Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: ySP7pqrbz0AMf8asWKrTRWZag2utfYNLsF2JKFeLgYo=
Subject key identifier: 51:4D:E9:75:5B:4E:CD:6D:47:84:74:01:10:81:25:26:C3:10:1E:68
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019F90FE8817AC14B14B75E5EDCAC9D1132E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0F9F
Signing time: Thu 23 Jul 2026 22:00:27 +0000
Manifest this update: Thu 23 Jul 2026 22:00:27 +0000
Manifest next update: Fri 24 Jul 2026 22:00:27 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: Ne/TwGirZUEYK1124s8EIRpxRtpJ7EWTzThAXjjnBBg=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:88:17:ac:14:b1:4b:75:e5:ed:ca:c9:d1:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jul 23 22:00:27 2026 GMT
Not After : Jul 24 22:00:27 2026 GMT
Subject: CN=514de9755b4ecd6d4784740110812526c3101e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:1b:21:7a:f4:72:e7:4b:75:99:45:ed:46:
ae:c2:93:c1:d4:c5:04:f2:e6:85:da:e0:c8:b8:b9:
f9:72:f3:62:ed:42:96:6a:71:be:7b:c5:7b:78:fa:
61:50:6d:d0:5a:32:fa:5c:ef:e9:98:9f:54:86:3a:
87:51:96:24:14:1d:25:3d:15:ef:28:39:64:36:ae:
bc:a8:6f:fd:88:5a:e0:8f:1b:95:ba:82:f9:8d:10:
e6:a7:85:52:1d:d3:96:52:18:73:f6:35:e1:58:61:
20:98:d2:81:ef:64:d2:0c:28:08:b5:64:10:13:dc:
b8:da:65:89:6f:12:f2:a6:5c:1c:b1:5c:03:25:d9:
17:f1:07:28:9c:dc:8a:2c:f3:f2:80:14:e5:da:7d:
ae:3a:ad:d6:67:80:52:31:aa:c0:a3:a1:13:17:81:
50:52:bb:10:f6:73:59:ab:a9:89:47:c0:79:e7:af:
ab:b6:17:d9:1d:13:ea:cc:32:3b:4c:e5:b8:87:b0:
97:43:ae:a5:47:76:2e:a6:4f:fe:8e:72:4e:43:b3:
7a:e3:8d:11:c0:07:da:b6:47:00:52:49:4d:58:95:
1a:7b:02:e8:25:3f:e7:bf:87:0b:94:a2:74:23:b2:
c2:23:4f:bc:4d:20:5e:b8:77:63:aa:b2:b8:c4:64:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4D:E9:75:5B:4E:CD:6D:47:84:74:01:10:81:25:26:C3:10:1E:68
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:57:01:2e:2a:94:79:72:ce:16:75:f2:f0:24:c4:26:75:
c4:4b:4d:60:eb:48:3e:5d:b6:42:30:a4:a3:16:98:bb:8f:19:
21:c3:97:b8:c7:ec:f5:5d:72:07:a1:c0:b2:22:82:62:39:d8:
c4:87:96:90:24:90:b4:64:c9:80:f0:1b:50:66:52:35:65:61:
cb:77:2a:25:cd:1e:d6:2f:74:29:ea:d9:d9:61:9a:2a:68:b0:
51:f8:97:2f:91:32:8a:15:80:bc:51:1f:58:d9:03:94:2a:bf:
45:69:b9:1a:ea:0b:a3:3b:59:45:43:0e:c1:90:95:ad:28:b2:
80:b6:85:9c:4c:32:d6:cc:6a:88:e8:05:7c:52:63:a6:2c:de:
17:82:3f:0e:aa:5d:f3:36:0f:8c:c4:24:7f:ad:33:74:99:74:
41:bc:f1:7e:2a:e5:c5:ef:12:2e:dc:2d:35:41:6a:9b:4e:00:
70:ab:3a:af:95:4a:9f:7f:b3:e8:d1:01:c6:6f:b4:00:02:4e:
1f:6a:df:4d:fa:a4:e8:d5:ff:62:fd:6d:1e:ed:78:88:c1:68:
3e:27:96:50:6a:54:f0:87:d6:06:43:60:07:b2:ae:7f:95:d1:
b1:0a:33:c4:aa:1f:69:3b:30:4a:f3:f5:9c:93:f1:86:1a:cf:
e8:89:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:32 2026 by rpki-client