Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: RA1Aj1YjpVw2RgN6Jem06+KyuCnZ9ujTWDD2tcpuelg=
Subject key identifier: DF:79:58:DC:64:66:EC:50:1E:53:AC:2D:2F:D1:B7:A8:BB:05:2F:44
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 01A0D4CBABBFAB0E49999DBC278F79575D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 19:01:52 +0000
Manifest this update: Thu 24 Sep 2026 19:01:52 +0000
Manifest next update: Fri 25 Sep 2026 19:01:52 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: 0O31kXxuslCrFrXO/o2lYMVV3NWkmUkFWnDzZRTMiow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ab:bf:ab:0e:49:99:9d:bc:27:8f:79:57:5d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Sep 24 19:01:52 2026 GMT
Not After : Sep 25 19:01:52 2026 GMT
Subject: CN=df7958dc6466ec501e53ac2d2fd1b7a8bb052f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:fc:ad:13:03:e2:17:dc:09:f3:f3:0b:6d:
a9:ff:83:a8:14:94:04:eb:1f:cf:45:02:62:3c:39:
d3:d2:25:07:60:29:36:e1:ae:93:22:d0:68:2f:95:
cd:fd:72:ca:86:ed:91:02:20:e3:b8:47:00:50:90:
97:29:d7:59:5f:2c:c9:78:51:50:77:22:b5:ca:67:
5e:2e:90:2b:b4:5b:7f:77:a6:13:fe:52:b3:bd:76:
11:30:2b:35:55:03:fc:af:06:57:8b:b8:48:11:4b:
93:b4:92:ae:4a:5a:0d:d4:31:17:b0:14:83:d2:36:
36:bc:89:95:ae:6f:68:38:b2:ce:0f:33:52:fe:b9:
fe:a7:6e:68:55:c9:16:c3:34:06:7d:a5:37:dc:3d:
6b:b8:1b:7e:e8:e6:b6:b9:ec:75:74:4b:5b:c0:f1:
4a:bb:66:10:86:dc:b4:cf:9d:4c:41:d7:ff:c5:ef:
2f:eb:70:b2:11:4b:6e:5b:1d:90:a6:af:4a:44:3c:
23:8c:58:f2:56:d5:6e:09:63:72:dd:4b:79:f7:ff:
8c:a1:94:ff:4b:5d:ed:59:04:52:d3:2b:b1:54:b2:
b1:82:79:a2:81:b9:1a:1b:50:7d:69:f1:76:01:5a:
27:88:64:e7:18:80:2d:40:34:05:2b:e1:1d:92:34:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:58:DC:64:66:EC:50:1E:53:AC:2D:2F:D1:B7:A8:BB:05:2F:44
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d0:39:5f:09:c1:ba:93:57:46:fe:d7:48:da:20:e8:e9:7a:
04:d4:85:f1:ee:7a:8a:1e:88:60:da:40:8b:1e:88:2c:fa:c3:
61:5e:37:65:c7:00:62:2c:a1:e2:36:ee:44:6e:48:a0:c7:11:
e2:e7:20:94:09:2e:99:d9:1e:23:4d:50:22:88:79:bd:a1:17:
f0:99:79:11:44:c5:0d:61:de:cf:d7:cf:40:63:bd:d4:8d:f2:
9e:c7:81:03:03:3e:4a:5a:14:28:1a:03:0f:7e:2f:f4:cd:bc:
b4:99:4c:c1:de:10:ce:f0:d6:a3:67:fe:bb:9c:46:5b:4a:5c:
57:c2:d0:40:7d:07:7c:56:79:55:40:49:97:7b:8f:0c:47:8e:
96:b4:c2:cc:85:2c:54:08:61:b6:26:e4:04:59:89:e0:c2:d3:
b5:45:b1:d3:33:4e:0c:31:f4:af:6a:e1:f2:cf:39:69:ea:11:
ed:b8:0d:db:a6:2a:36:c2:aa:97:4d:05:8e:1d:d5:a1:64:a2:
14:c4:56:8a:53:7f:04:51:00:a6:d0:aa:ad:19:35:15:86:93:
6f:d5:d4:b7:ac:57:6e:3f:e0:7e:79:6a:b6:e9:cc:3a:33:3b:
76:d5:6f:40:73:70:01:a3:e6:6c:92:c7:95:be:0b:db:21:42:
85:7c:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:22 2026 by rpki-client