Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
File: 2JB-iKU1XdbEkzENqQnEnILmRis.mft (raw, json)
Hash identifier: v08tal3rM2ul2szEmEapcSzpZYfEw//5iXjr/hfH2GQ=
Subject key identifier: 17:5D:14:F5:E2:32:18:46:B3:F5:7C:B2:66:75:A2:76:E4:54:71:01
Authority key identifier: D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
Certificate issuer: /CN=d8907e88a5355dd6c493310da909c49c82e6462b
Certificate serial: 019FA0E0EF74EE4EA05AB5D44CAC18B70EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:03 +0000
Manifest this update: Mon 27 Jul 2026 00:02:03 +0000
Manifest next update: Tue 28 Jul 2026 00:02:03 +0000
Files and hashes: 1: 2JB-iKU1XdbEkzENqQnEnILmRis.crl (hash: F6PRXNN/j6g+fHZJe5Igrwgaoi7QZ9jbHRYYbBdIED8=)
2: xFRlA_WCCtl4Fju19ONjDEmoD1k.roa (hash: UGXakbfRLTme4sGda2l7oDppZgoq8uWKm7vnvwj4GMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:ef:74:ee:4e:a0:5a:b5:d4:4c:ac:18:b7:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8907e88a5355dd6c493310da909c49c82e6462b
Validity
Not Before: Jul 27 00:02:03 2026 GMT
Not After : Jul 28 00:02:03 2026 GMT
Subject: CN=175d14f5e2321846b3f57cb26675a276e4547101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:c0:fd:95:64:84:46:17:a2:9d:87:5f:53:
27:76:7b:e5:ac:4a:06:96:88:8e:7a:68:55:8d:61:
7e:ba:b8:03:d6:ad:7d:20:32:61:85:fa:5f:c6:81:
57:68:1c:40:c5:f9:ae:3e:4a:37:3e:9d:ec:82:39:
df:b0:41:fc:46:b5:49:fd:3b:e8:28:51:1b:d8:4d:
7b:7f:52:d7:6f:53:92:c6:3b:24:a2:12:b0:a3:fe:
89:66:00:61:4e:15:89:0e:8a:09:73:4a:da:90:d8:
f3:01:66:b7:eb:4c:5b:f5:7d:20:c0:8f:1a:1a:68:
4b:ac:df:63:e3:82:09:d4:8f:9e:46:af:41:87:c8:
e2:e2:fe:5d:4e:04:60:0f:9a:57:80:5c:71:ef:a5:
52:5c:42:dd:e3:04:32:c8:2d:45:c0:b9:9f:cf:4a:
35:9f:e4:34:3a:48:35:bb:67:85:c8:12:dd:91:e8:
ad:c6:2f:23:3e:bb:d2:e7:d2:14:56:df:3f:f2:eb:
f3:d2:25:cc:0f:2a:26:92:fc:c2:ed:6d:0b:1f:77:
66:9e:3b:fe:50:b7:2f:4c:70:54:97:0c:aa:87:6c:
39:94:ac:2b:ae:d7:7b:a3:b1:85:22:ac:22:de:39:
fc:fc:d3:b0:8d:b3:7d:46:9b:c4:f4:42:5f:35:96:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:14:F5:E2:32:18:46:B3:F5:7C:B2:66:75:A2:76:E4:54:71:01
X509v3 Authority Key Identifier:
keyid:D8:90:7E:88:A5:35:5D:D6:C4:93:31:0D:A9:09:C4:9C:82:E6:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JB-iKU1XdbEkzENqQnEnILmRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/2JB-iKU1XdbEkzENqQnEnILmRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d3:6e:bb:d7:d8:f0:92:06:9f:97:4e:a4:49:ec:fe:ef:2d:
6f:af:7a:eb:5b:b6:69:4d:f7:ef:4f:1b:d8:4f:63:31:4a:11:
27:09:b6:00:f2:4f:9f:06:73:64:8e:3e:c8:6f:f0:cf:05:3a:
04:8e:7a:a9:34:18:f6:a5:0a:a5:4e:09:f5:11:2c:d3:b6:ae:
4b:98:15:37:fe:6f:14:63:ec:42:29:46:87:ce:25:15:e3:c0:
20:1c:28:a5:1d:bb:70:2c:1f:e0:22:30:f6:1c:73:90:19:42:
a1:01:7e:cc:55:19:a8:2e:b5:21:00:70:64:90:58:39:09:8b:
e4:74:2d:a7:df:dd:c9:28:f9:b4:1f:69:e9:01:5d:a7:9d:77:
f7:f2:98:6c:df:8a:35:d7:53:8b:96:35:06:db:47:0e:1a:69:
84:85:97:42:62:12:41:e5:8c:fa:98:0a:9f:22:c5:49:11:1a:
3d:6a:2a:84:04:6d:97:dd:3d:cb:93:6a:f3:dc:4f:69:e2:37:
88:4d:e8:36:0b:a6:15:9a:bd:26:50:d3:33:11:59:8e:0f:ea:
90:ef:b5:3b:f8:f7:f3:ba:3a:c4:3a:c5:c8:77:4a:b2:63:13:
a3:57:37:35:e6:0f:95:f7:9a:93:d6:d1:dc:9f:94:b9:6b:6d:
da:6a:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:49:35 2026 by rpki-client