Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: eAKbp9HzDQzPQLiOCLigZFJk6WCSTefOmCwAWn0f4R4=
Subject key identifier: E3:5B:C1:85:3B:DD:47:C4:31:18:91:C0:89:18:87:7A:7D:3F:E8:9E
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019D2628A8DF81A5B8834F165A346517C0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:01:31 +0000
Manifest this update: Wed 25 Mar 2026 18:01:31 +0000
Manifest next update: Thu 26 Mar 2026 18:01:31 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: noFOtA4IogU0zKppo1gGSQaeK0uuo9ZX7uj7sYM2O4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:a8:df:81:a5:b8:83:4f:16:5a:34:65:17:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Mar 25 18:01:31 2026 GMT
Not After : Mar 26 18:01:31 2026 GMT
Subject: CN=e35bc1853bdd47c4311891c08918877a7d3fe89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:65:e5:35:3d:f9:2a:7d:3d:9e:cc:e8:1e:
1c:fd:86:86:d6:c3:af:08:08:e2:f3:1d:b4:bc:2e:
78:b6:53:81:c8:9d:c7:68:17:2f:1e:55:2e:1d:27:
e6:fb:5d:21:70:56:95:54:cf:e9:40:0b:3b:4e:b6:
52:de:74:07:fb:2c:b5:c4:b5:c0:99:97:60:9c:a0:
3f:e8:37:84:b7:f3:5c:a3:80:25:70:78:9e:24:19:
bc:f2:0b:eb:53:a9:73:46:e4:e7:af:62:46:e2:a5:
db:3d:f2:39:6e:d5:40:0e:c6:4c:4c:74:20:9f:09:
57:ab:8b:54:11:b3:41:b2:fa:27:5a:cd:1a:7d:b5:
45:d9:0f:8c:e8:ac:91:24:3b:d9:b8:27:68:26:8c:
10:55:75:a7:0b:66:c8:71:fa:51:e4:af:9d:4f:c1:
e7:22:74:e4:d5:fc:ba:a8:4e:f3:61:40:0a:7f:68:
e0:e0:2d:35:3e:91:49:3d:c5:ff:4e:22:4c:d1:36:
42:87:66:f1:e3:f1:5c:cb:44:40:29:b0:83:26:ac:
0f:75:f0:ec:53:e5:24:62:97:ff:e6:34:06:a1:7b:
9f:0c:b4:c8:f0:1d:67:30:e5:d3:35:73:04:e4:c5:
a7:9a:a2:aa:cb:43:21:7a:38:41:c4:83:b9:86:20:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:C1:85:3B:DD:47:C4:31:18:91:C0:89:18:87:7A:7D:3F:E8:9E
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:98:ed:e2:ee:7c:d8:dc:85:c0:5a:3b:ad:b0:1b:a2:13:a7:
96:99:7a:89:6a:d9:35:8c:b1:24:8c:f9:b5:c4:13:81:af:f1:
4d:2b:59:e6:f3:c9:b0:28:84:fe:15:b1:7d:43:fd:bd:ba:f1:
9b:24:78:94:8b:29:25:ee:8b:5c:b3:70:6c:a0:b1:f6:bc:d8:
56:b6:2c:df:6b:bb:15:82:c2:16:41:09:cb:36:ea:52:22:57:
b2:64:f1:13:6e:af:9c:dc:a4:7c:22:27:0c:ae:55:d5:61:c9:
6a:ae:fc:20:70:ff:ce:3d:1c:f5:68:a5:e0:2a:c4:0e:90:f1:
fa:04:b6:c3:c7:ca:48:75:25:97:b4:a2:0f:f9:b4:c0:91:01:
5d:41:b0:7d:98:f5:b8:d0:e3:b3:4c:74:0e:e0:bb:19:84:ac:
04:4a:94:4b:cc:34:52:7d:ce:b0:fa:fb:06:9e:5f:8f:96:49:
5d:da:f9:98:ce:7b:01:f3:11:3e:ac:33:b7:fb:87:51:14:7e:
07:56:9e:4f:8b:68:a7:78:f7:2f:b2:a6:bf:5f:38:cd:96:4d:
4d:91:d9:db:cc:fd:a9:d2:a4:db:9c:e8:33:82:97:fa:d5:8b:
fc:99:57:cd:6b:bd:da:82:64:96:8b:3b:a0:84:b0:7f:16:6b:
f8:02:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client