Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: jXpRloE7dcZtlksYGUmBIOjISrk6eW5TL7QUXp0MCEU=
Subject key identifier: 1E:BA:2B:BF:DC:C3:CF:D1:E8:D6:77:6A:AF:65:78:A8:41:4F:A0:88
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019F17C2A8D238E9479B59F0B641E51CF96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 168F
Signing time: Tue 30 Jun 2026 09:01:00 +0000
Manifest this update: Tue 30 Jun 2026 09:01:00 +0000
Manifest next update: Wed 01 Jul 2026 09:01:00 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: UQU2Q6xeGotfAtLKR8SHxyLsxZ/OOCogAMpDYK0+tYw=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:a8:d2:38:e9:47:9b:59:f0:b6:41:e5:1c:f9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jun 30 09:01:00 2026 GMT
Not After : Jul 1 09:01:00 2026 GMT
Subject: CN=1eba2bbfdcc3cfd1e8d6776aaf6578a8414fa088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:65:c8:c6:53:49:79:ba:24:e2:9f:c6:19:
cd:78:29:a2:25:ef:d2:e6:8c:33:85:b8:d0:b1:40:
c0:b6:bf:a2:85:25:fb:8d:02:59:81:fd:22:61:78:
16:55:7e:73:4f:27:64:d4:0d:9d:fd:e3:52:2c:02:
44:58:ad:90:dd:7a:6c:27:67:d6:9d:b1:f8:5d:78:
5b:13:d5:9c:8d:7f:fa:34:ae:99:1d:42:34:65:19:
58:ea:2c:82:31:f4:26:50:e0:aa:f9:97:19:41:d8:
d2:c9:d7:16:e8:6a:c5:ad:cd:ae:e7:b7:2e:58:82:
b7:57:a3:98:63:5e:25:a5:15:fc:f7:a6:c1:89:a3:
46:1d:d2:8c:7b:d0:19:1a:cf:b5:ba:e1:db:14:88:
78:cb:97:19:3a:95:81:92:57:51:1c:be:42:86:11:
45:59:87:4c:c3:da:d7:f2:eb:fd:cf:d0:35:0c:7e:
24:2a:22:60:35:6e:95:a6:e8:b7:26:5d:61:59:4b:
74:a2:7d:a6:0a:fc:e6:3a:8a:06:06:6b:ea:fa:b8:
e9:f4:37:46:c4:c2:ec:22:98:c5:f4:87:9e:1e:31:
a4:9b:18:0f:07:d8:7a:ae:81:89:fe:6b:30:04:27:
b6:5c:d6:a6:a9:bd:2d:8a:5a:b0:9a:36:e4:25:b2:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:2B:BF:DC:C3:CF:D1:E8:D6:77:6A:AF:65:78:A8:41:4F:A0:88
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0c:a0:28:42:58:59:ac:7d:32:88:de:1c:f5:aa:73:b2:16:
39:58:21:ab:5b:06:b0:7d:c9:35:93:12:fc:73:c6:02:83:db:
f6:7d:a2:9b:cb:70:67:0c:79:98:8d:2e:13:a8:b1:07:77:7b:
c6:38:5e:80:ff:9f:e1:c2:8c:b7:40:7f:69:eb:4d:2b:5c:f6:
cc:f2:19:86:95:0c:0a:83:2d:a9:ab:da:10:91:42:9c:fe:41:
51:b8:c5:28:49:e4:57:db:62:c0:81:ae:9b:99:c1:f5:0d:ed:
d4:e5:ae:a1:55:5d:5c:10:0e:e3:fd:53:ae:9c:b3:60:0c:bc:
98:10:b8:7c:ad:f1:1e:48:1e:93:ae:74:c2:f2:eb:9b:a5:c7:
1e:18:db:4b:7f:3d:a2:80:a0:99:c9:96:f0:1d:7b:e9:95:f8:
92:c5:9d:44:29:3d:1e:79:5a:d5:e8:70:ce:67:77:e7:43:af:
f8:7d:88:a5:82:8b:86:00:fc:08:e6:a8:db:87:1f:66:66:8f:
da:81:af:af:f9:b7:8d:b4:b9:32:c1:de:34:c0:9b:09:29:39:
f1:95:02:37:5a:86:a7:f5:ca:3b:84:18:c1:b3:d9:c4:de:34:
11:d4:b4:4d:1e:eb:90:c1:fc:15:c8:c3:af:82:08:96:4a:d4:
74:4b:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:43 2026 by rpki-client