Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: /KUFOZOr2Liy2/h3937rxEgxG9hAGVmZz2nBFx9JasM=
Subject key identifier: D2:B0:21:2F:9E:01:A0:66:07:3B:B9:B7:8C:1F:3B:1D:15:92:66:D3
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 019D2703EA1EA64EB31B0FD5C56553D82F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 17BA
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: mkQax6RXPBqzuL+SYKpNvgGSX6HnGnVEDOwaU4KYkR0=)
3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ea:1e:a6:4e:b3:1b:0f:d5:c5:65:53:d8:2f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=d2b0212f9e01a066073bb9b78c1f3b1d159266d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:1e:e6:93:bd:15:5b:2d:52:0c:b0:3d:07:
60:dc:c4:b2:61:13:4e:cd:21:c4:71:0c:e2:84:c6:
71:e6:83:1f:fb:a2:e6:1d:e1:07:c3:d5:81:e5:98:
96:81:26:85:b3:64:0e:d8:19:34:63:42:b5:21:31:
6c:b1:15:fb:fb:23:04:07:c0:c6:37:e9:80:d5:1b:
0c:7c:ee:33:f8:f7:78:69:ac:35:05:9e:2c:78:7b:
0b:5d:c9:3e:49:14:1a:b9:d0:a7:9f:78:80:66:99:
7c:89:ee:fd:ab:8f:f6:40:6f:32:b0:26:32:a0:60:
c1:c8:ca:78:b3:0e:8f:6a:2d:d4:38:d1:ac:88:27:
3e:7c:28:79:98:bd:55:f0:56:4c:e8:5c:52:74:84:
7e:a2:d8:15:a7:dc:99:de:e8:d9:bf:f8:d7:c7:27:
04:61:03:dd:ea:8a:43:31:17:42:83:c8:76:fe:bf:
6f:a1:2c:01:11:37:87:d4:ab:6b:1b:0d:fb:a8:4b:
a6:13:c0:7f:0c:61:c7:4a:af:4b:82:02:12:2e:56:
1e:2b:55:a4:90:50:e9:fe:46:df:45:5a:7a:09:8f:
e5:12:0a:20:83:ee:a1:70:73:0e:f1:21:9b:94:2c:
c1:7f:18:a5:39:27:e9:fb:3b:bf:f5:c2:8d:a8:27:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:21:2F:9E:01:A0:66:07:3B:B9:B7:8C:1F:3B:1D:15:92:66:D3
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:b7:27:74:06:e6:c3:f7:87:8a:06:91:3f:0d:41:fb:45:
24:ce:1e:16:7e:44:68:74:b4:71:fd:6e:41:0e:2d:ed:ba:5b:
bd:ee:8a:7c:03:80:a8:75:3b:d4:03:1b:ed:d9:a1:ce:6a:af:
db:9a:a9:4e:5c:4d:47:be:73:8a:99:e4:37:25:f0:5d:9f:ad:
c6:6a:b3:ad:b0:4e:82:1e:b1:5c:a4:eb:05:c2:a5:c0:b6:14:
7b:02:ed:9c:4f:5c:73:72:96:dc:15:9a:c4:42:25:7d:a1:53:
67:f7:9f:4b:90:83:b3:11:d8:c4:d7:eb:c8:78:54:7d:11:fe:
a6:9b:20:59:1f:95:1b:67:78:c8:01:10:d4:83:21:a8:b5:03:
f9:20:87:cc:bd:7a:ad:6d:fb:b8:38:ea:00:b0:85:f9:6e:a3:
39:85:66:ee:4b:6c:86:c3:1c:72:b5:6a:34:25:09:13:71:82:
e2:8a:5f:da:96:fc:20:63:4c:9c:7f:c8:09:05:d1:45:a4:37:
4d:3d:a6:f4:6b:d2:12:13:24:c0:ed:73:59:ec:01:dc:03:28:
b9:50:bb:35:52:f7:55:90:bc:4b:a9:86:2f:d1:ab:ab:d1:d1:
b1:a9:ae:76:42:4c:f9:d8:72:22:ae:aa:2d:83:72:ce:2f:36:
6c:e1:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:16 2026 by rpki-client