Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: V+MBnvJDaliidzp/85eUSsRRhvCugTBNySeTD7F80YI=
Subject key identifier: FA:68:22:82:65:4F:8F:65:0B:8D:57:3B:39:A3:2F:D3:F0:2D:31:FA
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 019D265F89B5952E5AC64EC6C1C6C07FC336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: +/95qV2FMiKDhpY4x2zj1Xa0Cjob3+eM6wdlzciCugs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:89:b5:95:2e:5a:c6:4e:c6:c1:c6:c0:7f:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=fa682282654f8f650b8d573b39a32fd3f02d31fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:34:6c:1f:4d:98:72:fc:d1:b8:02:d6:65:
c9:29:e9:d8:e7:c6:a6:6f:21:2b:a2:5a:cf:d2:ee:
67:d1:7d:08:80:90:f4:92:e9:7b:82:69:60:a0:8b:
53:ae:6b:7b:14:1e:69:e1:23:c8:ec:0d:36:60:e9:
25:9e:f2:c0:13:88:de:79:0f:be:f4:31:40:d4:61:
69:a7:1c:d1:b5:f1:a3:4c:f6:76:91:b0:a5:a4:a7:
d3:8d:2e:41:9d:d4:9f:8e:72:e7:a6:ec:24:ce:04:
f7:dd:34:ce:95:85:39:37:79:8a:40:07:77:0a:db:
b6:a6:71:9a:05:c3:b1:21:db:aa:8e:3f:ad:58:70:
30:a8:14:f6:5c:d1:f5:7d:24:37:74:d3:56:88:c2:
10:08:75:53:e5:f7:c2:9f:67:7c:ca:d9:77:f7:e7:
4c:da:12:54:c4:99:37:0a:2d:e0:a7:c2:9e:ba:b9:
ff:71:0f:e4:80:3e:3c:2d:b4:38:a3:de:f2:fb:66:
0d:bc:83:c0:e1:e2:76:bf:ce:9e:a4:95:ad:27:8e:
97:c9:b5:ee:41:9a:a4:07:30:81:3f:ad:4e:a0:d6:
1c:42:d4:89:d0:79:7c:08:44:17:06:e2:fc:93:ee:
93:fa:fb:8f:ad:d7:e7:fc:26:c6:8c:43:a2:bf:a0:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:22:82:65:4F:8F:65:0B:8D:57:3B:39:A3:2F:D3:F0:2D:31:FA
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:12:77:25:e4:5b:c8:bc:f5:a0:7f:0a:cc:04:b9:37:a1:
da:0a:2d:99:a2:68:8c:aa:ac:ce:59:da:2a:aa:2b:0a:01:96:
61:48:e5:d7:3f:99:08:e2:d4:a2:43:0a:7c:eb:b8:1f:87:50:
f5:d8:7a:49:53:57:c9:80:8f:85:95:0e:f5:e1:06:37:9e:fa:
1e:f6:7a:62:84:9d:b6:d9:98:9c:6b:fc:e3:82:3e:fc:0c:00:
db:6d:c4:23:ec:5a:e1:7c:76:d0:39:52:39:90:d6:5e:93:eb:
c3:43:64:45:c0:33:15:e3:4a:3a:4b:fd:17:f5:6f:22:ef:ef:
0b:3a:f9:49:b3:00:34:e0:26:cb:0b:80:f4:fb:62:cb:d7:bb:
70:9b:a5:d8:11:fd:17:3c:97:76:ae:87:e2:8f:1e:22:b7:70:
ff:c4:5b:0e:1c:95:8b:36:e1:5d:27:82:e6:cd:fc:fc:4b:57:
75:a6:9a:d1:e8:d8:7e:0e:7d:f9:44:a5:86:75:3c:39:85:71:
95:04:b2:2c:0f:ca:aa:c4:90:f2:47:c0:10:15:3f:96:25:bb:
7f:4c:6b:57:b9:c6:4c:8d:76:f0:b4:7c:ef:b1:0b:bb:29:b9:
7f:ca:0f:c7:b2:a1:c8:77:8e:2f:4d:d6:38:3f:6f:3f:dd:af:
6c:6e:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:11 2026 by rpki-client