Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: KyjgQTAx+Bwhsj4WVNiGmh7S4OQxjSWEJtx6P6hatYM=
Subject key identifier: D4:21:80:15:B0:57:42:98:B2:AF:F5:1E:59:D0:AB:E3:0D:68:8A:8A
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 01A08A1E36C0F75F6DFFC998BBA23429A47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 1020
Signing time: Thu 10 Sep 2026 07:00:30 +0000
Manifest this update: Thu 10 Sep 2026 07:00:30 +0000
Manifest next update: Fri 11 Sep 2026 07:00:30 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: FFT08bQ+GEyR9eqQKqYYUfhhiUmKSnelKkYQyOG5N3Y=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:36:c0:f7:5f:6d:ff:c9:98:bb:a2:34:29:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Sep 10 07:00:30 2026 GMT
Not After : Sep 11 07:00:30 2026 GMT
Subject: CN=d4218015b0574298b2aff51e59d0abe30d688a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:21:27:c8:e0:20:30:bb:0f:b4:ec:e5:30:
c0:0b:e4:55:eb:28:0a:69:37:48:92:db:75:03:2f:
3d:f2:63:c8:c2:cc:17:03:6d:94:a0:e8:f5:ef:2b:
21:fe:fb:6b:7a:9d:e5:3e:3b:89:c0:a7:d7:6f:ad:
0c:7a:a1:87:d4:f9:0d:70:9a:b5:0c:b4:2c:8e:df:
09:3d:50:8d:d6:f1:08:8f:89:4e:bb:f5:94:0a:7d:
d1:c8:a1:08:c1:5f:20:f8:f8:75:83:d8:d8:07:e8:
41:83:47:d3:fe:ae:c2:69:64:27:1b:78:f1:2f:60:
22:b7:0e:6c:b6:19:57:39:38:23:53:22:d5:4a:97:
16:31:a4:4c:7f:10:dc:ff:4a:6a:11:06:59:9d:0c:
c6:0c:b7:07:a7:20:e3:68:10:aa:7b:c5:ed:c4:f2:
76:e7:54:ce:d8:dc:e4:0b:2a:e5:7e:90:00:d6:27:
07:85:ea:2b:da:69:4e:ae:79:fc:26:dc:fe:12:90:
3e:78:d7:5c:36:a9:0a:65:cc:b2:99:f5:51:9e:ff:
e3:4c:36:0f:a9:d1:ce:9a:b3:10:ce:71:6c:c1:95:
92:bc:5c:0b:ca:5d:8d:d4:39:67:a6:6e:b4:4d:12:
af:d8:21:6e:19:94:06:48:c9:4f:ca:e4:b0:f4:f5:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:80:15:B0:57:42:98:B2:AF:F5:1E:59:D0:AB:E3:0D:68:8A:8A
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:47:bb:35:2a:8f:61:38:43:c9:88:81:59:2c:a4:28:4f:81:
e9:53:59:2c:dc:1a:87:95:a7:ec:ba:9a:3a:2e:60:07:11:64:
f4:aa:3f:ae:eb:c9:b4:7b:55:f0:58:d8:18:b9:08:8c:a4:79:
66:72:a3:0d:b2:70:da:f0:dd:c6:f4:42:71:f0:f5:11:ab:90:
a3:d5:79:a0:c4:db:b5:20:77:0e:46:74:cd:b6:b2:07:e8:2f:
12:28:99:36:4b:09:7d:50:9b:2b:2d:4a:f5:09:bd:2d:2d:c5:
d6:57:44:ba:14:88:6b:c4:3a:6d:1d:1f:bb:7b:aa:4c:60:34:
a4:9d:e4:ad:10:08:35:1a:5d:ec:d5:0a:48:a9:01:e5:48:e0:
07:83:af:b5:1e:9c:0b:6c:b0:f2:09:e5:37:2d:4e:fd:a0:04:
37:a9:62:3b:78:9f:89:26:e9:1b:5e:13:4b:d2:26:85:9c:14:
c8:23:93:53:78:ca:cb:51:39:ef:f9:f0:11:c1:a0:f9:3d:cb:
3f:67:61:0b:a0:99:83:e4:e4:2b:fe:2d:ff:ea:71:0a:fd:b5:
6c:ea:d3:9b:4c:fb:46:4e:5e:79:57:2e:c7:b7:a9:ff:2a:0f:
3b:cb:02:ec:a8:5b:18:f6:76:24:81:f1:44:f7:7c:74:9e:9a:
a2:08:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:35 2026 by rpki-client