Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: chysy3w8u3h4VbNerU+BNjiMa2SiKrU0d573zmZmByc=
Subject key identifier: 40:63:41:B8:22:63:4D:5B:7D:A5:59:A2:11:8E:E8:E4:5F:C8:57:A3
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019D2A3BDFD9CBB5B1F1032B50C44ADDD734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 13:01:00 +0000
Manifest this update: Thu 26 Mar 2026 13:01:00 +0000
Manifest next update: Fri 27 Mar 2026 13:01:00 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 9IWCSTq3JLL0PYxL3XMuLjakZjwzxP03/WhEV931+G4=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:df:d9:cb:b5:b1:f1:03:2b:50:c4:4a:dd:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Mar 26 13:01:00 2026 GMT
Not After : Mar 27 13:01:00 2026 GMT
Subject: CN=406341b822634d5b7da559a2118ee8e45fc857a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:c1:59:32:44:b9:e3:1d:58:c0:8b:c3:20:
46:97:5a:c5:e3:5f:3a:be:f0:88:c5:00:c1:c5:8a:
c5:9b:1c:a1:b5:29:d4:e9:f6:b0:29:15:de:54:c0:
7f:b1:f0:47:06:a8:b0:86:b5:e1:3a:e2:f4:bf:94:
39:58:0b:93:89:3d:cd:69:fe:63:76:a8:cf:e1:f3:
e1:38:47:9a:c0:dc:93:06:67:87:a8:24:cb:44:fd:
75:16:8b:65:8b:66:05:f8:db:50:82:83:6d:a8:d8:
d2:b8:e9:93:9a:58:44:ce:05:5e:90:85:99:39:fc:
5e:00:69:c2:73:56:9e:07:36:aa:c0:7e:4d:e8:3b:
3c:6b:ed:73:6e:90:c3:14:23:01:67:f2:74:4b:22:
0d:ef:0d:d3:08:1d:e4:7b:89:ed:93:c6:aa:d1:1c:
d4:27:68:7f:54:05:c7:96:ce:44:65:c4:49:68:49:
c0:cb:eb:d7:2f:46:61:17:f4:fa:04:96:40:5a:45:
1a:fe:70:2f:2a:aa:39:3a:40:87:c1:e5:a9:d3:7c:
0a:b1:87:90:ab:06:c6:53:ac:02:3e:d1:2e:ff:ea:
d6:8a:af:4a:27:e7:bb:8c:86:9e:ed:ce:eb:bf:0c:
57:66:1c:cd:46:ce:54:a3:c4:77:0f:4f:2d:90:2c:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:41:B8:22:63:4D:5B:7D:A5:59:A2:11:8E:E8:E4:5F:C8:57:A3
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b7:5e:8d:42:af:bb:55:85:9c:87:76:e5:b8:63:f9:e5:7e:
a2:a8:e5:e8:34:d2:84:89:98:4f:ad:3e:3d:d5:89:a0:3b:f0:
ab:64:bb:11:63:e3:14:6c:a9:ce:0f:77:ec:86:81:8d:ef:b9:
5f:cc:65:6e:ae:3c:ab:05:9c:b7:b1:17:5a:3d:89:05:4e:f8:
be:b0:a7:67:c5:2b:bb:a8:08:df:2d:27:77:8c:99:11:75:a2:
60:7d:c2:0e:8e:5f:7c:70:53:45:ee:0d:8c:c1:a5:de:ca:ea:
a3:f5:10:92:01:d9:9a:17:b4:23:bc:7c:eb:11:64:76:77:c8:
80:54:a6:95:74:0e:55:f4:fb:e8:a9:d7:72:63:62:11:d4:1b:
78:2e:73:15:55:00:19:12:dd:ab:24:53:60:65:40:78:fa:e2:
d2:a3:32:91:db:8a:c6:06:0b:91:05:b6:b5:8e:62:1e:ff:80:
dd:22:e4:3c:44:8e:ee:96:05:3e:58:83:3e:80:44:df:63:d6:
f3:e1:7b:c2:33:f0:07:34:aa:d8:41:17:c8:5b:46:00:a8:22:
92:98:a7:93:7a:8e:64:a3:fb:af:2c:d0:fc:7a:10:6c:07:a0:
7f:84:eb:95:fe:8c:05:d4:c7:be:50:7d:a2:37:c7:c7:c9:5b:
40:c0:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:54 2026 by rpki-client