5:2c:d9:c6:
5b:c9:0c:30:fe:66:49:88:89:8c:d4:0d:a7:6c:ae:
ba:ac:88:66:49:3e:0a:8b:c1:d8:fd:4b:6f:eb:d7:
6c:36:3f:da:ab:b8:08:7b:b6:6d:4e:b0:a3:43:83:
7b:de:16:f9:e2:11:d6:d9:17:17:a3:ea:a9:ed:66:
4d:11:b4:f2:08:c5:e8:b7:c2:3e:61:b0:8e:79:82:
ad:cd:c4:9a:37:6a:69:70:bf:a8:1c:ed:fd:a4:0b:
59:b0:e2:ba:58:f7:3f:68:25:b1:1e:d3:f3:de:33:
8b:da:89:6b:a1:70:71:49:ad:50:c1:bb:a8:3c:38:
09:a8:35:b5:4c:b3:9e:93:7d:30:ec:f1:ed:90:c2:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:F4:A5:7A:90:D9:B3:5F:FC:95:41:42:4B:C0:29:21:68:A7:82
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:87:ea:5c:1a:da:09:77:ed:19:46:d3:5f:f3:56:59:90:
17:5f:2e:0e:84:bd:c3:4a:fb:fd:f5:4a:92:8e:bd:56:7d:b0:
c0:f1:f0:3e:48:fd:18:14:c0:40:ce:a2:0b:34:75:63:2b:64:
17:ec:66:69:33:ee:33:28:05:0c:5f:42:95:89:d2:93:a6:2c:
6d:bf:1e:e0:44:57:f8:9a:86:44:7e:45:f6:00:7f:fd:b8:c2:
23:ad:07:bb:64:6f:4d:88:82:19:b4:64:50:3d:1c:7f:b7:a8:
64:da:ab:d4:9f:8a:6e:da:31:0a:fd:64:c6:17:ed:09:48:67:
e8:19:d9:5f:ec:c4:f1:4a:a6:4c:a9:1c:dd:9a:d5:5c:a5:74:
0c:09:9f:a7:28:23:ba:df:c5:43:0f:6e:56:4a:b2:03:3c:91:
97:63:0f:ef:86:f5:85:fb:e9:9b:5c:ca:b2:37:e9:fe:b1:f1:
d3:e2:46:83:49:8b:c9:67:2d:8a:9d:76:42:9a:b8:03:ab:e4:
76:27:8f:7c:10:94:f3:c2:06:07:4d:09:be:8d:1f:c0:49:6c:
92:f4:b1:c5:bc:16:56:d5:8c:b8:8f:3d:2c:6a:ce:1b:35:01:
23:65:76:bb:04:01:0d:6f:92:22:37:d6:65:4c:51:34:6d:8f:
63:b9:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:49 2026 by rpki-client