Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: G20krb4Au/hLWw1CFduKsgOwSJUgeN9JEJC1kWpa6a0=
Subject key identifier: 65:FF:59:22:95:61:ED:96:92:69:6D:CC:BA:99:53:A0:F3:E3:10:2A
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 01A13E26DE61077AB365435785FDCD6527DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:01:37 +0000
Manifest this update: Thu 15 Oct 2026 06:01:37 +0000
Manifest next update: Fri 16 Oct 2026 06:01:37 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: v4vOIkXOIGgNcrlYqHwLUiGsvZdvkaq04YsoqKGo22k=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:de:61:07:7a:b3:65:43:57:85:fd:cd:65:27:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Oct 15 06:01:37 2026 GMT
Not After : Oct 16 06:01:37 2026 GMT
Subject: CN=65ff59229561ed9692696dccba9953a0f3e3102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:d1:8c:8f:37:b2:ec:b4:6b:69:2e:5e:49:
9f:f4:54:d0:54:0f:3a:42:c8:a2:ed:19:45:9d:8b:
20:4d:c1:fd:a6:94:e5:a7:70:c1:d3:5d:e4:80:43:
35:34:ca:08:0b:f4:ee:a5:a8:d9:3f:dc:cf:1e:da:
52:48:dd:1d:b0:5f:41:f9:98:5b:9d:90:62:b2:29:
da:fe:58:27:37:04:44:bd:48:0e:2f:d8:3f:4e:f6:
33:61:7f:07:80:79:01:d6:e0:05:5c:bf:a7:c6:09:
c2:df:8d:f5:54:d3:19:04:10:ab:53:8d:af:42:d0:
05:95:b7:ad:a3:78:6f:c3:dd:7b:5c:df:1a:b4:b9:
a2:66:00:36:5f:6b:68:7f:4b:79:be:09:6f:3a:78:
6f:93:6a:1a:d8:77:e8:ae:d3:75:31:43:26:9b:f6:
c7:14:fe:b6:76:5a:fa:a8:86:a1:a7:f1:46:a2:9e:
0d:72:f3:27:98:cb:c8:f7:9b:f5:65:db:e4:ea:89:
95:b4:13:f8:10:8b:46:cb:02:ef:44:88:e4:f0:40:
ad:9f:59:fa:5b:63:81:5d:30:7d:97:be:c3:f8:32:
7a:05:f7:cd:24:8d:cc:b7:99:34:c3:53:df:a5:01:
78:c9:10:4e:f2:96:a7:09:5f:8a:c4:c0:87:a0:cf:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:59:22:95:61:ED:96:92:69:6D:CC:BA:99:53:A0:F3:E3:10:2A
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:65:e3:24:b4:00:ea:7b:12:4a:a8:01:a0:f8:49:13:d2:73:
d8:0a:4d:3b:22:ba:66:84:49:e5:38:6b:62:a4:ce:cb:86:21:
56:04:bb:a9:32:f8:f6:0c:04:2f:c2:43:d1:1d:e9:b7:87:bb:
19:82:54:f9:38:e6:8b:fe:db:49:ea:aa:ae:8a:ed:5f:04:9d:
f3:d0:1d:41:1d:60:d8:44:80:19:65:3d:d0:b0:51:84:b5:da:
4f:c7:7d:16:c5:7f:d3:ff:61:0b:ad:d3:29:16:5a:41:30:43:
f8:5c:53:d8:48:c7:7a:57:c1:10:8d:56:42:64:4e:1a:1d:e2:
df:27:5a:1f:43:d8:57:0a:e6:1b:2c:89:b9:f6:fa:2c:f6:51:
e8:a5:fc:c9:ec:1a:3c:7c:a0:bc:59:4f:b1:75:1c:9d:3f:82:
94:ee:6a:8d:5e:7a:a5:56:23:c7:0a:26:b0:17:b8:83:02:cd:
2a:91:bc:9d:61:a4:a7:22:e7:be:64:bd:2f:80:7a:e8:7b:b5:
ba:7d:a5:a0:0b:fd:2d:d2:20:8e:65:8d:0e:60:c1:8f:44:34:
db:0c:df:c9:aa:62:4c:dd:3e:7a:0b:04:14:26:e0:27:12:a8:
8a:01:f3:aa:6f:bf:c3:30:14:16:47:77:d8:fe:16:6b:c4:6d:
5a:cd:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:52 2026 by rpki-client