Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: wn4mnYOZYPmvIaDAeRRw7cS5Hh+XxfbnCOw6Gphhmz8=
Subject key identifier: B6:5F:D5:76:14:F6:D0:FE:58:14:81:AF:CF:13:79:40:53:27:E3:B1
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019E30722782771D058D55C4C70379CFD5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1375
Signing time: Sat 16 May 2026 11:00:48 +0000
Manifest this update: Sat 16 May 2026 11:00:48 +0000
Manifest next update: Sun 17 May 2026 11:00:48 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: R7D51j/RG51kg5QGkqisbrFiIb/GHtIL8V2juR7s8gs=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:27:82:77:1d:05:8d:55:c4:c7:03:79:cf:d5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: May 16 11:00:48 2026 GMT
Not After : May 17 11:00:48 2026 GMT
Subject: CN=b65fd57614f6d0fe581481afcf1379405327e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:fa:38:86:f5:06:e6:d7:da:e3:22:d3:be:
0a:ba:e8:81:82:82:7c:2e:33:81:1d:48:fe:fb:5a:
5d:91:e1:be:36:37:42:b0:a0:0f:af:eb:c3:fb:86:
f0:be:a9:74:1b:87:50:df:d3:b0:81:53:9b:c3:b1:
79:b9:a8:9a:03:4a:48:e7:d6:a4:47:58:78:0a:7b:
df:8f:59:b3:9d:54:94:21:c7:2b:24:8b:22:15:ad:
a3:7b:01:d4:13:74:15:5c:ae:07:f3:4b:83:21:60:
0a:4b:a2:a1:c1:55:72:56:40:b2:63:33:b7:cf:be:
e2:b4:44:6c:b0:c9:54:71:2e:3f:9d:d5:da:e9:57:
c7:90:b6:9e:1a:8a:21:86:60:d1:be:d0:57:3d:f0:
32:1c:92:e6:21:34:8b:d3:23:45:e4:42:5e:4d:7f:
5e:b1:ed:45:36:f2:da:57:15:a7:e0:25:1c:e3:b8:
b1:ac:37:05:33:0c:f9:ca:e0:e6:62:bf:e6:0d:6d:
c7:29:73:85:8b:61:c0:61:2a:44:f5:26:12:79:74:
da:71:31:e4:5b:85:94:48:7f:f2:e0:bd:85:1f:bf:
01:cb:f9:d4:77:c1:2b:aa:3e:0b:1e:ad:5d:32:78:
e6:e6:b1:9d:88:20:1b:7f:ff:2d:96:71:aa:2f:3d:
26:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:D5:76:14:F6:D0:FE:58:14:81:AF:CF:13:79:40:53:27:E3:B1
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:11:9d:f4:01:f8:f2:94:15:8c:35:84:bc:1d:62:5e:3e:
ed:92:a2:6d:3b:5a:46:b3:cd:f9:d6:69:1c:43:24:bd:56:3c:
be:72:91:ca:0f:d5:63:c0:f3:5b:58:2b:99:ae:9d:a1:e6:d6:
c0:68:32:76:f9:9d:70:1f:da:1f:23:3a:46:6a:c9:18:e8:32:
cc:df:85:fa:4f:bd:8c:55:ee:58:82:ee:65:ac:3a:41:e6:9f:
2c:c3:11:0c:bd:77:80:e8:4c:3e:41:31:02:dc:5e:5e:ad:bc:
2a:93:08:84:13:72:ff:40:06:6b:b5:9f:ea:24:2d:1b:50:b8:
09:33:62:98:8f:6d:fd:b8:5b:de:4d:f4:64:d1:50:56:17:2b:
9c:65:fa:5a:2a:c4:ab:53:1f:28:2c:5b:89:5c:6f:d7:a7:ff:
01:16:13:57:59:47:0e:1b:6c:05:cc:32:60:09:a8:11:75:08:
85:92:ce:93:a2:e7:61:0d:33:40:72:da:83:1a:d6:1f:74:2a:
6e:f7:09:55:e3:41:f0:11:a5:2e:22:fb:0d:0f:10:a6:14:f1:
2f:51:8d:ab:f7:f0:84:3d:94:9f:0f:55:79:28:46:ba:4c:d5:
a1:f4:2c:89:57:90:f3:67:65:2b:b3:d4:bb:46:38:70:82:c1:
30:36:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:29 2026 by rpki-client