Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: /PH0wkvE9QVkkmsHFZZZyTopwLZ4Y2brqnTxKRZOFrc=
Subject key identifier: 6F:F9:B2:42:A5:BB:B8:73:C7:56:03:A2:5E:51:10:86:82:E7:46:3E
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019C879596026962352BE5C9D1CBB1276077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1299
Signing time: Sun 22 Feb 2026 23:00:53 +0000
Manifest this update: Sun 22 Feb 2026 23:00:53 +0000
Manifest next update: Mon 23 Feb 2026 23:00:53 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: iesRRHJD3405uJZda4z9YUCCZIjT5f+sVjA1fe/V36c=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 21:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:87:95:96:02:69:62:35:2b:e5:c9:d1:cb:b1:27:60:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Feb 22 23:00:53 2026 GMT
Not After : Feb 23 23:00:53 2026 GMT
Subject: CN=6ff9b242a5bbb873c75603a25e51108682e7463e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:5e:c2:26:3f:1c:ba:46:51:c9:f9:50:15:
b9:5a:fa:36:dc:49:39:46:07:62:39:ec:48:1f:ee:
08:5c:19:3d:e8:5d:d8:90:01:92:f6:cb:d4:37:8b:
9d:93:2d:04:2d:f1:8e:e2:97:b7:6d:e4:be:1c:f4:
30:f5:d4:30:75:a9:bb:05:28:6b:13:77:ac:ff:b4:
c5:b3:41:94:c2:fc:27:23:e8:b4:98:6c:82:0d:7f:
c4:73:f2:36:18:bd:58:c8:62:0a:d7:eb:5d:82:19:
3f:51:22:0a:af:e7:d3:87:4a:28:3d:46:a6:97:66:
51:cb:9c:65:9b:3c:d3:bd:93:72:d0:d8:dd:3b:30:
93:01:02:f9:cb:57:9d:d1:6b:ca:e9:91:39:c2:fe:
bd:ba:f6:30:9d:b0:51:ad:78:23:6f:43:93:4b:c8:
d8:11:24:fa:53:9c:ae:d4:65:c4:41:eb:cb:1b:8e:
03:49:16:30:a2:db:af:c7:03:24:ca:6d:a6:6d:95:
d0:09:ff:20:a6:cf:a0:2b:8b:e0:07:80:1a:ee:70:
dd:7e:5a:77:ea:3b:41:71:b0:9c:d5:61:ec:8e:8b:
58:51:c6:f0:48:98:09:dc:a5:ec:14:28:a4:70:d5:
51:16:0e:99:c0:0b:28:ff:59:85:03:62:9d:50:1c:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F9:B2:42:A5:BB:B8:73:C7:56:03:A2:5E:51:10:86:82:E7:46:3E
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:52:6a:77:e9:1e:3d:9c:fd:85:ec:3a:b4:1a:8e:25:aa:
a9:86:9d:10:14:df:38:ec:47:6c:92:e5:f1:6e:59:fb:e8:c7:
03:23:cf:63:67:4e:dc:d4:e1:e6:d4:fd:5f:20:be:c5:24:02:
f7:24:38:b0:31:6a:02:d9:06:36:e8:b4:8c:0d:2e:30:f0:27:
6b:08:7d:eb:fa:d6:52:94:ae:3c:3e:06:83:bf:11:92:e3:70:
c3:46:57:11:d1:ce:97:1e:88:0a:5d:36:5e:55:39:db:6a:37:
eb:ba:45:fb:e5:03:25:76:19:f5:e0:a6:50:22:fd:3c:18:33:
cb:33:3a:64:92:1a:63:b1:3f:84:f6:4a:7d:4e:cd:c3:59:f9:
58:38:84:b3:24:26:96:45:90:7f:bc:e4:9f:3b:0d:98:73:74:
22:c5:99:5b:c7:3d:39:1c:06:c4:23:1c:3f:a1:48:ba:79:f5:
bd:c0:65:a3:e8:32:32:59:6e:3d:26:7b:ba:ad:72:56:11:7e:
92:23:40:f9:95:25:c6:c2:00:7f:50:53:c9:40:bb:4d:3e:67:
26:68:8f:44:bb:4d:05:ce:0b:68:19:19:6f:06:af:cc:91:2a:
1e:e0:b6:4e:94:ae:70:68:54:b0:8d:3a:63:10:26:dd:e8:56:
4e:78:b9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:21 2026 by rpki-client