Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: 0YRGpEI+q/ulqNDbzoCiN++EhwLor7piyFl4udpBe8c=
Subject key identifier: 5A:A1:47:98:9F:67:74:53:E8:D2:FC:B7:27:D7:05:10:2E:F3:35:51
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 019D28F26BC1826EE96E13AACC50FC89D9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 17BB
Signing time: Thu 26 Mar 2026 07:01:09 +0000
Manifest this update: Thu 26 Mar 2026 07:01:09 +0000
Manifest next update: Fri 27 Mar 2026 07:01:09 +0000
Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: oKfJlaq3Ak0SHQPk8rTjGibPIuwySuxsUVLlALuKgag=)
3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6b:c1:82:6e:e9:6e:13:aa:cc:50:fc:89:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Mar 26 07:01:09 2026 GMT
Not After : Mar 27 07:01:09 2026 GMT
Subject: CN=5aa147989f677453e8d2fcb727d705102ef33551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:94:45:ec:36:f5:31:af:be:16:7c:2b:9f:
2a:f0:41:f7:47:f6:d4:64:53:ec:75:62:49:db:e0:
d6:be:7f:00:ca:76:3c:c9:00:c3:88:12:bb:a9:cd:
78:7c:51:66:8d:73:4d:fa:1d:ec:3c:14:19:3f:dc:
96:84:85:7a:b4:85:5e:99:7e:31:0a:48:7e:9e:ed:
25:6c:9c:d4:7f:87:00:7b:62:83:dd:78:5f:1e:ee:
9c:6c:f4:0d:fa:e6:f9:f0:a4:58:77:91:64:1c:4f:
df:f4:09:20:08:71:62:af:2c:1a:f5:05:54:88:96:
0f:cb:14:d3:99:03:75:96:f7:bd:35:3d:7c:62:80:
bc:51:78:06:55:3c:f0:f4:9f:2d:56:22:1e:24:c9:
3b:ca:4a:eb:b7:e0:e4:d3:20:d3:e0:17:6b:92:d8:
be:f0:10:e5:4b:d5:82:52:01:a6:5b:c4:a1:5b:4f:
64:d9:ab:0f:0f:fd:cc:9c:5f:12:bd:2e:ae:00:b1:
7f:63:4c:43:fd:25:df:b4:2e:41:96:09:48:fc:53:
5c:24:a5:47:88:c7:fc:0a:6e:74:c9:c6:37:1c:6e:
81:57:2e:1b:ab:2f:bf:b6:9a:0d:57:b1:7e:7d:3f:
7a:66:05:8c:f5:f8:72:05:36:ce:e6:8d:27:bd:02:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:47:98:9F:67:74:53:E8:D2:FC:B7:27:D7:05:10:2E:F3:35:51
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:63:83:97:54:e2:63:f3:ad:ef:6f:25:94:f5:d8:5c:e0:9a:
df:0c:a8:ca:10:8d:de:ba:e1:c4:a3:9e:da:56:83:fe:c1:d4:
e5:4c:8f:4c:41:3c:e8:93:15:3a:9f:99:f2:02:66:76:e6:38:
65:ee:48:94:3b:6a:66:28:1d:f0:7a:82:4f:31:7e:70:10:1c:
ef:bd:e1:15:fa:c1:1c:58:64:2f:4f:28:59:4f:57:5a:c5:2f:
8d:5b:00:df:80:5d:18:a9:f6:c1:03:d9:2e:60:18:b7:01:b6:
75:5e:eb:05:78:c9:8a:a8:4a:ac:f8:c5:5b:1c:d3:95:3c:5b:
6a:68:7f:37:e8:4f:d2:38:eb:2a:72:80:fd:a1:fd:7c:a1:f5:
41:f4:02:eb:3a:76:75:94:65:39:53:05:cb:12:68:43:a4:00:
d4:83:e6:7d:37:9b:2a:43:2f:52:7f:9a:9f:4c:10:39:34:70:
b8:2f:06:57:e2:87:8b:bf:c9:9c:9d:ef:cf:23:8b:9c:3c:e3:
10:1b:d4:f5:d5:02:0c:14:a9:51:00:75:36:d7:05:48:8b:08:
6b:19:7b:d5:a7:00:21:d1:4e:a7:f2:e6:1f:dc:ed:d1:a1:fa:
75:c3:d8:e4:68:25:70:f5:e3:7a:4f:39:96:b4:e0:c5:49:fd:
80:fd:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:17 2026 by rpki-client