
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: MKhwKiAb2aBEeRgv9PmKXXmUwA35E19vd1qp4zo0zDI=
Subject key identifier: FC:A1:A8:32:16:3C:F1:B6:A5:58:CA:05:B6:B7:EB:13:69:B0:22:FD
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 01A0D07FB7A455F74869B5E52C6052427578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 1A73
Signing time: Wed 23 Sep 2026 23:00:26 +0000
Manifest this update: Wed 23 Sep 2026 23:00:26 +0000
Manifest next update: Thu 24 Sep 2026 23:00:26 +0000
Files and hashes: 1: 0LQRzIDRNUdWBd9Dydr2N_iC5jw.roa (hash: JhEvtgcGlQ0ucbJzBQZW4Y2YIF7BmFzYqZx6rOiR+Uc=)
2: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: 3egSck0tBJY91mTzKvr7B89UMff/XhsJO7Q4i+vYIgQ=)
3: 3wh0CT_8NfW3KeKbg66Zbntk-98.roa (hash: XNvg+YgzCvz98HEiUChpuE5wzEJ7vEAr5EwgyO9TGdU=)
4: 5XJ-DEXD7beUVnBEqtMJ7gNlRBw.roa (hash: aC0+p4R1V2InyynQLchWTNU+ke3PRpV6ML3PSthcq44=)
5: VfrZiB9X7GpL3WyHAPaAM2MUAMM.roa (hash: Nbg44V0Y4hgBCfwuZPycL8mZRJRdH9RK2S/1UriBDlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:b7:a4:55:f7:48:69:b5:e5:2c:60:52:42:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Sep 23 23:00:26 2026 GMT
Not After : Sep 24 23:00:26 2026 GMT
Subject: CN=fca1a832163cf1b6a558ca05b6b7eb1369b022fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:bb:90:c0:6c:5b:15:67:eb:c7:c8:ae:e3:
ea:9b:61:f7:2f:c9:64:8e:c5:ef:06:7e:d8:47:20:
54:8e:c3:93:99:2d:d1:b7:a1:e9:a8:b3:a2:fc:82:
6a:ea:53:d9:30:11:8d:4d:14:6e:a1:59:fd:06:d7:
3d:d6:6f:95:20:f1:d2:39:be:48:02:96:08:35:50:
62:88:e4:0f:43:84:c4:f4:84:76:48:6b:5f:8a:33:
2e:fe:51:b7:d4:f5:e3:6e:70:e2:96:8e:b1:b0:37:
54:bf:38:37:5d:45:b1:a6:8c:fc:29:3c:93:f4:5d:
1c:ed:14:55:49:86:48:98:ee:b6:66:ba:e4:c7:11:
5c:67:5f:5e:ef:60:8c:79:68:2b:fd:0b:8b:5a:b9:
04:b7:ff:6e:f1:8d:09:41:e9:1e:2a:7d:af:d6:f4:
d1:4e:a5:75:95:e7:7f:65:38:e5:63:4f:fa:d0:06:
0f:7a:51:41:81:60:f8:4c:7f:ef:db:d2:3e:af:cf:
03:6c:8b:d9:a2:cb:bc:49:4c:df:fe:f0:b9:37:43:
5b:78:86:a7:c0:9e:7e:ce:79:68:b8:44:97:35:53:
f6:80:55:15:50:88:fc:de:3f:b1:68:f4:e4:c3:ac:
3a:50:0e:96:d8:0e:a5:3c:dc:24:7a:60:61:aa:0c:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:A8:32:16:3C:F1:B6:A5:58:CA:05:B6:B7:EB:13:69:B0:22:FD
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5c:a3:2e:2a:02:0f:92:d4:cc:1d:3a:32:12:6a:62:8c:d9:
56:a2:af:7d:0c:da:63:c8:f5:b8:4a:68:5c:74:b9:cc:85:7f:
76:a1:23:1f:ab:8a:f1:b4:0f:f6:3b:5f:a9:a5:39:28:4b:ab:
9a:a1:49:11:36:e0:59:66:6f:5c:a3:b6:b0:d4:eb:86:39:6e:
34:9c:b0:ca:5d:aa:45:36:ad:b6:cb:58:07:f8:4f:34:2b:be:
9d:58:bf:d7:58:8a:cf:85:18:d4:d8:f1:91:7e:b8:0b:45:5f:
1e:1e:ce:29:78:79:ff:66:01:69:81:4f:d7:8e:25:cc:9e:36:
ed:31:e6:2f:cb:3e:9f:cb:e0:7d:63:4e:f4:50:e8:f3:61:f1:
24:b6:d5:37:e2:9c:4f:a6:7e:5c:d2:5f:f0:78:74:f3:8b:89:
de:ca:52:cb:86:19:fc:11:a3:03:23:11:9f:b2:f7:8b:e1:83:
2b:f8:b9:3a:d1:2f:6a:ef:f5:07:e6:a9:a7:e8:76:91:e8:19:
e0:88:20:1f:88:4d:e7:ff:69:6d:3e:c3:5b:07:48:01:09:38:
8f:f4:30:b0:31:19:9c:03:fa:76:d8:63:4d:f8:f7:87:44:a5:
b6:f5:0e:75:ef:dd:85:f6:77:42:de:00:03:d0:1b:28:6a:c8:
e9:16:fa:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:58:59 2026 by rpki-client