Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: RPqfqJhDrcIIP0he8qU90IbsWmCGTUjaa6+MhIiTtL4=
Subject key identifier: 49:66:7F:06:CF:AB:7F:B1:69:F6:E6:5A:D5:E8:EE:64:46:4F:79:FF
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01A0009323B4B897C3A1F6032528B1594E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 073F
Signing time: Fri 14 Aug 2026 14:00:37 +0000
Manifest this update: Fri 14 Aug 2026 14:00:37 +0000
Manifest next update: Sat 15 Aug 2026 14:00:37 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: eR6DwcSNEDBNbGfdFhx5thByFhOQ/y8KZEwryCnGFLc=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:23:b4:b8:97:c3:a1:f6:03:25:28:b1:59:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Aug 14 14:00:37 2026 GMT
Not After : Aug 15 14:00:37 2026 GMT
Subject: CN=49667f06cfab7fb169f6e65ad5e8ee64464f79ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:cd:73:4c:f7:61:5e:fd:b6:1a:da:e4:86:
bb:a4:63:e8:6e:8c:a2:e3:36:bf:95:b2:79:a6:4d:
2a:f5:55:51:29:45:0b:14:9c:5b:4e:13:de:2f:7a:
28:bf:32:08:68:5e:cc:8a:34:9f:6b:75:b4:bd:89:
9e:d9:c8:b6:88:d6:5c:e4:8a:a2:27:e0:a9:89:c7:
2c:63:72:b5:1c:1a:0c:b8:b2:43:11:e7:4a:dd:eb:
08:df:da:e6:f9:75:f9:05:02:e5:d4:52:a3:73:80:
5a:87:f3:b3:2c:be:a8:e1:8e:f1:5e:8d:91:9d:f9:
8f:ac:9b:e6:0a:b6:90:35:95:ff:c8:dc:3b:52:a7:
a8:a9:fc:11:10:9c:0f:a3:90:ed:23:da:e2:4e:7e:
6c:e6:33:5a:6c:0b:94:91:ec:24:ce:1b:08:9e:5b:
4e:d6:e3:56:49:db:48:9f:56:03:0c:8e:3a:60:68:
75:a8:34:f8:c3:e1:ec:0d:0a:21:94:4c:8c:16:f8:
d4:58:80:27:95:b8:14:09:a3:32:d8:91:06:ec:fd:
bd:87:b7:67:b7:08:84:ad:79:f0:ce:98:94:67:5e:
02:c3:20:5b:cf:57:a4:62:65:a4:c3:d1:be:f6:9c:
f6:e4:41:ca:72:96:e2:df:c1:39:40:89:ef:c4:6c:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:7F:06:CF:AB:7F:B1:69:F6:E6:5A:D5:E8:EE:64:46:4F:79:FF
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:46:7b:c6:af:4b:48:78:5b:8a:27:a4:39:18:e3:4e:d3:
21:7b:74:18:96:9f:b7:60:f4:49:26:17:e6:0e:3b:df:43:7c:
b5:5b:36:ae:26:aa:0e:dd:f4:f9:e8:27:7d:48:c6:50:34:00:
25:c6:15:aa:be:40:0a:11:3d:02:e7:b6:c0:1e:51:7b:32:45:
c3:1b:94:27:00:31:28:c7:ee:b1:5a:6c:44:30:5f:13:47:db:
02:d6:4a:c3:04:af:6c:d8:9d:c6:86:6e:34:67:e2:41:75:7b:
b9:db:30:96:c8:33:77:63:18:49:5e:47:11:4b:c2:d8:93:9d:
49:04:ba:50:94:51:0c:4e:1a:52:c8:7d:42:e2:c6:4c:3a:74:
3b:8b:23:99:99:f8:0a:1b:dc:a9:bc:ea:64:24:d3:19:e1:67:
d9:62:a0:3e:10:33:fd:c7:57:3c:f7:87:b4:6b:80:91:c3:70:
e3:8f:ec:31:11:7f:59:68:8b:cd:4b:3e:f6:4b:db:a0:50:37:
59:a2:a3:92:af:62:0f:da:12:1b:1d:f6:11:08:c9:ed:6f:c1:
98:73:68:a0:91:14:2e:c2:b0:81:e2:c6:31:be:4c:54:47:4a:
f0:99:f2:60:3c:d8:40:d2:29:2d:fd:0e:8f:1f:7b:0b:a7:f0:
e1:14:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:42 2026 by rpki-client