Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: bxROd5C7owzgRC+WTf+23vVD9LFvh9DmbDRzx5vBUO4=
Subject key identifier: 32:16:6D:6D:2F:29:F9:79:F9:64:B7:F3:EB:B9:CE:87:F3:46:B8:83
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019F1830B07E3244A17A81218982BD07407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 13ED
Signing time: Tue 30 Jun 2026 11:01:11 +0000
Manifest this update: Tue 30 Jun 2026 11:01:11 +0000
Manifest next update: Wed 01 Jul 2026 11:01:11 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: Yf5p+dyn2pDGYIbByo5AuZpSK6x3nDrUAdN+l/lqd98=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:b0:7e:32:44:a1:7a:81:21:89:82:bd:07:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jun 30 11:01:11 2026 GMT
Not After : Jul 1 11:01:11 2026 GMT
Subject: CN=32166d6d2f29f979f964b7f3ebb9ce87f346b883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:b4:53:02:bb:45:4b:da:93:e9:e8:58:fb:
14:0f:0f:68:f1:81:69:b2:70:fa:85:96:1c:84:ff:
cd:d6:4d:f5:e9:cc:86:52:20:e5:6a:e2:90:15:5a:
c6:52:cc:44:42:c5:78:2d:ba:62:f9:af:d7:fb:0d:
6f:6a:00:ed:fc:45:cf:8d:71:64:4d:2e:cc:4b:13:
ef:57:37:2a:cb:11:fa:e7:45:35:da:ff:93:25:97:
ad:55:a8:de:c1:e3:e9:55:17:7c:26:56:ef:bf:4b:
e6:71:26:2e:e4:72:46:81:c7:0a:34:08:52:ca:5b:
09:10:5e:45:2c:b7:37:e1:0f:dc:5d:e6:fb:e4:80:
93:2f:eb:d2:ed:56:95:58:24:52:49:bc:20:2a:bf:
b8:29:69:80:ab:64:a1:0a:3e:ed:ae:ea:28:2d:43:
db:42:2f:f2:bc:86:58:bc:bb:48:60:d1:07:a2:21:
8d:09:06:24:f3:f7:5d:fd:78:5f:22:f4:eb:28:9f:
aa:b6:93:f6:5e:8a:ad:17:3f:d7:1c:a4:06:18:df:
14:64:5d:07:e8:2f:cc:86:87:c0:85:2d:26:0c:24:
68:7c:b9:11:72:33:33:e6:12:c5:9c:ef:48:ec:b0:
0b:a0:88:ea:5c:e2:bd:f7:00:aa:71:9c:3a:1c:4f:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:6D:6D:2F:29:F9:79:F9:64:B7:F3:EB:B9:CE:87:F3:46:B8:83
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:01:8b:04:e7:89:1a:0a:55:10:f5:6d:7c:25:bb:37:c6:
91:25:13:09:5f:c0:04:a6:80:73:bb:13:47:4a:0c:88:05:91:
10:bc:f1:5d:f3:51:f1:33:fb:8d:83:ec:9f:b8:c5:9a:0d:b6:
60:0e:46:1a:76:b9:b2:15:d6:40:c9:82:b3:b3:41:90:da:52:
e7:1e:38:fc:67:6e:fe:50:6d:79:0e:2c:f6:94:33:b9:2e:2e:
a6:c6:fb:66:84:00:7d:35:4b:df:fe:4f:28:78:90:b3:0c:a7:
17:07:3d:63:39:13:06:ed:b3:8b:e8:18:24:86:ab:27:70:b3:
be:19:4b:82:ab:ef:2a:4f:c7:d9:2e:99:d4:f0:e8:cb:56:e6:
e2:ad:f8:7c:60:3a:c3:aa:de:87:a3:d7:fe:13:d7:c8:70:a9:
fc:80:5a:91:ad:b3:e8:8c:e6:ed:e7:9a:f4:48:7e:6f:90:e3:
d5:f7:a8:53:0e:55:fb:f1:93:b5:71:47:61:db:c9:0f:98:20:
b9:35:c0:32:1a:9f:6b:d5:96:05:0a:b3:29:49:a4:4e:23:47:
27:05:7a:13:3e:c6:dd:fb:35:f0:58:86:c9:c3:1f:81:ce:79:
3b:c7:6f:54:fe:0f:a5:27:91:c3:5e:fb:49:49:49:44:9d:47:
89:28:e7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:18 2026 by rpki-client