Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
File: 2j9sNTSiCwTriKpxWOVqSqdTeog.mft (raw, json)
Hash identifier: 7vMi3V0CMRg7bVefLhy8uZqEnFNRs/dBz9H7zu9OY2I=
Subject key identifier: 75:DA:AA:4D:24:74:63:C4:9B:34:05:CC:02:61:E2:78:23:54:27:2A
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 01A0CA47187BA4736EC59F8C26B2F456A043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:51 +0000
Manifest this update: Tue 22 Sep 2026 18:00:51 +0000
Manifest next update: Wed 23 Sep 2026 18:00:51 +0000
Files and hashes: 1: 2j9sNTSiCwTriKpxWOVqSqdTeog.crl (hash: FEvWk7iSrC7qxFh0/VRqEXFRyJGMMkmSRbAm4sxCCQ8=)
2: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (hash: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=)
3: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (hash: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:18:7b:a4:73:6e:c5:9f:8c:26:b2:f4:56:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Sep 22 18:00:51 2026 GMT
Not After : Sep 23 18:00:51 2026 GMT
Subject: CN=75daaa4d247463c49b3405cc0261e2782354272a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:7d:37:7b:fa:2c:e7:11:2b:b0:80:73:68:
60:90:a8:ee:c5:66:15:41:d8:4b:b1:c3:90:5c:ec:
24:12:49:0a:9f:4e:53:e3:6f:c1:01:1b:b0:8c:f5:
ab:ce:a2:ef:14:c6:dd:1c:64:5d:34:03:21:e8:c0:
75:a7:2d:8d:13:68:b4:92:c9:00:21:e1:31:bd:5e:
36:41:be:22:43:4b:f1:d8:4e:49:9a:f7:86:18:61:
33:86:b0:d9:75:1e:cc:73:7b:85:6b:24:c3:a8:5c:
f4:a6:5c:5c:3b:f0:ff:03:64:e2:84:63:07:f5:bf:
54:62:9e:c6:45:4c:6d:46:bb:6d:ce:34:a0:32:2c:
52:7f:27:4a:e7:04:52:17:5a:50:c3:77:df:3c:08:
b0:d2:9e:d6:de:58:09:42:21:7b:d0:d7:60:93:af:
9f:3e:38:93:63:ea:61:75:9f:0d:f4:57:74:ab:45:
e2:89:9d:55:dc:8c:eb:21:2c:fa:5b:35:22:4f:94:
62:25:10:bd:34:60:77:d9:cc:2b:4c:77:cb:97:4c:
a1:39:95:3a:de:76:b6:53:cd:8c:d2:22:0e:b5:1e:
9e:37:e5:d9:fe:d2:43:05:bb:5f:50:ce:ea:d0:57:
a8:db:82:92:ac:b9:74:af:65:7c:57:32:db:58:b7:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:AA:4D:24:74:63:C4:9B:34:05:CC:02:61:E2:78:23:54:27:2A
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:95:1d:17:56:0c:92:cc:4a:9e:72:ec:2f:c7:40:4b:7f:65:
aa:d6:23:d0:33:2a:39:29:e1:71:39:ca:43:22:f8:3d:7a:43:
05:33:fe:2a:ce:79:ab:58:e5:96:ce:77:1b:bb:a5:28:d4:c3:
06:8e:5d:44:1d:2f:ea:76:b0:d9:be:db:a1:c3:29:48:ce:86:
c2:27:9d:83:24:2a:01:d6:be:eb:71:2e:54:74:7a:c6:d2:bb:
3e:8e:71:a6:d4:1d:5d:b6:f7:b3:d0:79:c3:3d:c8:d5:96:db:
6b:bf:73:ec:9b:b6:d0:ab:3c:45:cd:e7:75:0c:36:ef:03:ef:
6a:a8:41:90:7a:88:98:e2:0f:df:09:c3:88:50:38:66:38:16:
cb:52:f0:00:98:0f:ed:33:57:1b:c4:2d:df:c8:c1:00:de:a2:
0f:48:9f:cb:93:3e:e1:74:b8:28:1f:4c:2b:4f:99:75:ab:31:
72:6d:2e:e4:e5:15:6c:52:17:74:36:13:d0:2b:d2:cf:80:8a:
03:cc:b9:75:8b:97:61:2e:10:1e:aa:68:7e:ac:3d:14:62:8f:
0e:03:6f:c3:b9:2b:20:b6:74:0e:9a:e1:40:21:8a:c1:55:d8:
17:44:38:17:4d:68:3d:50:7d:4b:db:0c:a6:fc:c7:da:cc:96:
86:66:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:20 2026 by rpki-client