Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: i9CnnkiWFZGh6kJVarDM6W4hDZFUe3JmuyDYFbuQ+zA=
Subject key identifier: E6:D5:E5:D4:C5:3D:DD:CE:ED:97:F9:51:46:73:6E:D2:14:B8:05:BC
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019FA0718B2BBD7E3CC9D2B003B6C609B422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0FA7
Signing time: Sun 26 Jul 2026 22:00:23 +0000
Manifest this update: Sun 26 Jul 2026 22:00:23 +0000
Manifest next update: Mon 27 Jul 2026 22:00:23 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: JLrVMh/3f7lsCyfA43uLuZTU/Lqfv1F62hUpxPC7tdg=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:8b:2b:bd:7e:3c:c9:d2:b0:03:b6:c6:09:b4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jul 26 22:00:23 2026 GMT
Not After : Jul 27 22:00:23 2026 GMT
Subject: CN=e6d5e5d4c53dddceed97f95146736ed214b805bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:b5:da:e3:00:ae:42:50:f7:71:69:be:e1:
77:d0:19:cc:35:c8:fa:30:14:d9:29:de:6c:db:8c:
f5:78:69:0a:7e:5e:72:b4:82:d5:e1:2d:58:f0:fe:
67:d4:61:f5:2d:00:5e:71:5c:3d:f6:5c:78:4e:9f:
4e:68:35:be:1b:28:79:aa:59:0f:b5:66:d6:ea:4f:
75:0f:24:86:d7:36:5e:33:66:fd:68:48:96:75:dd:
6c:cc:5e:b8:2f:8d:09:b1:5f:6b:5b:2c:ad:25:0f:
5d:36:6d:c0:67:20:3b:da:08:67:17:79:74:a5:7b:
e4:e5:1c:1c:f8:e1:70:bd:5a:de:ca:f0:fe:4b:17:
5a:80:58:91:65:c7:b5:c9:0b:67:3b:d5:62:d4:61:
d4:08:1b:f3:9d:81:a3:58:4d:fa:3a:d4:4c:50:b5:
99:00:1f:be:88:90:c7:2a:3b:17:83:e5:5c:20:69:
52:49:a0:4f:29:3d:47:3d:cf:37:0f:19:45:59:74:
00:f7:0b:29:58:bc:ec:65:2d:47:97:d2:46:0f:d8:
fa:d7:0b:82:4b:84:94:73:64:1f:f7:31:d4:98:13:
5a:d0:23:e2:29:61:ed:3f:bc:74:00:15:29:5f:22:
ca:75:99:1a:91:77:1c:6a:cc:72:d0:74:73:76:82:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D5:E5:D4:C5:3D:DD:CE:ED:97:F9:51:46:73:6E:D2:14:B8:05:BC
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f2:73:e5:31:8d:2d:1b:08:e0:ef:a0:ea:ee:55:51:22:b9:
13:af:02:d1:27:2f:f7:39:94:ef:5c:6b:e3:52:56:d6:64:49:
6a:ce:43:47:ee:6c:32:95:56:e4:36:b7:bf:24:68:91:02:e9:
82:ae:2a:d2:36:b1:93:ee:5c:95:af:7b:cc:ca:94:3b:b3:84:
a2:12:f9:78:85:cf:77:4c:a5:28:19:df:b5:f5:e3:f5:dc:2b:
31:8c:d3:67:c4:eb:ea:e5:e8:a9:ed:c6:d1:d9:f1:55:24:5f:
19:86:5d:2c:0e:fb:ca:db:c6:b6:1c:af:e1:0c:ca:71:dc:be:
c2:60:7d:57:d8:a9:90:9e:35:70:66:9e:e2:d8:88:ef:83:6e:
48:ce:47:e9:bc:04:67:8e:4e:18:b8:66:3f:87:d6:13:a6:42:
f8:84:a0:44:da:ae:8c:c8:ea:ab:05:7d:e6:3f:1b:77:bd:d4:
6f:97:5f:f3:02:4c:3b:b0:86:07:9f:b0:1e:e6:d8:02:88:58:
66:66:ce:75:32:60:08:bb:b1:f6:b4:d9:89:c8:d7:0b:6f:a1:
fb:31:a4:21:e3:50:4c:07:c6:7f:46:32:26:c0:cd:d6:81:c2:
eb:4e:4c:ae:3d:4d:14:fc:47:3d:e8:96:c8:da:13:f3:36:9a:
f2:1f:f5:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcYsrvX48ydKwA7bGCbQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjYwNzI2MjIwMDIzWhcNMjYwNzI3MjIwMDIzWjAzMTEwLwYDVQQD
EyhlNmQ1ZTVkNGM1M2RkZGNlZWQ5N2Y5NTE0NjczNmVkMjE0YjgwNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvS12uMArkJQ93FpvuF30BnMNcj6
MBTZKd5s24z1eGkKfl5ytILV4S1Y8P5n1GH1LQBecVw99lx4Tp9OaDW+Gyh5qlkP
tWbW6k91DySG1zZeM2b9aEiWdd1szF64L40JsV9rWyytJQ9dNm3AZyA72ghnF3l0
pXvk5Rwc+OFwvVreyvD+SxdagFiRZce1yQtnO9Vi1GHUCBvznYGjWE36OtRMULWZ
AB++iJDHKjsXg+VcIGlSSaBPKT1HPc83DxlFWXQA9wspWLzsZS1Hl9JGD9j61wuC
S4SUc2Qf9zHUmBNa0CPiKWHtP7x0ABUpXyLKdZkakXccasxy0HRzdoIeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObV5dTFPd3O7Zf5UUZzbtIUuAW8MB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvJz5TGN
LRsI4O+g6u5VUSK5E68C0Scv9zmU71xr41JW1mRJas5DR+5sMpVW5Da3vyRokQLp
gq4q0jaxk+5cla97zMqUO7OEohL5eIXPd0ylKBnftfXj9dwrMYzTZ8Tr6uXoqe3G
0dnxVSRfGYZdLA77ytvGthyv4QzKcdy+wmB9V9ipkJ41cGae4tiI74NuSM5H6bwE
Z45OGLhmP4fWE6ZC+ISgRNqujMjqqwV95j8bd73Ub5df8wJMO7CGB5+wHubYAohY
ZmbOdTJgCLux9rTZicjXC2+h+zGkIeNQTAfGf0YyJsDN1oHC605Mrj1NFPxHPeiW
yNoT8zaa8h/1qQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:25 2026 by rpki-client