Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File: 2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier: 1DIyr+NlfQSiKxQhEe+TTpKBYBXC2UMC0gBVbPKbxlI=
Subject key identifier: 5D:C8:C7:15:01:44:95:8C:B4:BF:B9:1F:35:FA:D7:74:20:B5:AB:63
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer: /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial: 019D37C0A5BA788292F8E4BFA81521C1FE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 04:01:05 +0000
Manifest this update: Sun 29 Mar 2026 04:01:05 +0000
Manifest next update: Mon 30 Mar 2026 04:01:05 +0000
Files and hashes: 1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: 0G5WX/9vrCPunSz6qwYusp7IGCgbvzV5Xmg/ZXOC4uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a5:ba:78:82:92:f8:e4:bf:a8:15:21:c1:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
Validity
Not Before: Mar 29 04:01:05 2026 GMT
Not After : Mar 30 04:01:05 2026 GMT
Subject: CN=5dc8c7150144958cb4bfb91f35fad77420b5ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:c9:53:5f:3e:cf:a1:85:c7:e9:c3:49:6f:
60:8c:08:d1:10:ca:2e:cf:55:c7:d1:3e:6f:04:90:
5a:e3:d2:97:d7:69:c3:2f:bc:64:0d:51:39:47:c7:
da:12:dc:72:56:42:99:8e:67:0a:cf:f9:88:d5:7a:
9f:66:db:4f:f2:89:fa:07:b6:20:d3:12:38:04:54:
fa:19:f9:18:1f:9a:99:27:82:9f:f3:d3:57:72:73:
89:c8:0a:ff:5a:17:ee:e2:44:a5:19:ce:99:70:e9:
3c:61:d5:4d:e8:bb:d6:b9:b6:41:78:db:b4:84:cd:
e9:ef:54:17:e5:2d:7f:e9:13:98:29:4a:83:45:92:
25:95:80:41:86:ff:be:a5:da:72:92:f3:71:c7:38:
c4:b0:c5:ae:eb:80:78:60:6b:fb:dd:ea:32:7e:e3:
43:af:3c:38:0e:e4:cb:7a:5d:f9:6e:86:ef:9c:c7:
eb:57:b0:af:8c:ed:42:87:25:93:9a:a1:d8:89:99:
15:24:5a:ba:a8:d6:04:47:f4:4e:2e:89:b8:93:e3:
d5:18:a7:be:a7:47:ba:c9:c1:f7:be:c4:11:ea:1a:
6a:03:5b:90:03:2f:03:f5:5b:c4:09:dd:e0:4c:0f:
91:0e:8f:fd:5f:78:4b:2f:4e:63:95:16:de:19:82:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:C7:15:01:44:95:8C:B4:BF:B9:1F:35:FA:D7:74:20:B5:AB:63
X509v3 Authority Key Identifier:
keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:e5:34:ff:6e:9c:92:ba:e3:f8:61:7a:47:af:63:7c:d9:
e8:e0:d4:04:ab:fa:e2:ed:1c:d1:67:9f:78:a6:9b:be:b6:17:
45:29:52:38:d2:d4:42:7a:9d:9c:35:46:60:bc:82:44:56:4d:
a2:fd:e2:c5:66:51:60:d7:4c:5e:64:eb:b7:d5:65:8b:95:96:
1d:2a:2d:e5:18:bc:3f:0d:fc:29:4b:6b:42:e5:29:b8:0a:ea:
a0:42:5d:ad:c5:01:60:0e:9c:0e:19:54:2f:30:66:d8:6c:23:
96:2e:a0:60:9a:f3:30:4b:e8:d3:c9:0a:a5:1d:88:7f:5d:17:
62:de:eb:cc:ad:a0:8a:c9:49:48:57:22:e0:7a:5c:f4:0d:50:
75:1f:ee:91:1d:ca:df:f5:45:da:24:03:fb:c3:26:80:8f:d9:
7a:56:d3:3d:a9:1e:a2:d1:f8:94:7b:f4:4f:69:1f:f3:53:39:
df:98:fe:59:2d:28:67:e7:94:78:15:1d:23:1f:70:e5:16:59:
af:ef:88:ee:f1:aa:f5:91:21:38:61:91:77:df:4f:4f:96:5c:
3a:88:8b:4a:01:2c:07:56:65:a6:e5:fc:3d:d9:18:99:9d:e2:
01:cf:a8:18:16:27:96:5a:da:1f:63:04:8a:d5:2f:5c:37:d5:
58:15:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:47 2026 by rpki-client