Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: RfiYVqfn2n88woEFWCGvTz/IkhhFtYg1eD/egSoLVU0=
Subject key identifier: FB:C7:BC:BA:9A:4C:EB:84:C5:5E:96:1B:E9:38:A6:53:18:09:E4:E6
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019E1DFE8EA285D0B52CC9CE611CE490F704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0FAD
Signing time: Tue 12 May 2026 21:01:22 +0000
Manifest this update: Tue 12 May 2026 21:01:22 +0000
Manifest next update: Wed 13 May 2026 21:01:22 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: 4wCZCJtaPL3Y/e994JGlNqkc37KGSCWzWh7LlDHcNf8=)
2: GJE_tPOgXeLJ3DgOojgp5O691hA.roa (hash: 4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=)
3: PIER6XCYCxthUakxWv-c4X999-4.roa (hash: aFXr3MnR3gymMlu+fiuuP0AS3tEEg0TArF5MnDX4EOI=)
4: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (hash: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:8e:a2:85:d0:b5:2c:c9:ce:61:1c:e4:90:f7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: May 12 21:01:22 2026 GMT
Not After : May 13 21:01:22 2026 GMT
Subject: CN=fbc7bcba9a4ceb84c55e961be938a6531809e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:2f:fb:72:df:b1:89:8b:19:99:fe:92:0a:
32:f5:8a:60:c3:39:21:dc:89:85:01:01:04:30:50:
8c:6c:92:90:22:60:39:81:1b:19:25:6e:26:b1:52:
d1:76:cf:1a:b6:32:c8:04:11:7f:02:94:8f:f1:f9:
ea:31:4a:78:eb:05:c2:1c:9a:54:e9:d1:90:6c:f1:
a8:8a:3e:95:f9:d5:4a:b6:9d:e7:13:ba:91:e1:6d:
68:05:d6:71:7d:75:79:d6:d1:ca:a8:a5:45:66:90:
b0:35:85:78:28:08:5f:41:f6:12:6c:57:6f:d0:45:
0b:95:22:b6:b9:f4:8a:04:96:d0:ce:3e:1d:cd:a9:
3f:04:35:cf:e5:5c:af:48:ca:d9:96:1a:64:07:dc:
dd:42:f4:2d:38:57:a5:64:21:80:06:70:50:e1:89:
ef:12:5b:db:ab:f6:c3:10:d2:a2:9f:12:98:3f:fd:
d6:01:a8:89:d2:10:0f:69:a0:14:88:ab:e0:fc:7f:
ea:b8:cf:cb:5e:8e:6f:87:7d:87:81:49:11:c6:58:
7b:84:a4:45:45:8c:5e:87:57:01:ea:0b:7d:3e:7f:
9e:d5:50:c3:01:33:10:f3:81:ac:a8:0c:c6:4c:4a:
36:4f:17:4a:f3:7c:73:ed:7b:3f:99:ba:3f:21:67:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C7:BC:BA:9A:4C:EB:84:C5:5E:96:1B:E9:38:A6:53:18:09:E4:E6
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:0c:e6:ae:78:d3:a9:01:7c:52:5f:02:e9:20:cf:09:d9:
27:bc:fa:bb:53:b7:3a:5d:b2:80:fb:4f:0f:d5:85:30:88:b0:
6d:6b:61:17:3a:e7:57:70:9b:8e:20:c6:7b:1f:e9:bb:ef:f2:
46:f9:69:22:3c:19:0c:4d:17:2f:f4:67:aa:6a:bb:f4:30:0c:
a7:20:51:ac:b9:26:0e:4b:e1:8d:dd:30:92:d5:6a:b4:0a:43:
c9:d1:dc:2d:a4:10:e0:32:a5:1c:21:7e:f0:a9:08:30:a8:6a:
dc:f9:4d:28:76:90:cf:26:49:fe:03:9e:28:a7:da:cc:dd:59:
32:3d:4d:4f:20:dc:e2:10:fb:a1:30:93:67:25:f2:cd:8f:d4:
5b:0f:b3:5a:d7:38:1e:77:30:a4:3c:b9:c8:e4:a2:e9:05:12:
69:51:96:90:88:8f:73:d2:f7:a5:6a:ce:7c:e5:27:e3:cf:bf:
b3:d3:e7:93:b3:c9:2f:fc:f0:98:9a:f3:9a:ca:2a:4a:98:38:
18:cc:c6:d5:bd:10:b8:dc:6d:57:dd:a7:42:0e:f0:9d:01:0d:
5b:c4:b7:78:9d:a6:c3:a7:29:36:80:93:79:6e:4e:2e:92:e1:
72:ce:64:50:b0:71:29:ee:cf:31:9a:21:c4:29:09:3c:59:a5:
7f:6f:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:20 2026 by rpki-client