Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: R6r9X25T7UDSeQPAuobzAh5nSDn8Pllrn4A9t0q8lJE=
Subject key identifier: EB:7B:0D:64:09:19:9B:97:A5:CB:29:F5:65:AA:A8:B5:A8:22:EC:4D
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019D37894D5F2C99F884B8B1AC815408D21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: SdsHTMdhm7c9rWt6rHfXd6q6LJVk89vRw9skgW8jzCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4d:5f:2c:99:f8:84:b8:b1:ac:81:54:08:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=eb7b0d6409199b97a5cb29f565aaa8b5a822ec4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:fe:e4:d0:1d:c6:35:d7:08:bc:a7:6b:6c:
87:0f:3a:1c:70:5a:92:52:8c:08:99:23:53:20:62:
c9:b8:65:61:d7:a5:50:ab:27:46:6d:48:c5:11:f1:
36:6d:33:1f:24:5f:8b:17:76:23:46:70:ae:3a:96:
af:b0:f0:3b:16:2d:f7:47:f0:56:67:13:51:91:94:
31:af:9e:3f:bb:ab:cb:4c:83:d6:86:7f:2c:b6:60:
9e:89:e4:ba:1b:4d:e0:3d:74:90:f8:3d:73:1b:ed:
f8:c3:78:d8:e4:a0:e3:d6:7e:e8:e5:11:73:27:65:
dc:a9:7d:6f:65:af:b8:18:fe:82:67:1e:24:41:0c:
29:33:e4:6c:bb:1e:e5:de:41:90:4b:38:ab:bb:f1:
a3:6d:c8:2d:5e:d4:55:0e:0d:4a:92:dc:73:f4:59:
4f:67:64:e3:e1:56:23:57:14:21:ff:28:94:31:e7:
24:e4:0c:27:76:be:e5:4f:1b:94:24:dc:85:93:c0:
e4:ce:82:ee:c6:14:4a:f9:37:34:db:d4:7b:14:ac:
27:68:80:61:8e:e3:e2:e2:62:6c:87:40:27:28:b8:
a8:1c:be:2f:f8:e4:f5:2a:81:9a:3d:1f:73:ba:2d:
90:f8:0b:ec:51:35:2a:83:9b:a1:e2:96:49:73:19:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:0D:64:09:19:9B:97:A5:CB:29:F5:65:AA:A8:B5:A8:22:EC:4D
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e7:32:c4:85:af:49:01:6c:46:af:d9:99:ee:28:b9:f8:d4:
b8:48:af:e4:12:23:4d:68:9f:4b:ea:7d:17:c6:b2:06:8e:37:
6c:6b:45:7b:c7:82:25:7d:20:7c:3d:50:a5:70:cf:00:40:e9:
43:57:8e:1f:ab:c0:c2:48:94:cc:3b:2c:92:fe:e7:c3:78:70:
08:a1:ae:e5:48:f1:a9:5e:a5:c5:84:09:bd:f8:d0:a1:51:42:
40:67:7e:68:44:37:90:8b:f3:e8:70:3e:d1:d1:3b:88:fe:54:
23:33:16:4e:ae:90:05:20:19:07:ce:35:c7:cb:bf:10:4d:7d:
e9:70:97:90:f8:d7:58:d4:30:0d:52:fe:36:54:c0:cb:56:3b:
e2:b8:b6:92:37:f1:63:d9:7d:7e:00:5a:cc:b1:c2:cb:32:e6:
8c:6a:ea:6b:1b:89:85:29:31:a9:14:56:41:01:ba:12:23:bd:
ac:32:ec:3b:7f:b4:82:29:5d:12:9e:4a:a3:2f:18:4d:81:84:
69:15:a7:35:8e:36:b9:68:ef:77:de:9c:b3:96:ff:fc:73:9a:
3a:85:e4:5c:3f:47:d8:1d:16:84:29:f3:ca:b8:2c:2b:5f:69:
ca:da:84:67:9d:d8:91:df:62:9f:ca:b1:74:1c:53:01:7b:1a:
d4:63:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:25 2026 by rpki-client