Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: JWCDos113NPGJ9ut2nXgVu3+jVZ8pirAnHWa23rjQXg=
Subject key identifier: F0:8A:F4:8F:4C:40:B5:9D:CC:35:76:D7:B8:6D:F2:5C:1E:4A:74:27
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 01A0D2A6284F3D1E33C6E1E17B7581542487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 09:01:39 +0000
Manifest this update: Thu 24 Sep 2026 09:01:39 +0000
Manifest next update: Fri 25 Sep 2026 09:01:39 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: b9ym78BNmqNpybGcYAaPuLoSr+8m9yo2WAffXxtuZfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:28:4f:3d:1e:33:c6:e1:e1:7b:75:81:54:24:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Sep 24 09:01:39 2026 GMT
Not After : Sep 25 09:01:39 2026 GMT
Subject: CN=f08af48f4c40b59dcc3576d7b86df25c1e4a7427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:7c:19:09:a1:30:19:87:92:ce:93:9d:ef:
41:be:6a:ba:3a:85:e8:57:87:8c:a3:6d:4f:a2:5b:
30:c0:30:bb:e3:3e:b0:18:e7:d2:aa:47:72:bc:38:
3f:4b:83:3a:81:fe:7d:07:a3:1b:ae:5a:4d:6c:dd:
d4:dd:d4:2f:25:26:b4:55:ab:b0:1c:37:ac:a4:5a:
40:40:ed:b7:ff:3c:90:28:b3:6c:b1:f7:05:76:fd:
9d:7e:0d:f7:19:e1:ff:f8:a6:37:07:75:28:25:ac:
93:3f:d6:04:0d:02:3f:f5:33:21:ff:fe:26:21:2e:
99:15:08:02:60:ba:94:3d:6d:82:23:c8:65:16:9d:
40:57:f1:66:9e:1e:a1:9d:c3:f0:46:f8:2f:4c:3b:
90:59:c9:97:4a:8f:65:bb:f6:6a:c8:62:57:6f:44:
77:62:c0:75:96:1d:29:91:66:eb:96:8b:b6:09:2e:
07:55:ae:c7:74:78:c9:71:2b:6d:dd:5f:3f:c9:67:
4e:e2:ad:dc:fe:76:c9:ea:7d:e5:dd:4b:31:e2:9e:
01:09:49:e9:67:ec:e9:fb:7d:d4:07:6f:d2:3e:86:
24:d4:9f:dd:35:90:ef:46:94:0f:30:bf:73:20:dc:
e1:bf:04:2a:f0:33:e0:f2:1a:34:0c:e3:93:b6:85:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:F4:8F:4C:40:B5:9D:CC:35:76:D7:B8:6D:F2:5C:1E:4A:74:27
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:70:ea:10:43:cf:8d:34:c7:7d:6a:09:0a:ed:98:62:8f:
5f:fd:d0:09:2e:9c:b6:a1:90:de:2c:ea:f4:0f:71:0c:b5:39:
08:f5:17:46:4b:c7:ae:b7:0a:a3:0e:40:9b:2a:e0:50:89:a0:
21:aa:83:4f:ff:60:34:3b:70:f6:67:9f:c8:c3:44:00:18:e0:
66:d0:be:65:a6:05:2e:ec:f9:74:83:35:96:f8:0e:8d:bc:a9:
f7:da:fe:2e:3b:6b:79:41:33:f0:7d:98:69:1d:20:7e:3a:ba:
6d:3d:a2:4c:33:c4:2a:d3:10:3f:a4:b4:b5:7d:ef:82:5d:9e:
78:20:c4:9e:30:7b:f3:1a:43:59:3e:96:8b:c3:01:f5:30:29:
29:13:dd:74:d0:c4:28:d6:79:94:fe:9f:b2:21:14:35:68:8b:
50:f4:e3:e7:ff:fb:72:c3:9c:89:5c:0d:41:ef:c4:7c:1b:48:
29:eb:ec:b0:2f:08:1f:89:8d:12:9c:c0:56:5f:d1:f1:3a:7b:
3d:fd:f8:fc:31:cd:ee:36:0b:05:e9:92:e3:d5:7b:83:b1:35:
13:2e:44:6e:32:2e:67:92:6b:c7:68:4b:a4:4f:ce:a7:ca:56:
d1:04:cb:0e:58:90:4b:f0:ac:c4:17:86:68:2c:eb:dd:7f:23:
32:02:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:31 2026 by rpki-client