Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: rM9t/twfmDrSqMGBHlo/JEI+0gJtvO+2XX7Lc3NN6Ns=
Subject key identifier: 44:1F:0A:BC:EA:C1:51:7B:75:DB:8B:54:77:FB:F7:B8:1D:AF:09:57
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019CE17D8D8A3FC2823C3F7D9FC211E294BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0E3B
Signing time: Thu 12 Mar 2026 10:00:27 +0000
Manifest this update: Thu 12 Mar 2026 10:00:27 +0000
Manifest next update: Fri 13 Mar 2026 10:00:27 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: m/59EIyI8dJYmERe+J7LBA/VX/KsVo2prWDuM5ybzIM=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:7d:8d:8a:3f:c2:82:3c:3f:7d:9f:c2:11:e2:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Mar 12 10:00:27 2026 GMT
Not After : Mar 13 10:00:27 2026 GMT
Subject: CN=441f0abceac1517b75db8b5477fbf7b81daf0957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:9f:d2:7a:e1:58:2e:7e:a7:85:33:0d:e3:
fa:aa:88:ff:78:22:ef:c1:69:20:8e:ee:50:7b:e3:
b9:74:d3:6b:6c:29:78:10:43:60:55:a1:59:d3:23:
b4:a5:f6:0b:e6:6c:f1:8a:b1:b7:b7:e4:b1:e7:04:
e0:5f:cf:ce:f9:3e:77:4d:15:cc:82:b5:20:ed:2a:
64:95:7c:d6:67:f1:bc:35:b4:4a:ab:ea:4d:58:d3:
df:75:8d:bb:92:06:73:44:c1:d1:d6:fd:58:a8:4c:
90:68:8f:d9:47:30:cc:1f:c0:ce:e5:b8:d7:65:4a:
1e:1f:b8:d7:52:83:43:5c:0c:9c:e2:83:8b:b2:8c:
be:f2:bb:64:9d:20:25:68:7d:f9:d8:ed:2c:0a:a7:
5f:cb:70:e2:95:22:1c:6f:3e:46:b7:9b:42:70:55:
d7:3a:bc:50:cc:5f:b8:34:e7:b0:e3:01:2c:ad:0d:
27:f2:7e:b7:91:f5:d1:6d:e8:54:06:89:49:dd:21:
11:10:f4:02:ed:a4:4f:36:21:6d:a8:06:35:0c:25:
d2:b8:ec:72:c4:de:ea:73:cb:87:33:75:d7:63:df:
78:e6:03:f9:c9:a8:0d:38:9a:6e:a0:77:a0:e8:4d:
d4:a2:f0:70:3c:35:27:a8:7e:81:dc:90:ad:c5:d9:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1F:0A:BC:EA:C1:51:7B:75:DB:8B:54:77:FB:F7:B8:1D:AF:09:57
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:09:e3:9a:8c:54:22:5a:82:c8:5f:52:b1:93:bf:ed:e7:2b:
7a:e5:95:db:fb:ca:9e:e6:2e:d1:4c:32:60:8d:45:de:90:5f:
cf:bd:71:e9:a6:e5:a7:3b:75:32:bc:28:f5:06:10:6c:c9:fa:
c1:cf:58:13:95:5b:d0:a1:92:3b:6e:8f:d0:2b:9b:33:24:c3:
a4:26:bd:f1:03:bb:0d:de:c2:da:24:9e:ef:55:68:55:1f:44:
94:8f:a4:7b:18:a6:f7:98:c1:f9:ba:e6:0d:a6:56:d3:39:9e:
17:04:29:4a:fb:cc:63:ac:d9:37:08:d3:ae:57:9a:33:8a:24:
35:c6:98:9c:85:65:f7:4d:1b:33:3c:e1:bc:1e:fd:a5:44:ce:
f1:82:3d:69:84:69:31:a6:cd:b8:41:69:11:38:ff:c7:e1:a6:
ff:9b:fd:bc:3d:1c:ac:6d:5f:b6:59:24:b2:72:c0:1d:17:12:
07:95:55:14:42:3a:c5:1c:27:c4:fa:b3:71:47:fe:07:84:16:
b5:64:05:e1:e1:07:a8:16:e5:0f:91:3f:0c:ea:af:e1:41:7a:
5a:68:49:45:89:f5:25:16:b2:2d:f0:a4:b9:68:7e:2f:1c:d7:
87:41:74:e1:cf:50:e9:bb:97:f8:e9:28:dd:47:da:4d:84:07:
29:90:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:13:09 2026 by rpki-client