Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: tESecoZfGH2TJdMDDrsib4dpS/TH7ukTgkdFm6BYbmw=
Subject key identifier: 69:89:A0:13:20:D3:BE:0D:7D:A1:F5:C7:D3:57:62:90:D2:DA:8A:A9
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019F18D66A5740E64C71FE3D8E1DB88A44AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 06C7
Signing time: Tue 30 Jun 2026 14:02:12 +0000
Manifest this update: Tue 30 Jun 2026 14:02:12 +0000
Manifest next update: Wed 01 Jul 2026 14:02:12 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: OOhp8gwknCVTVbWRzCuHqhWWuFopQO54rOpKgRoszF0=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:6a:57:40:e6:4c:71:fe:3d:8e:1d:b8:8a:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jun 30 14:02:12 2026 GMT
Not After : Jul 1 14:02:12 2026 GMT
Subject: CN=6989a01320d3be0d7da1f5c7d3576290d2da8aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:59:a2:fa:59:23:60:45:d3:a0:b4:7b:65:
4a:ca:ba:cb:bd:60:60:83:d3:77:aa:2a:f8:42:c2:
9d:ed:bb:3c:e8:6b:5f:30:8b:4e:02:06:f2:90:ca:
ca:ce:77:ff:5f:6a:58:a1:6e:38:e2:d3:c0:e3:4c:
a7:5e:8e:df:98:75:8c:bd:da:53:c5:60:93:24:7d:
35:d3:3b:22:41:82:1b:62:c3:78:21:99:0a:70:91:
d5:29:8a:aa:97:6f:54:37:d5:d1:1e:f7:72:62:46:
7c:56:04:89:c7:12:ad:37:a4:84:3d:2e:f7:d2:8e:
d7:59:d0:da:b4:7d:0a:75:6a:4e:d0:4b:9b:fe:3c:
70:12:24:59:8c:33:f4:4b:3a:27:24:79:70:c1:70:
50:f0:b5:7b:0e:17:10:d7:a2:f4:78:a6:36:11:46:
d8:98:30:4d:1b:cc:2b:2b:20:27:ed:6b:15:1d:51:
65:a3:a5:d6:40:20:7e:ea:ac:e4:e9:46:98:68:f0:
a1:be:bf:31:4d:84:c5:de:e6:77:f7:8e:9c:25:0a:
c7:cf:82:8d:69:b4:f3:c0:5e:bd:64:a5:a9:48:85:
98:5e:50:c4:54:9d:5d:33:13:eb:02:63:7f:3b:86:
f9:bd:97:c5:26:8b:70:a6:5a:0e:7c:16:cc:fc:08:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:A0:13:20:D3:BE:0D:7D:A1:F5:C7:D3:57:62:90:D2:DA:8A:A9
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:79:1f:ca:6d:19:a6:33:b5:33:c1:6a:7d:84:91:d2:7f:
b5:cb:c4:a1:d4:7f:fe:d0:e9:69:f8:56:12:c6:22:be:91:30:
3e:ae:e7:fe:4d:cf:14:fd:03:6e:8b:d5:ef:de:3e:2e:5f:7d:
92:98:e2:7b:db:ab:f9:b3:85:50:38:46:eb:8a:70:be:1b:f2:
de:12:8f:b8:b5:df:de:51:08:ce:d4:10:20:c7:d0:75:95:88:
f8:1c:fb:a0:ac:c0:e1:72:fe:e6:fe:8c:48:55:4c:f9:c3:86:
b1:f1:93:1f:a3:8b:0f:e3:cf:a4:06:71:d8:0d:05:a7:86:19:
93:03:0a:cb:07:45:a2:4a:e6:76:40:43:a8:ee:47:f4:5d:69:
7a:14:4d:11:71:85:b1:8c:c2:77:b3:e6:00:d2:1f:d4:e7:90:
4b:95:6b:25:df:1f:ce:5b:c6:e5:77:ca:7d:46:e4:be:3d:4b:
e0:cd:00:ea:fa:41:b1:9c:ae:66:27:a4:62:f4:07:9d:90:af:
30:90:f1:b8:ac:02:67:0a:10:51:19:a0:41:14:b6:b3:0b:2e:
b9:83:71:52:6d:95:2f:cb:0e:72:22:c5:4a:ff:61:02:44:68:
6d:ba:92:4b:9a:00:c6:f5:d1:4a:b6:c1:19:e2:04:fe:a8:fa:
cb:e7:d0:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1mpXQOZMcf49jh24ikSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTBkNGVlMDdmYzIxYzExMWQ2MzUyODRkYTdmYjE5ZmQ3
MDZjZTIwHhcNMjYwNjMwMTQwMjEyWhcNMjYwNzAxMTQwMjEyWjAzMTEwLwYDVQQD
Eyg2OTg5YTAxMzIwZDNiZTBkN2RhMWY1YzdkMzU3NjI5MGQyZGE4YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQFZovpZI2BF06C0e2VKyrrLvWBg
g9N3qir4QsKd7bs86GtfMItOAgbykMrKznf/X2pYoW444tPA40ynXo7fmHWMvdpT
xWCTJH010zsiQYIbYsN4IZkKcJHVKYqql29UN9XRHvdyYkZ8VgSJxxKtN6SEPS73
0o7XWdDatH0KdWpO0Eub/jxwEiRZjDP0SzonJHlwwXBQ8LV7DhcQ16L0eKY2EUbY
mDBNG8wrKyAn7WsVHVFlo6XWQCB+6qzk6UaYaPChvr8xTYTF3uZ3946cJQrHz4KN
abTzwF69ZKWpSIWYXlDEVJ1dMxPrAmN/O4b5vZfFJotwploOfBbM/AhYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmJoBMg074NfaH1x9NXYpDS2oqpMB8GA1UdIwQY
MBaAFNiQ1O4H/CHBEdY1KE2n+xn9cGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzIt
MDZhODEwYWY4ZDM0LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8zZWMyNGEtYjE5MS00MzRhLWJkYzItMDZhODEwYWY4ZDM0
LzEvMkpEVTdnZjhJY0VSMWpVb1RhZjdHZjF3Yk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWN5H8pt
GaYztTPBan2EkdJ/tcvEodR//tDpafhWEsYivpEwPq7n/k3PFP0DbovV794+Ll99
kpjie9ur+bOFUDhG64pwvhvy3hKPuLXf3lEIztQQIMfQdZWI+Bz7oKzA4XL+5v6M
SFVM+cOGsfGTH6OLD+PPpAZx2A0Fp4YZkwMKywdFokrmdkBDqO5H9F1pehRNEXGF
sYzCd7PmANIf1OeQS5VrJd8fzlvG5XfKfUbkvj1L4M0A6vpBsZyuZiekYvQHnZCv
MJDxuKwCZwoQURmgQRS2swsuuYNxUm2VL8sOciLFSv9hAkRobbqSS5oAxvXRSrbB
GeIE/qj6y+fQXA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:24 2026 by rpki-client