Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: rkSW35rozmA1eXIuVqKZ3ktbjaWOwvuZLzBFupKerXU=
Subject key identifier: B8:16:36:3A:C7:91:7A:03:89:20:74:7F:48:2D:0B:0D:E4:3C:F6:2C
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 019D265ECD1D50130F1F8549BB4EC05BC813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: bQCZugbTb5HDFecPvi5fppbsQt/f781dZHJpmLtazwc=)
2: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
3: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
4: pVvMXgDr2GkTCSK_5f1ePFciEQg.roa (hash: mh5BsWHtCJfZ4gQ+iPPY97N+I0ndF/4yXsY9SvO6gqo=)
5: yKo-4icwyEpIS-Zvd5t9wSgTaEc.roa (hash: f8cW6zKbbrWGdT4UYGeMYoJzkCOMROgC8fVMGAq5axA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cd:1d:50:13:0f:1f:85:49:bb:4e:c0:5b:c8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=b816363ac7917a038920747f482d0b0de43cf62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:41:9c:60:07:c0:7a:73:f5:0c:d7:32:7a:
1a:b3:36:fc:0b:09:7e:a8:a7:ff:34:9e:97:a7:98:
24:97:ef:b6:f3:71:5f:76:7d:b4:09:20:a3:04:dd:
40:d4:90:56:45:4a:c9:60:73:6d:6a:dd:ec:d8:2c:
a7:13:ad:99:92:f7:ee:62:2c:34:a7:4e:f9:dd:9f:
ef:a0:c3:0b:60:98:da:bd:f4:2e:49:ac:ab:cc:e0:
ea:25:f1:5a:b4:33:97:9f:db:c8:1b:65:83:d6:38:
23:0a:b7:3c:11:37:33:b1:ae:93:45:fd:ae:f4:8b:
e7:c2:7c:f1:08:ff:52:a1:e0:3e:e3:98:b9:f2:50:
2c:bb:a0:71:54:8b:13:28:06:dc:60:47:91:0a:50:
34:8f:66:1b:7b:03:15:82:f7:fa:0a:88:96:e3:74:
86:a7:22:df:8b:9b:29:09:bc:8c:10:5f:d4:b0:18:
a1:82:70:36:80:0d:d4:17:f5:66:46:60:33:8c:b1:
b6:8f:2f:76:03:1f:c6:b5:5c:cb:b9:1d:c6:7f:cf:
95:1e:3f:0c:5b:8f:9a:d1:04:55:89:c9:eb:98:4c:
86:a0:e3:f3:a1:bb:85:7d:a7:d2:a9:bb:3c:ce:fe:
ba:c1:3b:bb:14:c0:5a:fb:c9:ad:44:41:53:de:10:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:36:3A:C7:91:7A:03:89:20:74:7F:48:2D:0B:0D:E4:3C:F6:2C
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:60:a5:c8:0a:fd:91:1c:17:7a:83:b6:5e:73:60:ad:bc:
ac:5b:9e:ca:aa:4e:2d:f1:d2:18:cd:23:08:30:77:8c:e6:0b:
2b:ca:81:a4:05:f4:d2:bd:04:94:c2:b2:96:4b:bf:5a:5e:5c:
7a:fe:c4:a1:83:ca:78:31:22:3a:3e:31:36:f2:0d:82:41:fa:
7f:9c:0f:a1:3c:64:5f:16:e5:b1:43:9e:d0:1e:7c:b1:59:d4:
dd:8b:2f:91:f9:ac:4b:8f:b4:9b:51:61:c0:04:c4:ea:43:75:
29:e4:42:10:8b:9c:fd:51:09:16:90:ad:9c:62:59:e8:d0:1e:
9e:46:c1:d9:ad:65:51:c9:76:fd:e2:5d:ce:22:67:6c:f0:2f:
90:d8:11:dc:a3:de:8a:c3:dc:4f:ea:a2:5d:0c:c1:63:f4:d9:
be:bf:60:b4:4e:88:36:76:41:5c:1b:86:00:af:1a:29:25:dd:
0f:cf:05:4a:f1:aa:77:6d:d5:a7:e2:86:f3:c7:df:95:78:ab:
2c:66:9b:d0:7e:d4:9e:a5:e1:ad:84:c3:b4:0d:03:9b:3d:40:
82:1c:20:a9:62:49:35:6a:c0:4b:36:8f:b8:5e:bc:c5:78:d0:
f5:dc:8c:ad:b8:25:8c:c9:99:04:65:61:05:7c:f1:9b:fa:77:
af:f9:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:43 2026 by rpki-client