Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: ffidjdjMGpItLYgRzb4eVC7w3/48EXtzkDvm2IRyepM=
Subject key identifier: 1C:22:47:92:A7:1F:6F:FA:90:FE:48:1F:E0:D5:C4:70:BC:EE:FF:71
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 01A13E94D81E5E4AEA77D6CCF94B1E0E21D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 100B
Signing time: Thu 15 Oct 2026 08:01:44 +0000
Manifest this update: Thu 15 Oct 2026 08:01:44 +0000
Manifest next update: Fri 16 Oct 2026 08:01:44 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: KYaRH6JlEQMEuKMdrG/ie/E61L1H3pOolF11M1X+GfY=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:d8:1e:5e:4a:ea:77:d6:cc:f9:4b:1e:0e:21:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Oct 15 08:01:44 2026 GMT
Not After : Oct 16 08:01:44 2026 GMT
Subject: CN=1c224792a71f6ffa90fe481fe0d5c470bceeff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:21:f6:2f:cd:12:fb:18:df:eb:5d:40:29:
93:2c:e9:94:99:7c:c6:b3:2d:d5:a0:bf:21:97:b8:
48:e7:be:8e:52:e5:52:db:9d:fa:5a:a3:5c:96:6f:
fc:9b:f5:7a:69:8f:fc:a7:e3:76:99:c1:67:6a:46:
99:03:a9:7b:a4:64:df:b5:9e:70:05:13:e8:4d:80:
b7:c2:f8:fd:22:a1:bf:76:55:77:93:10:9a:4f:ca:
b7:86:74:69:f0:01:a0:3a:d2:03:f5:86:45:9f:12:
50:e1:64:05:0b:fb:6c:65:48:41:78:01:53:9e:61:
41:c5:c8:7d:ab:1d:24:2d:45:91:89:72:02:04:e8:
42:3e:2b:13:1a:32:6b:7e:ac:ea:1c:41:86:61:e1:
c5:f2:85:39:1d:a4:7f:5b:8f:29:28:de:e5:5c:a9:
30:fa:c8:27:f2:1c:b5:8e:35:03:e3:0d:f3:82:c7:
02:d3:bd:a3:79:c9:59:81:5c:45:26:6f:de:6e:14:
44:3d:b4:3f:6f:8d:54:b8:11:fd:cb:bd:71:7e:6b:
f7:17:72:20:81:8b:c9:f4:7a:53:8d:23:1f:22:2d:
83:bf:c7:9b:96:e8:22:e3:eb:cc:12:1c:04:7a:25:
97:22:e2:46:c2:be:69:1a:40:1e:28:30:a2:ee:1b:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:47:92:A7:1F:6F:FA:90:FE:48:1F:E0:D5:C4:70:BC:EE:FF:71
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2c:49:f8:02:42:86:c4:5d:ba:fd:bd:60:fb:20:f0:86:8d:
59:8b:3c:fd:c6:d6:03:b9:78:0f:54:19:9d:b2:cb:a6:d6:30:
08:3d:4b:ba:06:c3:ca:4c:97:fd:c5:ad:e9:fc:7e:57:34:ad:
4d:72:48:a4:92:65:1d:ad:cf:cb:0f:34:85:37:25:18:63:f8:
f4:1c:38:57:1f:61:d6:7e:8b:1e:bb:02:6d:88:39:db:4c:d8:
c4:07:7f:10:26:9d:f6:62:21:17:80:37:ac:08:9f:57:bf:4f:
34:3e:57:12:15:b8:21:03:9f:01:fc:5e:f6:f6:4c:f1:aa:1f:
39:5d:b1:42:32:b4:45:26:65:9c:cd:47:bf:4e:b7:0c:6b:74:
e1:12:4a:5d:9d:73:ef:24:4c:33:38:29:0e:94:58:4c:18:20:
b6:37:f5:e1:02:e9:34:1a:31:0f:6b:ae:e8:b2:51:a8:00:c3:
8c:8a:06:f0:05:36:81:01:24:55:97:d4:c5:76:8e:de:17:b7:
ea:c8:28:b1:d4:3b:ff:9c:d1:e5:16:6c:bb:29:7d:37:75:74:
2e:55:4c:16:59:1a:80:4d:11:e8:51:83:11:e7:3c:6c:c3:67:
ab:1a:f2:55:ec:82:31:ee:b4:9f:cd:c8:49:96:9b:59:2d:61:
b1:f7:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:07 2026 by rpki-client