Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
File: 2JB-iKU1XdbEkzENqQnEnILmRis.mft (raw, json)
Hash identifier: pxLBKRDvRFvSCs9U3MJf3pFLWJG9cfUVpROo3Be2L8A=
Subject key identifier: E8:21:55:D5:99:1B:4D:E5:D8:22:85:90:7F:F2:D6:59:16:EA:12:63
Authority key identifier: D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
Certificate issuer: /CN=d8907e88a5355dd6c493310da909c49c82e6462b
Certificate serial: 01A0D20133C9021982B72734BCF7E5416730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:29 +0000
Manifest this update: Thu 24 Sep 2026 06:01:29 +0000
Manifest next update: Fri 25 Sep 2026 06:01:29 +0000
Files and hashes: 1: 2JB-iKU1XdbEkzENqQnEnILmRis.crl (hash: VG468W0q5RLQnTXa1/z0WDNXM3W3DGn4OkBC4Ya9znw=)
2: xFRlA_WCCtl4Fju19ONjDEmoD1k.roa (hash: UGXakbfRLTme4sGda2l7oDppZgoq8uWKm7vnvwj4GMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:33:c9:02:19:82:b7:27:34:bc:f7:e5:41:67:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8907e88a5355dd6c493310da909c49c82e6462b
Validity
Not Before: Sep 24 06:01:29 2026 GMT
Not After : Sep 25 06:01:29 2026 GMT
Subject: CN=e82155d5991b4de5d82285907ff2d65916ea1263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:f6:7a:80:65:55:2e:4d:73:3a:30:36:8f:
fd:9d:4b:bf:65:07:24:0d:cb:5e:3d:53:a0:57:de:
62:e7:75:a0:bf:63:c5:44:3d:52:8f:0b:75:f5:83:
99:61:dd:69:3a:d5:7e:c9:7f:78:01:d0:19:45:68:
56:2f:0c:1d:4f:97:ba:14:51:76:d0:42:f7:df:5a:
32:e0:85:8e:00:56:9e:ba:54:a6:cb:f2:d4:cc:4b:
df:7b:16:fa:29:87:5a:be:a0:17:16:b4:c1:df:e3:
ae:0f:4b:a8:6e:db:ea:27:d2:9c:70:7d:75:3d:d3:
03:7b:ac:ed:2f:42:f3:16:b4:4b:9b:32:6b:bd:cf:
7d:17:d2:ca:7a:ea:43:a1:06:3c:ec:33:d5:c1:d2:
3c:46:de:b5:bd:ca:75:3d:d7:cb:35:92:fa:ec:b8:
af:2f:d4:b5:fe:a6:96:78:10:81:93:7b:4d:09:f5:
22:93:b2:a0:9d:f2:01:e1:5a:38:11:9e:f7:b7:b7:
5b:7c:ce:b9:0a:61:bc:a9:9c:85:24:f7:b9:ec:32:
18:ea:d8:7a:b0:ca:15:ff:79:b8:56:ac:05:3e:26:
fa:8f:3d:56:b2:ec:a0:61:9b:72:df:71:7b:3c:8f:
b3:00:27:ab:9f:f2:37:3e:c4:10:4e:d5:15:b2:b2:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:55:D5:99:1B:4D:E5:D8:22:85:90:7F:F2:D6:59:16:EA:12:63
X509v3 Authority Key Identifier:
keyid:D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:77:a4:97:34:a6:a8:96:e4:6d:b6:40:fa:c8:23:83:a4:d3:
58:7b:a6:27:64:c0:0f:e6:97:95:ee:c8:5a:ac:2f:23:2a:c7:
60:dd:d2:cb:9c:79:44:e1:d2:98:67:e7:d7:b4:74:c3:77:d1:
3c:bf:07:0c:58:a4:63:b1:41:69:e7:02:fa:5f:b9:ed:f1:9a:
00:e3:3a:94:a6:e3:45:7b:87:51:33:37:d4:6c:03:0e:d3:39:
9f:da:3e:02:fc:64:49:72:a7:64:76:37:d1:0f:8c:d0:fd:2d:
14:f4:18:87:01:51:d0:72:af:83:65:74:20:30:cd:57:0a:a1:
42:3a:7d:44:a9:b2:25:aa:df:62:5e:ff:14:a4:b6:ad:62:97:
3b:12:a4:4f:22:77:c0:5f:75:cd:d9:9a:03:c4:58:61:f8:8c:
9c:8b:1f:dc:9b:5c:39:91:e0:a4:d8:f2:1d:1d:7a:b9:eb:1e:
69:4b:8f:d0:69:96:00:40:20:36:97:30:0d:f8:1b:d6:3f:e1:
8c:08:fe:53:00:84:90:56:16:7d:e9:08:3a:9b:e9:b0:11:20:
09:a8:a8:6d:73:eb:15:4c:3a:79:d7:79:53:75:f2:2e:f3:2a:
28:4b:cd:65:db:38:4c:20:53:84:97:a3:d6:87:6e:12:86:37:
56:9a:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:53:13 2026 by rpki-client