Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: 5IbbQ/G5h+BOzzK5FrlUWDD3eO7ORG/y4FvdPxe0z0k=
Subject key identifier: 80:9A:14:ED:EE:09:D6:47:34:A6:ED:30:FD:78:61:99:9E:36:28:46
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019D37F75412D199431C4FA92A43A8350B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 05CE
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 5mnG8CJksxGdkR/UU3qvaEoYKEz+jdp07N28KcTjYOw=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:54:12:d1:99:43:1c:4f:a9:2a:43:a8:35:0b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=809a14edee09d64734a6ed30fd7861999e362846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:98:f9:82:6d:05:92:e3:9e:b2:51:09:de:
18:13:7f:e0:25:c2:25:7b:e5:d8:74:b4:f3:20:31:
3f:c9:15:92:cc:61:a3:9f:95:84:99:7f:b5:f5:f6:
d2:b7:58:09:5a:2c:db:cd:a6:1a:75:f9:06:fb:a4:
d9:b6:63:aa:11:0a:f9:e9:34:12:df:f5:94:fe:5f:
14:80:89:e0:d4:58:64:b9:4f:0a:32:d9:e5:36:27:
fd:ea:0c:05:aa:30:e3:8c:37:40:dc:eb:10:dd:e8:
0f:68:11:49:c8:91:20:e5:0a:6e:1b:4c:05:87:d8:
34:ae:9b:02:51:bb:6f:b8:54:05:fe:95:20:57:a7:
3d:ce:6e:c8:c2:7b:d8:71:2f:28:19:2e:07:10:0e:
9c:7e:4a:99:7f:45:18:47:a4:ee:3a:ec:e6:3b:6d:
d5:57:48:97:53:f2:59:e3:bd:ab:b5:bf:12:4e:fa:
83:7f:02:98:d6:ca:65:4a:ad:9c:f7:9b:98:96:11:
93:96:9a:af:f4:95:b9:21:a4:ff:11:12:1e:77:a6:
21:78:ef:96:b8:a8:70:74:6d:b9:e1:98:2f:de:ee:
94:a0:86:e8:fe:b9:66:b0:03:a1:51:24:53:25:90:
20:6b:0b:45:f8:e5:23:24:19:1f:de:6c:62:e7:b4:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:14:ED:EE:09:D6:47:34:A6:ED:30:FD:78:61:99:9E:36:28:46
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ae:b0:85:56:97:61:77:80:1f:5d:29:2b:ac:1f:f0:6d:6a:
b7:2a:90:6e:fd:63:a2:5a:45:20:c7:a8:86:55:a8:60:bc:e4:
cc:2b:01:ba:e1:12:dd:2a:af:39:2d:f1:4b:57:79:19:37:90:
85:90:0a:1d:83:e1:f8:6c:f4:9f:ea:40:68:38:c1:a2:78:3d:
26:93:25:19:d8:83:82:dd:d9:d2:5d:55:5f:25:e7:0d:a1:c6:
ec:07:19:d5:06:c9:f0:85:3d:00:7c:88:06:dd:35:5f:c9:ea:
26:5b:8d:94:88:69:05:63:97:6e:d2:83:f3:7e:a1:5e:15:d9:
06:2c:25:8b:69:91:d3:6d:29:48:66:6d:6c:4e:38:69:a3:5b:
c5:82:48:d9:a2:54:f0:98:59:f3:3c:dd:88:65:5f:3d:dc:ba:
ee:ca:38:9d:a7:44:6f:1f:b8:00:8d:e2:f4:46:37:4d:4e:d9:
f0:e7:dd:b3:d5:00:33:82:f1:5a:04:1e:73:a7:ad:b6:0f:52:
93:3c:7d:93:ef:bb:dd:73:f8:18:ab:a9:16:18:bb:91:aa:27:
94:d6:a0:b5:91:43:10:74:7f:ff:25:ed:05:06:6f:f8:12:3f:
6b:3d:34:9a:2e:79:43:b1:67:77:aa:eb:8a:df:4f:ee:c8:73:
5f:90:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:29 2026 by rpki-client