Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: Vc7z5ybsSQydOOtpmV2+ihlyP9PWvP+nF7/PwRD8wMY=
Subject key identifier: 4A:BF:E3:71:6F:F8:25:E5:76:ED:FF:7F:8B:4A:A6:48:66:73:36:21
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 01A001DD6DC9AC2E855375B153CF0A92E41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0F67
Signing time: Fri 14 Aug 2026 20:01:23 +0000
Manifest this update: Fri 14 Aug 2026 20:01:23 +0000
Manifest next update: Sat 15 Aug 2026 20:01:23 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: cRWdteZHBRKu8aM6GlL/2hKb38qd9Pft8duCMS1tz3s=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:6d:c9:ac:2e:85:53:75:b1:53:cf:0a:92:e4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Aug 14 20:01:23 2026 GMT
Not After : Aug 15 20:01:23 2026 GMT
Subject: CN=4abfe3716ff825e576edff7f8b4aa64866733621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:c6:34:d6:5f:38:ca:03:7f:e7:86:04:65:
5d:a7:1d:69:a1:0b:6b:2b:5c:1d:5c:2c:19:96:fd:
f7:53:36:b9:17:85:af:b6:44:e3:6f:df:b6:43:5a:
a4:7a:e4:55:09:f2:c3:23:58:a0:89:27:93:a2:42:
49:55:6a:ae:cb:a7:16:30:fa:c8:f4:2d:83:8a:c9:
d3:46:46:54:ea:24:ae:5f:cd:a0:a3:ac:2f:c9:29:
8d:c0:57:ad:ff:8f:b9:21:b9:03:38:6b:63:f1:b5:
50:c8:f7:19:d0:64:80:c9:39:b3:f0:a4:f0:db:87:
75:56:06:75:6c:b0:ff:1e:2d:63:fd:51:0e:a3:5c:
39:25:4c:60:49:f2:4b:eb:c2:52:55:3a:63:ec:ba:
f3:64:24:9d:9c:50:ae:fa:06:a3:7c:51:a7:c0:95:
e8:ad:2d:b9:69:ff:0c:44:0f:15:2e:69:1d:f4:26:
4d:32:7b:13:65:c7:2a:a7:4b:5b:b5:ac:90:f9:e3:
57:81:59:73:77:a6:5d:ec:89:6a:ea:9f:f5:0a:f0:
19:5b:6e:5a:74:40:5b:b0:68:88:9a:30:b4:4a:ce:
91:63:54:f6:b3:bb:4b:c7:a3:98:ae:72:f0:22:b9:
1b:9d:03:1b:3f:f6:f5:19:b0:58:52:00:41:b9:38:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:E3:71:6F:F8:25:E5:76:ED:FF:7F:8B:4A:A6:48:66:73:36:21
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ac:ca:e3:3f:76:0c:b1:3d:95:57:5f:27:cb:0c:12:41:44:
5a:75:9d:4b:d7:a9:d5:5f:24:8e:49:01:f8:e4:c0:4e:89:ac:
11:13:cf:f7:31:6d:88:75:68:64:5c:34:00:85:c3:7d:05:c3:
17:4d:7d:65:19:69:6d:ec:11:91:6f:71:f0:f2:58:86:65:9d:
94:c1:34:0a:88:53:4a:c9:af:36:93:5c:2e:16:80:22:75:15:
d8:c3:9a:7f:92:93:71:fa:3e:29:4f:87:3a:03:55:b7:14:68:
8d:89:73:23:a9:1d:aa:90:d3:25:79:60:bf:2c:ef:68:fc:90:
56:72:21:97:91:29:91:1a:76:7f:e6:26:46:16:b8:e3:bf:fc:
73:37:e5:01:24:53:a0:b6:b7:48:9f:51:29:41:eb:43:8f:bd:
98:11:48:0d:2b:a4:f6:03:48:71:f6:8e:49:ec:aa:2b:8e:dc:
22:9c:26:fd:e1:14:a9:e5:25:c1:2a:b8:48:0d:a5:52:2a:df:
37:62:7d:b3:a8:13:d6:8e:8a:ea:7f:00:f6:73:b1:8f:d3:b6:
e2:4a:93:d0:a4:7f:75:1a:30:19:fe:ce:b2:83:a5:d2:cb:cc:
ca:81:4c:d4:b1:10:bb:5a:ea:13:f9:fd:41:14:cb:cc:60:e5:
55:29:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:55 2026 by rpki-client