Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: PyNyLDdIIT1i9DPlKyXRSO1NAKgHoRX6Ybov+OhoQCM=
Subject key identifier: 5D:9B:25:A5:10:77:41:A9:4C:F4:17:FB:AA:91:83:B3:A1:D3:04:24
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 01A0DC4DF2763C6CD835F53A97F6D5F168A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 06:01:30 +0000
Manifest this update: Sat 26 Sep 2026 06:01:30 +0000
Manifest next update: Sun 27 Sep 2026 06:01:30 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: BmlWsL0WEVBYOEQuY/LzkhwaLRpruiaSR51mYMZ4hzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:f2:76:3c:6c:d8:35:f5:3a:97:f6:d5:f1:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Sep 26 06:01:30 2026 GMT
Not After : Sep 27 06:01:30 2026 GMT
Subject: CN=5d9b25a5107741a94cf417fbaa9183b3a1d30424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:34:19:d3:75:89:a9:5e:2c:c2:86:91:2e:
b3:a0:43:05:51:60:53:e1:ec:b0:4a:a2:b3:63:9d:
31:32:5f:8d:09:6d:ac:cc:e4:59:64:09:da:d9:3c:
8d:a8:92:56:57:aa:62:91:87:49:8b:87:f7:45:e4:
a4:c0:e7:7d:4d:ae:0c:89:5a:e1:d3:e5:e8:36:a4:
6d:c3:74:9b:a8:86:4a:27:bd:61:d6:ef:e5:7b:76:
ce:45:53:07:17:5e:2e:d9:ee:e0:96:a2:06:0d:f2:
f1:11:29:59:c4:13:00:ba:1e:07:66:cd:9e:e8:c8:
e7:88:df:f9:f3:75:86:0b:59:85:5c:64:d8:8d:8f:
e8:f8:27:3b:10:24:91:d2:9f:c0:1f:85:22:ad:eb:
72:4f:bc:62:c9:40:f1:92:59:73:5d:27:8e:f6:cd:
4e:77:4f:b4:19:45:2e:13:be:76:d9:de:e3:1a:c5:
ef:e1:6c:b9:55:02:26:16:7e:2b:48:c3:53:85:cf:
5c:81:89:1e:d6:71:c5:39:c2:a3:a2:5b:bb:93:29:
9f:cc:eb:b6:e4:bf:aa:50:c6:3a:15:00:ac:ff:cb:
ae:e3:40:ef:49:28:f8:c5:c4:bc:05:30:f1:69:2e:
99:13:76:74:36:c7:d4:be:3c:a4:c7:8d:5d:f2:c6:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:25:A5:10:77:41:A9:4C:F4:17:FB:AA:91:83:B3:A1:D3:04:24
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c8:32:ee:7c:5a:ac:39:03:a7:25:2d:83:f9:a4:20:ed:f9:
9e:30:34:b6:0c:b6:e6:56:3f:19:39:5e:3f:18:a8:e7:ef:a6:
dc:be:75:1f:c7:54:9a:1f:26:6e:c2:29:6f:c0:d1:fc:11:97:
99:ea:c0:9a:40:2d:63:1f:84:69:3c:6c:bc:69:98:42:fa:cb:
7c:e6:8e:a8:fd:91:b6:4e:13:41:47:21:f4:63:a6:2b:31:2c:
ad:ea:4d:99:c6:c4:7b:d0:b9:66:62:97:62:5f:e3:06:48:54:
20:cc:19:20:3f:95:64:c8:26:8a:e7:e0:6a:03:da:77:6a:78:
d3:11:20:05:47:f0:30:02:dc:e4:7e:e9:ab:90:c6:51:63:26:
d4:7f:e6:69:67:8b:db:83:d3:c6:fa:f0:52:7b:d1:dc:c7:f0:
eb:e7:89:07:0c:cf:12:53:01:55:c8:84:53:6a:74:67:fa:0e:
a7:e4:60:bf:14:ae:50:53:82:af:57:d1:a8:23:d7:af:0c:1a:
db:b7:7d:b4:07:4d:38:c5:0c:60:0c:46:e3:6f:de:63:61:6b:
74:32:22:1d:19:b7:5d:b4:6a:33:04:d9:fe:27:dc:f0:fc:4d:
cd:9f:16:c5:aa:7a:b3:df:13:00:8e:5a:64:05:c2:93:63:7b:
cd:2d:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:24:51 2026 by rpki-client