Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: g/CBlmt2IN8aM+j06sukVsw/uvs10aYUI//Sxgp3jY0=
Subject key identifier: 49:5A:96:69:44:AD:06:F0:9D:F0:55:FA:5F:B8:27:7D:96:A2:8E:7D
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019F17C2AF6C5CE327A3F3F4612066442190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0F66
Signing time: Tue 30 Jun 2026 09:01:02 +0000
Manifest this update: Tue 30 Jun 2026 09:01:02 +0000
Manifest next update: Wed 01 Jul 2026 09:01:02 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: hkLe/deY/YIOGdE511/dcbsmHak+0qayKzqIN3doEwI=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:af:6c:5c:e3:27:a3:f3:f4:61:20:66:44:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jun 30 09:01:02 2026 GMT
Not After : Jul 1 09:01:02 2026 GMT
Subject: CN=495a966944ad06f09df055fa5fb8277d96a28e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:67:80:f0:64:8c:9f:ad:91:03:10:16:67:
79:bf:cd:c9:a8:17:88:e6:4c:47:4b:a9:9a:13:54:
f7:cc:39:f1:ef:9b:f6:2c:a9:63:0c:a0:96:ad:c8:
65:11:39:35:96:b4:ba:c8:10:b2:f9:41:c9:d0:2f:
d4:60:ce:20:c4:1f:ef:e7:2c:4c:ac:60:7b:99:2c:
16:d5:8e:5b:16:8a:5a:1c:0c:86:b5:33:0a:42:99:
e4:9d:a4:48:4a:6d:27:29:db:72:46:84:e4:11:a0:
61:aa:8c:08:c9:5d:26:08:2b:fb:02:16:62:54:d3:
0f:30:ea:59:a0:c8:8d:9b:98:e7:01:a5:c0:5a:fc:
fa:6e:bd:0a:e3:a8:1b:aa:c0:fa:18:37:d1:f9:25:
e0:af:9d:43:a1:c9:0b:13:fd:45:ad:9e:e0:80:e3:
20:06:48:6b:c6:74:42:66:9b:af:39:a8:58:61:b5:
d9:90:85:dc:4a:b7:8b:3c:9e:be:f2:60:7f:67:0e:
d0:d6:5a:30:57:3d:1a:4e:8a:46:8e:e2:cf:a1:f9:
09:41:07:cf:6d:d2:79:c2:23:0d:04:17:5a:55:65:
69:13:a3:c9:f7:8a:5d:54:6b:d0:b8:69:85:a4:08:
42:26:7e:2a:ec:e5:8e:77:ff:5c:f1:15:47:b9:cf:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5A:96:69:44:AD:06:F0:9D:F0:55:FA:5F:B8:27:7D:96:A2:8E:7D
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:42:66:50:40:9f:c6:0b:7d:d8:5c:d8:ed:e0:e2:cc:ad:e4:
e1:97:7f:02:55:2a:20:60:24:67:0d:eb:30:ff:43:f7:a0:2d:
e5:5c:15:5e:53:99:f1:3d:fd:2a:9e:b0:90:5b:7b:54:5a:67:
11:a0:56:95:6b:4c:5d:00:bb:ee:b1:03:14:c3:f9:42:d1:7f:
00:53:51:8b:a8:5d:ec:28:31:94:97:35:f6:e7:a4:98:1e:9c:
c2:59:6d:95:06:70:dd:bd:74:e8:36:4a:7c:fb:eb:84:59:91:
ac:1d:94:d5:f1:21:7b:bd:55:43:b7:a1:c2:1e:23:6a:73:4b:
45:e8:f9:6d:6f:77:e4:39:87:2b:c5:ab:3b:13:e1:cf:0d:ba:
9d:2a:e2:81:15:52:92:a3:a6:57:9c:bf:87:bd:4d:4e:a2:b1:
5b:62:aa:66:78:5b:03:26:7a:13:a8:e1:d6:a3:e1:46:c3:6f:
e9:62:ae:48:1c:3f:3e:98:9a:bf:00:61:9f:d3:3e:ec:dc:09:
59:90:40:57:0f:79:5b:a5:97:89:cd:e7:35:6a:6c:ff:98:cb:
a5:22:2b:15:8a:15:63:0f:37:b0:8c:1b:bb:8e:6f:4f:6a:0c:
4d:9b:a9:d7:96:22:28:48:f3:df:f4:25:7f:5c:73:23:fa:71:
b8:61:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:47 2026 by rpki-client