Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: R7qw9MuHcECV/bntjUdReA8ZgisEUpjNt/s8fPDPces=
Subject key identifier: 23:39:59:5E:3A:A8:77:F1:B2:AA:EB:12:8C:8C:19:48:74:68:03:44
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019E1D90E9576980A3181DDCF2CB06A98DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:36 +0000
Manifest this update: Tue 12 May 2026 19:01:36 +0000
Manifest next update: Wed 13 May 2026 19:01:36 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: JS3HrZVe9CSDsVDhWyOAFu6emCeCknkMFkaOyIu78yQ=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e9:57:69:80:a3:18:1d:dc:f2:cb:06:a9:8d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: May 12 19:01:36 2026 GMT
Not After : May 13 19:01:36 2026 GMT
Subject: CN=2339595e3aa877f1b2aaeb128c8c194874680344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:11:a3:20:a5:bf:dc:41:bb:98:f3:cb:4b:
84:23:cb:01:9f:ca:cc:ea:74:da:75:ae:37:27:21:
75:86:4a:eb:2b:9e:14:72:27:15:bf:7e:48:54:6b:
67:c2:13:eb:ee:8a:cd:af:ab:05:98:89:df:32:8d:
40:04:eb:d8:62:a4:ca:11:6b:c2:92:60:f7:eb:91:
82:f3:ae:da:6e:b1:a8:21:b6:cc:8e:14:ca:2b:fb:
b8:33:13:9d:29:aa:58:14:66:79:dd:68:44:ff:3a:
0b:16:89:14:63:a2:ae:7a:11:75:d3:09:62:93:98:
aa:34:a8:73:6a:9f:d3:9e:9e:8d:a8:e1:60:56:d3:
98:23:47:92:60:6f:e3:da:9c:6b:b4:76:75:fb:48:
4c:5f:14:23:99:ea:16:e1:a3:79:c4:27:0f:9c:3d:
10:e0:4f:76:80:3c:5e:05:82:66:a2:7d:a7:da:7d:
ab:ed:18:3c:65:3b:a5:54:d2:86:97:53:28:fe:9d:
6f:15:0f:ba:41:73:83:86:c7:25:93:c7:a5:29:3c:
b3:fe:9a:33:58:b0:df:6b:80:8b:6c:01:37:cb:4e:
47:e6:30:c3:30:2b:6f:20:f5:73:53:d1:69:34:ee:
03:64:e3:63:cb:32:d1:76:1d:26:e8:c5:be:a3:aa:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:59:5E:3A:A8:77:F1:B2:AA:EB:12:8C:8C:19:48:74:68:03:44
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:44:11:5a:2c:f6:be:d0:fe:ae:40:cc:92:8b:ed:f5:9e:58:
59:2a:8d:62:c5:da:85:f5:04:0e:0b:59:54:f1:7b:96:3d:e8:
52:c9:29:45:c4:e6:89:b1:7d:b2:10:fd:bb:b1:7c:58:51:e9:
4b:5f:1b:df:30:b0:ee:62:18:21:4b:22:36:60:ff:3a:02:38:
c5:14:27:13:d3:5a:c6:61:f6:33:44:6f:60:5c:b9:07:ba:65:
86:d1:fb:c4:c5:ac:a8:a5:b7:73:f5:d9:92:7d:13:2b:e6:b1:
38:b9:2b:36:bb:fe:37:bd:f8:c8:59:a6:33:3f:08:49:24:3c:
d2:30:5c:d0:fd:ba:bd:c2:f4:0a:96:6d:e2:ca:4e:d8:cb:c7:
f7:3a:ca:ae:24:9b:2f:58:64:f6:ec:98:84:92:66:f7:f0:e9:
06:22:14:0b:2e:9a:6a:94:d2:01:ce:09:80:6f:83:8d:f4:84:
9c:87:9b:ea:96:4c:f0:18:4f:6e:0f:5b:81:56:f3:b2:90:7c:
a6:d7:c9:6c:11:1b:d1:5b:04:a2:26:86:c9:5f:77:e8:c5:95:
c4:d7:23:41:70:da:28:ed:f3:96:d3:5d:93:42:e6:86:a9:11:
01:21:c7:19:23:01:99:0f:1f:ba:43:2c:ea:d7:3b:9d:0b:0f:
ec:8d:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:22 2026 by rpki-client