
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: HKTx+1bw7ihXHBnQDMPwvGmeT6bVtq2WZfsAMqYLtoM=
Subject key identifier: F1:53:2C:B6:BC:85:5B:BE:8D:B6:D2:79:11:B9:A1:AD:0E:C5:0B:DE
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 01A001DD1ADFC7990811DA50B3D334B186B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1466
Signing time: Fri 14 Aug 2026 20:01:02 +0000
Manifest this update: Fri 14 Aug 2026 20:01:02 +0000
Manifest next update: Sat 15 Aug 2026 20:01:02 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: KmZ0Rfe7iI15DpWH3sDYrHffWI1xilEsVLRaD6q8UJo=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:1a:df:c7:99:08:11:da:50:b3:d3:34:b1:86:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Aug 14 20:01:02 2026 GMT
Not After : Aug 15 20:01:02 2026 GMT
Subject: CN=f1532cb6bc855bbe8db6d27911b9a1ad0ec50bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:36:ff:fa:02:d3:81:3c:dc:85:a2:df:97:
47:95:9b:a6:34:05:2d:e3:0a:65:5f:60:1d:ec:ee:
de:f0:7b:09:ad:54:41:39:f1:4b:c9:94:3c:30:92:
be:c6:d8:41:6e:ac:87:3c:3b:90:a5:a1:53:0e:ed:
f7:78:1b:b3:d6:de:5b:3e:b1:38:ad:d4:37:6d:3f:
81:49:70:29:19:fc:88:e3:f8:c9:35:be:92:06:60:
aa:6a:c8:d3:0c:c8:60:e9:1d:fe:08:55:a7:3e:04:
da:1d:9a:ef:c6:5a:38:b6:5c:4e:ec:b1:be:b0:f5:
1a:55:bc:22:94:9f:da:66:1e:2c:72:5a:99:86:cb:
4e:4f:c4:97:de:7d:c2:ba:29:24:b3:28:82:46:9c:
4e:e3:f3:68:59:57:89:28:d0:67:24:0d:93:d0:c8:
77:39:e1:6f:07:dc:fa:da:fb:c6:84:7d:2d:ef:c4:
a3:3f:14:86:44:d0:90:b4:c5:d7:95:3b:bd:a8:31:
d7:79:d1:d4:79:ce:70:54:a9:a4:4e:1e:af:bc:93:
41:13:07:f0:6d:65:f7:32:8b:0f:18:8c:e7:9e:eb:
35:59:d1:f2:79:67:d3:75:aa:c8:5c:84:87:e4:6e:
fb:24:43:e8:95:c1:77:e0:1d:63:65:97:6e:6f:73:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:2C:B6:BC:85:5B:BE:8D:B6:D2:79:11:B9:A1:AD:0E:C5:0B:DE
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f2:3d:73:6a:e0:c0:86:b5:14:dc:a6:b2:6a:c9:3c:15:40:
ea:ff:8f:ef:10:47:33:05:8d:e6:0d:ce:51:df:5d:58:7d:61:
9b:0d:2a:3b:e4:15:ef:c4:51:fa:a6:b0:1d:91:1b:ee:c4:07:
7f:76:f4:ee:0b:21:9d:dd:e3:c0:33:5d:71:04:17:1a:13:b4:
38:ba:8b:59:45:e4:37:72:ec:c2:ac:d5:78:05:54:e7:ec:3d:
56:7d:bb:3b:dd:1a:0f:8a:57:4e:4c:d8:9a:b2:2e:03:84:4f:
cb:ff:b4:f4:a8:1d:22:a6:a9:7e:38:49:b1:76:15:0e:f3:ce:
ae:e1:eb:ff:41:d5:aa:77:92:47:45:80:8b:49:c4:48:a7:e1:
f3:66:75:e6:aa:48:e1:ff:19:6e:93:25:7b:3e:8c:86:b7:88:
f5:b4:48:e3:02:24:47:15:82:b4:cf:20:7b:e4:b3:a9:e8:7c:
0e:dd:eb:d2:3b:95:37:cc:0e:93:55:2c:57:dd:78:eb:6c:78:
67:76:a9:1d:73:26:47:18:b8:5c:09:2b:d0:3d:f2:3a:22:3d:
39:03:25:fd:1d:24:1d:e3:7c:03:43:25:94:4a:d1:d9:e9:e7:
3c:9f:d9:8f:20:b3:8e:1e:23:17:a1:15:28:a0:76:c7:e3:eb:
78:b1:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:22 2026 by rpki-client