Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
File: 2JB-iKU1XdbEkzENqQnEnILmRis.mft (raw, json)
Hash identifier: ykgMv5P8RLUI4H/1AaNxj4Wr/ddWSakx2f2ClYWb1h0=
Subject key identifier: D8:6B:9B:31:49:58:87:20:56:2A:86:D4:49:A3:E7:66:BE:97:7E:44
Authority key identifier: D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
Certificate issuer: /CN=d8907e88a5355dd6c493310da909c49c82e6462b
Certificate serial: 01A17DE0E048350CF39FCE4339A988A58920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:00:51 +0000
Manifest this update: Tue 27 Oct 2026 15:00:51 +0000
Manifest next update: Wed 28 Oct 2026 15:00:51 +0000
Files and hashes: 1: 2JB-iKU1XdbEkzENqQnEnILmRis.crl (hash: z0mYAY3USjlsnHLwZwnJlCd9ErkUlFB6ZtWXyUEvZ4o=)
2: xFRlA_WCCtl4Fju19ONjDEmoD1k.roa (hash: UGXakbfRLTme4sGda2l7oDppZgoq8uWKm7vnvwj4GMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e0:e0:48:35:0c:f3:9f:ce:43:39:a9:88:a5:89:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8907e88a5355dd6c493310da909c49c82e6462b
Validity
Not Before: Oct 27 15:00:51 2026 GMT
Not After : Oct 28 15:00:51 2026 GMT
Subject: CN=d86b9b3149588720562a86d449a3e766be977e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:e4:ea:f0:ec:74:f9:38:87:5a:4b:34:41:
66:8e:62:e5:58:99:f1:ef:ba:f8:11:b7:f1:03:19:
76:f8:13:fa:ec:d0:5a:c1:c6:10:36:2e:00:40:39:
21:2e:96:b9:a0:72:72:f7:58:7d:88:ef:95:2e:51:
7b:13:59:da:1f:c0:bd:43:ac:59:11:c1:c5:a5:2a:
82:fb:5b:55:8d:6b:ec:0a:03:ed:8b:d9:97:cf:b9:
fe:ec:ef:b3:6c:b1:f5:78:7c:04:a9:a6:20:80:fc:
ab:07:1b:31:26:7b:d3:4a:fb:79:dd:40:92:5f:c6:
8f:d5:21:28:cb:38:a9:cf:f7:9d:eb:e0:21:83:87:
4b:bf:21:d3:2a:a8:96:61:01:b7:83:30:cc:f7:db:
68:d0:ab:81:43:ee:bc:b8:46:de:f1:57:d3:46:30:
14:74:6c:26:31:d6:7a:31:4d:76:5f:25:a3:c7:f8:
8c:4f:f9:20:f6:b0:3b:d2:a6:08:99:f9:ce:fc:91:
3e:bc:10:ee:d1:ca:6b:bd:ac:46:56:2b:66:a7:76:
17:2f:7f:31:b0:03:4c:84:c0:cf:56:55:2c:d0:22:
d8:90:8e:cf:59:e8:a6:b0:e4:85:e6:ae:63:bb:b0:
51:d3:fa:a0:ce:b3:af:b9:b5:79:38:14:cf:fe:bf:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:9B:31:49:58:87:20:56:2A:86:D4:49:A3:E7:66:BE:97:7E:44
X509v3 Authority Key Identifier:
keyid:D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0d:01:8d:99:af:2e:05:1e:b1:5e:36:86:9f:cc:c5:07:44:
08:b9:86:f6:ad:97:7e:b5:94:38:1d:b6:61:7c:11:30:fe:dc:
29:a9:e3:45:92:58:3f:3e:0d:6e:9c:31:d8:a4:89:68:18:62:
39:4b:d8:38:e4:7c:f3:e1:6d:9a:95:e3:59:5d:21:d0:6a:ed:
b8:ba:60:6f:74:f9:55:f8:e5:d1:b3:af:2b:c0:5e:d4:8f:8d:
9e:7c:1e:aa:ef:e6:19:54:34:63:09:8d:8e:68:bd:60:5c:26:
e8:2e:37:2d:c6:bc:71:0c:0b:b8:bd:ec:82:d2:bc:57:de:b4:
1d:84:df:93:57:2c:5c:f6:08:3e:3b:b0:e4:c2:3b:64:1d:29:
92:12:b8:d0:59:46:6d:db:ab:42:11:31:43:57:f0:b2:b4:9e:
c3:a8:72:c6:55:fb:c3:dd:0c:6a:2f:bd:88:a9:4a:43:b5:17:
06:ec:bd:11:38:64:d2:5a:bd:68:7c:76:d7:43:4b:2f:4b:22:
01:3c:06:25:14:dc:14:a3:47:7c:9d:22:45:6e:0f:4f:83:d3:
14:d7:74:6b:40:1d:99:3d:01:11:8d:fa:cb:07:8b:b4:52:63:
6e:c6:08:02:4e:ea:95:b8:d4:57:9b:f8:f0:ca:0d:d6:6b:0e:
13:3f:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:48:10 2026 by rpki-client