Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: c4OtKo2PP+wY/v1ZthCVI/+6FrQ1CE4VxaBYSxIVOMQ=
Subject key identifier: FE:D6:18:89:4D:63:45:99:0B:05:A7:9B:69:86:4E:BD:82:29:4F:ED
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019D3940BB52EE5897E495B1C559C565B0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0DF6
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: YmvYUTh8ePOG3D/hNkPUF+HjtQ4r1LPNzWGHAU/GHvU=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bb:52:ee:58:97:e4:95:b1:c5:59:c5:65:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=fed618894d6345990b05a79b69864ebd82294fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:af:00:e6:76:e0:23:d9:b9:83:c6:c1:b8:
77:a3:a9:8b:1f:bf:3e:7a:fa:ae:6e:5e:13:d3:3f:
b3:4a:17:1a:8c:b7:31:e2:69:0d:20:85:ec:68:ba:
1a:91:a6:bf:d7:90:51:38:be:ca:f3:e6:51:ac:eb:
68:9a:ef:e8:93:9d:17:b0:96:e3:5d:2f:e9:a7:80:
cd:47:63:bc:42:ec:a7:12:a5:21:30:d1:2e:4d:81:
a2:6e:47:44:69:33:eb:05:41:d7:e3:74:26:3c:23:
42:33:90:6e:32:34:05:32:ac:67:26:69:c9:2e:96:
55:4a:21:04:36:94:b1:7d:f9:73:dc:96:c1:c2:fc:
0a:6d:2f:bc:6f:fc:23:b3:75:26:ac:b3:d6:f0:ea:
44:99:3c:d9:e5:bb:78:d5:5b:a9:46:e3:12:a2:13:
37:28:12:65:3a:1c:1d:8a:27:39:5e:d7:bb:82:61:
8c:04:1e:8b:da:0d:71:93:56:5b:06:65:66:6a:43:
05:14:0e:94:d4:04:d2:9d:45:4a:77:07:7e:6a:a6:
05:31:75:e3:09:5d:65:4f:35:68:af:02:64:5b:65:
1d:40:43:4d:b1:c4:2c:fb:47:e9:12:26:d7:e0:70:
f1:b8:e4:82:73:e4:42:64:1b:c4:13:a4:1f:0f:76:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:18:89:4D:63:45:99:0B:05:A7:9B:69:86:4E:BD:82:29:4F:ED
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:64:31:06:c9:89:81:64:dd:cd:b1:c3:6d:14:32:0a:f3:a5:
38:94:64:a6:1f:c2:cb:25:65:1b:1a:cb:38:05:54:98:90:e9:
72:93:33:2f:03:b8:17:18:18:37:91:39:6f:72:f0:27:63:20:
44:73:5c:0f:1c:28:f1:fb:65:f1:b3:32:d0:27:b3:9d:d3:ed:
2c:85:39:7e:d5:57:c4:10:bb:36:6b:ff:e3:71:cf:bf:e2:15:
6b:dc:22:ae:37:06:22:8e:83:9e:7f:19:75:eb:05:ad:51:3f:
f8:de:32:39:cb:5c:2a:07:c9:c6:ee:97:ea:fe:9b:05:12:5a:
4a:58:32:b1:18:a8:0b:26:49:77:2b:68:c1:03:cf:02:d1:bc:
c8:fe:e3:3a:79:c6:61:6a:ba:45:75:d9:df:d1:69:01:28:36:
dd:db:de:bb:1a:24:a6:cc:2c:a7:d4:ea:f3:3a:8b:0d:ae:f5:
b0:cb:60:ef:e9:34:4e:62:59:ae:2d:a9:48:0a:ee:8a:23:d2:
66:25:80:5b:b1:4d:24:b2:fd:3e:ba:57:4b:4d:dc:68:6f:11:
aa:4f:e3:72:75:70:33:80:2e:8a:f5:b1:00:ea:60:c4:7d:25:
fd:c0:a5:1c:d8:4c:7e:78:33:7f:78:2a:2f:fa:0f:85:f9:a8:
35:bc:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:01 2026 by rpki-client