Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: WIo6waXnJLVoOcsmRdMKlbFVI3ZnxWOgCm8Zu/lc/2M=
Subject key identifier: 46:0B:98:EE:57:89:40:41:71:6E:AB:2E:BC:1C:B2:C3:DE:72:9E:DE
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01A13F394B2BB9192093F972A045F6AD3380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 07E4
Signing time: Thu 15 Oct 2026 11:01:21 +0000
Manifest this update: Thu 15 Oct 2026 11:01:21 +0000
Manifest next update: Fri 16 Oct 2026 11:01:21 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: VcoG44Bq72+50CvVdQyyIYn9f0t7nwKC6B7Ph8TkjzY=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:4b:2b:b9:19:20:93:f9:72:a0:45:f6:ad:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Oct 15 11:01:21 2026 GMT
Not After : Oct 16 11:01:21 2026 GMT
Subject: CN=460b98ee57894041716eab2ebc1cb2c3de729ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:e7:10:56:f0:27:06:25:fa:e9:d8:dd:f2:
6d:a0:d8:40:3b:22:50:78:1c:cb:7f:64:bb:76:7e:
ff:b3:46:17:78:fc:c4:31:b8:0e:ac:4b:2b:e9:8a:
9e:e6:f1:9c:f2:a6:b1:f9:c3:6d:eb:b3:52:e5:71:
1b:40:41:0b:7f:2e:4c:cf:3c:9e:fd:60:c3:3c:03:
96:b2:47:45:33:7f:1e:47:ee:0d:83:88:70:97:05:
80:19:d3:2c:53:51:2a:ca:f2:d6:18:95:11:22:00:
e1:6d:be:68:de:e2:6f:71:a0:1c:c5:0d:27:aa:c1:
af:8b:86:64:22:d9:f3:95:1c:56:b7:6b:d1:47:0b:
c0:cb:a3:a1:c8:7c:14:6a:1c:8b:67:b6:01:5a:51:
c1:b4:1b:9c:05:40:9c:56:8d:f9:39:d4:fc:1a:a3:
31:65:4c:7a:a6:f9:24:d1:fa:aa:98:15:7a:09:41:
07:db:aa:f7:aa:05:8d:fb:9a:8e:ca:a3:55:6a:a3:
6a:7c:c7:e8:dd:15:a4:e2:56:1d:82:0c:ee:67:b8:
f1:06:d8:8b:5b:d6:85:93:e1:a4:6c:ba:5f:26:1b:
e5:f1:ec:70:cb:86:49:d6:59:9d:86:2d:98:6f:22:
c0:18:58:e5:41:11:27:bb:27:08:96:86:e6:ae:83:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:98:EE:57:89:40:41:71:6E:AB:2E:BC:1C:B2:C3:DE:72:9E:DE
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:bc:9f:ee:4d:13:df:22:3e:3c:50:bf:d3:6f:57:77:a7:
0a:54:c6:9e:78:ef:dc:cd:96:2c:6f:5e:9f:28:4e:a7:40:1e:
f6:2f:21:62:51:b3:a9:f9:4c:2a:47:d5:16:67:b4:ad:88:34:
67:8e:6f:d7:59:9b:d7:bc:59:64:5a:aa:65:b4:a3:2a:e2:2a:
b7:84:77:c0:d0:d4:20:34:d9:19:7b:0c:e7:c4:72:cb:f7:43:
ee:6d:69:75:88:98:dd:67:2f:f4:cc:08:6d:7f:61:f3:95:76:
d6:fd:f4:eb:21:5c:2a:cc:c8:f1:25:61:7e:b0:cd:c8:1e:0b:
51:e3:67:59:e2:1a:db:52:d4:8f:fc:56:7d:c3:1c:57:b1:a5:
27:d0:5b:a7:ee:00:40:6f:fd:d7:60:8d:ab:f4:6b:a9:dd:20:
ec:a0:70:81:70:0e:7e:1c:5b:08:ef:a2:0d:10:87:1d:9e:0d:
d7:11:02:d2:9c:3f:82:6a:59:34:47:dc:cf:8b:a1:52:57:72:
ce:65:b8:83:19:db:e6:fd:4d:da:01:1f:c0:93:52:70:35:89:
fb:0a:1f:46:5f:93:59:5b:94:68:26:5d:9f:67:af:e7:ce:b0:
36:ce:0e:63:83:90:fe:29:1a:9a:8a:c6:b8:a7:2a:e5:fc:fe:
80:77:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:58 2026 by rpki-client