Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
File: 2j9sNTSiCwTriKpxWOVqSqdTeog.mft (raw, json)
Hash identifier: IeMG7LqXijECyVE4shB7+oYTy8oFkD9MBdz1ftOofAw=
Subject key identifier: 93:78:EB:7F:A7:21:8B:47:C2:A8:88:9D:FF:43:C4:DB:2C:61:0E:79
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 019F8F7EBE13AD27D17488D5CFAF012C629E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:15 +0000
Manifest this update: Thu 23 Jul 2026 15:01:15 +0000
Manifest next update: Fri 24 Jul 2026 15:01:15 +0000
Files and hashes: 1: 2j9sNTSiCwTriKpxWOVqSqdTeog.crl (hash: XI7g5QE5AAX0OdgWHoUuEi3PlmW9BWg55QjbSho6faI=)
2: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (hash: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=)
3: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (hash: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:be:13:ad:27:d1:74:88:d5:cf:af:01:2c:62:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Jul 23 15:01:15 2026 GMT
Not After : Jul 24 15:01:15 2026 GMT
Subject: CN=9378eb7fa7218b47c2a8889dff43c4db2c610e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:bf:e4:9f:c2:1d:ff:74:a2:77:46:a1:0f:
1d:f9:75:68:b1:9a:48:5f:d6:48:86:11:95:ba:5e:
b0:3d:08:9e:27:d6:f8:da:22:a6:d3:f2:c8:90:50:
15:10:1d:34:0c:ed:88:8d:cf:2d:7f:43:fc:54:e4:
2f:26:da:6b:b0:48:d3:fd:a4:cc:fb:13:d1:f6:a5:
09:fc:e2:31:59:a1:af:be:b4:4b:43:14:99:df:94:
d0:a3:04:a2:0b:2d:0c:cc:02:7f:aa:45:f1:82:99:
65:21:66:ce:ea:2f:74:4e:80:9c:4b:0f:18:81:7a:
2f:54:89:38:66:43:a5:47:63:cf:d7:1e:3e:d1:61:
2e:c1:ae:c4:74:f1:07:6d:3c:b7:83:2a:3a:7a:81:
80:f1:c8:2b:84:d6:63:43:c1:aa:e3:62:53:1d:5e:
a6:f5:e5:bb:e7:ec:ef:26:ce:81:37:8e:cf:76:50:
5e:61:30:0b:59:0a:ff:df:0f:49:64:8a:57:d7:c1:
19:58:9f:9a:6d:20:a0:78:53:25:b3:18:ca:09:03:
12:1c:26:aa:34:72:fa:88:70:7f:a8:fc:93:8d:b5:
31:84:14:0d:6d:24:7f:8e:41:bb:2e:65:fa:34:a0:
21:05:f3:6a:95:d4:4b:c0:b6:c0:9c:8b:10:9f:c2:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:EB:7F:A7:21:8B:47:C2:A8:88:9D:FF:43:C4:DB:2C:61:0E:79
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:19:9a:f9:9a:6e:7e:b0:13:cb:cf:f0:53:b9:59:72:55:
30:75:41:51:31:40:2c:7d:a6:d1:8a:9c:75:42:6c:02:6c:39:
ab:c6:9e:51:c3:65:88:0b:e4:3a:72:71:23:ce:09:4f:4e:48:
7f:ab:95:81:36:60:61:81:16:7a:b2:54:0d:11:45:11:9c:cc:
16:e0:8f:92:da:88:1d:88:d2:b8:69:a5:34:e2:a2:d5:5c:f0:
9b:1b:54:d6:22:84:ad:ec:1d:97:42:f1:58:51:17:cf:c3:bc:
a8:de:d9:a4:85:53:56:ef:f5:3f:8c:c7:61:22:aa:ba:07:12:
ec:0c:15:b6:5b:b4:f4:f7:5a:c7:38:29:04:c7:33:97:ef:ee:
86:39:a0:15:cd:29:3a:3a:7f:06:1b:8b:a8:2d:0e:c5:57:82:
d7:c4:6b:c6:96:5d:52:9b:db:58:af:90:da:09:c7:47:7b:c6:
57:18:22:ad:ec:36:f2:30:30:a1:af:66:37:1d:3e:bb:86:32:
fc:9a:60:6f:2d:53:ac:80:d2:f3:6c:80:f9:8c:09:89:a2:b2:
68:65:5f:ae:f3:8f:00:58:9b:60:35:ce:86:1b:b3:6d:60:af:
a1:2d:ff:6a:81:bc:8b:2e:0c:4c:e1:c3:f9:fa:46:84:e1:e1:
a3:ee:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:15 2026 by rpki-client