Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: ykxu/uJ9IGG32hRVK6HdYIcCcRPMgG7wZt3cf30jZCo=
Subject key identifier: D7:66:6F:64:F3:AD:09:67:A0:5F:4F:1F:86:72:CC:51:CB:05:55:A6
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019EB6C5B264F4E11CB84EB4D6C4B191B3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0F2E
Signing time: Thu 11 Jun 2026 13:01:09 +0000
Manifest this update: Thu 11 Jun 2026 13:01:09 +0000
Manifest next update: Fri 12 Jun 2026 13:01:09 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: pfYcJx8wgo7XA7499BJ4Zjek/4nSyOdiBRoSCfZyXJk=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:b2:64:f4:e1:1c:b8:4e:b4:d6:c4:b1:91:b3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jun 11 13:01:09 2026 GMT
Not After : Jun 12 13:01:09 2026 GMT
Subject: CN=d7666f64f3ad0967a05f4f1f8672cc51cb0555a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:e9:3d:9b:b2:9f:ce:92:f2:79:ae:a1:9b:
ed:11:ac:5e:18:77:98:51:dc:90:be:36:dd:14:30:
07:58:f8:31:84:8f:9b:45:06:33:d8:84:9a:eb:f5:
f9:71:25:92:6c:5c:0c:b4:8e:51:9e:b9:25:45:a8:
2f:60:64:42:c3:a4:8b:36:2d:3b:1d:00:b1:5d:36:
b8:49:39:f6:1d:bf:ad:95:e6:4a:67:8b:28:90:0a:
bf:6c:27:a8:a9:c5:24:c2:a6:ab:c6:b5:0f:a4:42:
65:d6:fc:cf:97:d0:80:f4:86:a0:62:b2:df:12:98:
3c:0d:bc:09:4b:10:f4:39:09:bc:64:a2:f5:4a:53:
c5:24:11:76:ea:e6:24:75:3b:63:69:5a:ff:f3:cd:
da:d0:a8:8e:25:e5:92:b7:51:21:78:18:95:70:90:
7c:18:e5:bb:df:c2:88:94:d6:e3:57:0b:70:26:3b:
89:9f:85:a6:ff:20:31:20:24:c4:99:39:95:dd:86:
12:9e:b8:40:4d:76:6b:f8:a8:75:69:aa:2e:d4:ce:
6e:c2:dc:18:86:bc:e9:48:5c:f6:1b:25:14:a8:1f:
b5:d9:05:2f:dd:97:da:c3:e4:32:49:67:73:26:d4:
4e:0b:0a:b6:54:30:ba:c3:18:72:a0:e5:bc:7b:eb:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:66:6F:64:F3:AD:09:67:A0:5F:4F:1F:86:72:CC:51:CB:05:55:A6
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:d3:f4:bb:a8:cf:1b:10:ce:0b:46:c1:11:dc:c1:fd:85:
9e:df:35:db:5d:6c:c4:01:fb:36:32:b1:0d:07:b9:dd:0d:ea:
ae:a1:41:50:1f:39:94:d0:54:0a:da:76:b5:fd:4b:b6:88:fb:
b7:b6:36:23:8f:f8:4b:6a:67:fd:7f:f1:86:29:61:48:21:0b:
25:4d:ba:cb:8c:1e:e5:25:35:ea:ce:da:0b:49:af:6f:04:8c:
cb:27:5e:5e:da:9f:f5:3a:f7:dd:4a:99:0e:0a:f7:f5:1c:c6:
b4:28:43:d6:1e:da:5a:36:b3:42:ab:2e:67:f6:36:3d:85:24:
8f:d2:2e:30:26:ee:8a:a2:67:92:21:22:f2:a9:76:2a:6c:42:
5d:5a:e4:1d:01:0e:95:2f:b5:62:08:2e:be:ec:c7:fa:3d:a1:
1b:38:ce:58:0d:ba:df:2f:5c:9f:e2:1c:80:f6:35:1f:df:d6:
c3:c7:e5:a4:65:49:31:22:15:c7:98:4c:57:a3:d3:3b:4e:8c:
eb:63:9e:55:ff:57:19:0d:fa:68:68:ff:68:ca:a8:be:ce:0a:
94:05:18:a4:81:a7:dd:75:06:20:c6:13:26:c6:df:a7:02:ef:
34:1c:35:6e:1f:2e:82:26:e4:86:6f:59:17:01:3a:b8:4e:a5:
fb:20:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:35 2026 by rpki-client