Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: jFlE3+c3STf/ssjllvKOBkBwMtpMxe/DC6/CJjlu2zA=
Subject key identifier: 7C:53:04:F7:AF:44:93:1A:1D:8A:F8:F7:0C:77:9F:A9:6F:78:B3:A2
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019DCD1914B596EAC3C7B4B2360193CEEA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0EB5
Signing time: Mon 27 Apr 2026 04:01:06 +0000
Manifest this update: Mon 27 Apr 2026 04:01:06 +0000
Manifest next update: Tue 28 Apr 2026 04:01:06 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: fBCJAn2sN3wOGhVrkNYyoCTQgpjH+4TdWfQIKOtmtK0=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:14:b5:96:ea:c3:c7:b4:b2:36:01:93:ce:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Apr 27 04:01:06 2026 GMT
Not After : Apr 28 04:01:06 2026 GMT
Subject: CN=7c5304f7af44931a1d8af8f70c779fa96f78b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:04:a6:f9:91:ec:d2:bc:d1:49:cc:ab:22:
48:34:16:57:fe:ee:c0:21:96:76:c5:87:b5:49:d4:
01:5f:f9:ae:9c:d6:6e:37:ec:9b:25:d3:ed:0e:3c:
4f:b5:1b:e3:d2:b8:af:ed:45:7e:a5:e7:8a:ec:88:
1d:8b:fb:6e:87:e3:38:4d:8f:c6:fd:64:1e:ad:b0:
4b:ae:ef:23:72:ac:9b:9c:a2:a2:1f:b9:88:fc:92:
e4:fc:b6:3b:c6:09:fb:99:f6:8c:32:0b:cf:c8:0e:
63:e8:e4:92:a4:5c:81:b8:c4:3f:88:02:91:aa:7b:
57:0b:95:00:fd:f9:e9:12:d6:54:5c:ee:49:63:b6:
25:4a:1a:b3:2d:4c:c6:c6:3c:bc:bf:a8:aa:2d:15:
09:6b:96:4a:d2:06:44:86:a7:35:97:47:c5:a2:b3:
ff:ab:0d:54:33:e7:88:2f:11:f1:11:fd:f6:57:f8:
9a:fb:76:a3:21:0e:cc:39:b7:77:b1:6a:31:bb:13:
30:67:df:90:0f:c7:0b:c3:af:a2:64:51:1d:3a:9d:
e4:36:f9:d4:de:5c:19:56:5b:68:5d:74:4e:b5:71:
02:56:f0:1f:ed:c7:26:33:29:5d:1f:39:82:a4:31:
d2:cf:20:82:f9:e6:62:ea:b5:9c:8e:a3:2e:3f:14:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:04:F7:AF:44:93:1A:1D:8A:F8:F7:0C:77:9F:A9:6F:78:B3:A2
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9f:79:36:ea:e7:e7:dc:cb:98:01:94:58:00:0c:54:da:99:
f2:52:32:f2:77:bb:34:f2:d8:a3:74:e9:76:ac:05:24:99:e2:
e0:5b:d4:23:aa:3c:32:93:f7:1d:9e:e9:ad:d6:20:f1:01:7e:
12:96:b8:b2:a8:e1:86:ab:a7:16:2f:5a:1f:f2:bd:61:c2:a7:
1d:d8:3b:24:c2:fc:9d:ec:5b:43:8c:b2:aa:cc:cf:b2:ad:8f:
bc:e3:b7:e2:81:38:5f:f3:94:6f:36:d1:37:bd:a4:10:f3:0d:
69:d0:66:30:d4:82:93:45:35:1a:2b:44:3a:1b:71:84:af:85:
f8:3f:18:77:79:44:0d:e4:e8:b1:c3:73:a0:e2:19:5a:b6:bf:
de:e4:82:e4:ae:b6:b7:81:07:71:85:bc:a5:e1:21:32:be:41:
55:08:9b:11:73:66:a2:92:9b:92:f4:d4:bb:82:4a:22:1b:b2:
05:41:90:96:58:af:cc:91:67:be:e3:66:b0:9f:40:16:f0:8c:
8c:9e:72:91:c8:45:ba:04:58:81:d8:c1:c3:0e:77:a9:1b:e5:
3a:f7:e7:65:ba:84:4d:74:e1:ec:cd:3d:23:30:47:09:55:00:
e6:54:21:e7:64:19:3c:fa:88:36:af:5d:5c:92:f4:fa:c5:15:
70:9e:98:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGRS1lurDx7SyNgGTzuqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjYwNDI3MDQwMTA2WhcNMjYwNDI4MDQwMTA2WjAzMTEwLwYDVQQD
Eyg3YzUzMDRmN2FmNDQ5MzFhMWQ4YWY4ZjcwYzc3OWZhOTZmNzhiM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfIEpvmR7NK80UnMqyJINBZX/u7A
IZZ2xYe1SdQBX/munNZuN+ybJdPtDjxPtRvj0riv7UV+peeK7Igdi/tuh+M4TY/G
/WQerbBLru8jcqybnKKiH7mI/JLk/LY7xgn7mfaMMgvPyA5j6OSSpFyBuMQ/iAKR
qntXC5UA/fnpEtZUXO5JY7YlShqzLUzGxjy8v6iqLRUJa5ZK0gZEhqc1l0fForP/
qw1UM+eILxHxEf32V/ia+3ajIQ7MObd3sWoxuxMwZ9+QD8cLw6+iZFEdOp3kNvnU
3lwZVltoXXROtXECVvAf7ccmMyldHzmCpDHSzyCC+eZi6rWcjqMuPxQC7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxTBPevRJMaHYr49wx3n6lveLOiMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp95Nurn
59zLmAGUWAAMVNqZ8lIy8ne7NPLYo3TpdqwFJJni4FvUI6o8MpP3HZ7prdYg8QF+
Epa4sqjhhqunFi9aH/K9YcKnHdg7JML8nexbQ4yyqszPsq2PvOO34oE4X/OUbzbR
N72kEPMNadBmMNSCk0U1GitEOhtxhK+F+D8Yd3lEDeToscNzoOIZWra/3uSC5K62
t4EHcYW8peEhMr5BVQibEXNmopKbkvTUu4JKIhuyBUGQllivzJFnvuNmsJ9AFvCM
jJ5ykchFugRYgdjBww53qRvlOvfnZbqETXTh7M09IzBHCVUA5lQh52QZPPqINq9d
XJL0+sUVcJ6YSw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:48 2026 by rpki-client