Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: 3qZG7aQH+dMTv6Ovig/MA2o8H2RXdgwWKPTiJuehBjc=
Subject key identifier: A5:7C:C0:BE:A9:3C:93:D2:89:7A:FD:5B:3D:31:1C:BB:F0:66:75:19
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019F1867A94B3CCD2CE6AD713C19FA28E11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:14 +0000
Manifest this update: Tue 30 Jun 2026 12:01:14 +0000
Manifest next update: Wed 01 Jul 2026 12:01:14 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: f7mThjRtWHLhVmh1WxjAEP59BkK+veqlgjidX7HfQYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:a9:4b:3c:cd:2c:e6:ad:71:3c:19:fa:28:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jun 30 12:01:14 2026 GMT
Not After : Jul 1 12:01:14 2026 GMT
Subject: CN=a57cc0bea93c93d2897afd5b3d311cbbf0667519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9c:cb:b2:a5:72:fe:af:6a:23:cf:a5:ae:f5:
e6:b2:fa:19:dd:85:ca:47:5f:85:57:c9:91:2e:97:
ee:b7:5b:47:12:87:05:27:1a:be:84:60:80:9b:96:
e8:5d:e7:d8:be:58:ee:46:01:30:da:01:c7:af:2c:
27:ed:10:31:51:6b:d9:38:b1:b3:61:10:43:b9:a1:
b8:7b:2e:e3:8d:75:3c:9e:0b:c0:42:3b:09:50:58:
1f:ab:ae:e8:40:2a:6b:c3:63:d7:b3:47:05:34:e9:
42:75:7b:b7:f8:60:0f:ea:a2:0d:38:b3:66:86:0d:
4c:1e:ba:03:50:47:32:8b:46:cd:68:34:35:4d:4d:
c6:66:cf:29:82:e6:05:91:d0:de:24:42:40:b5:99:
43:78:18:60:66:92:c0:79:cc:26:2c:9a:ae:de:c3:
f6:06:6d:f0:29:3b:f9:a4:43:b1:75:79:9c:33:f9:
df:d7:6a:39:ed:bb:e3:71:f8:f0:08:2a:82:3b:20:
9f:56:8a:48:d9:2d:e7:e1:3f:86:0c:0d:8b:f1:0e:
53:c2:46:0e:1a:e4:37:22:91:1c:a3:e3:b9:4f:16:
f7:47:8f:c0:9c:c0:27:1a:8d:00:1a:80:c1:f6:02:
59:66:d7:1f:62:fb:cb:57:43:f8:04:01:ca:8f:74:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:C0:BE:A9:3C:93:D2:89:7A:FD:5B:3D:31:1C:BB:F0:66:75:19
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:52:5d:fe:9a:b8:a5:7f:0d:41:7c:f7:48:a6:43:14:07:66:
20:08:6d:2e:e0:2a:c6:85:c3:b1:7b:43:67:fb:75:ef:95:95:
33:57:3b:eb:6a:55:c8:28:6a:3e:a8:bf:b9:0d:1d:9d:f3:d2:
97:92:ab:ec:ae:d0:e4:01:f1:1d:a3:2c:80:30:34:14:87:de:
db:19:15:d0:66:a8:cf:0a:2f:a3:ad:15:a8:75:e6:78:2b:87:
da:59:19:4a:52:0a:a6:59:27:17:5e:5c:cf:74:57:10:53:d7:
ae:0b:e8:7c:51:7d:ed:a7:74:01:95:20:f8:5d:03:20:9e:e7:
91:7b:b9:fd:dc:45:2a:bb:b9:5c:75:f8:91:d5:97:63:82:74:
80:d2:17:a6:96:c7:25:7e:a1:6f:3f:71:53:7d:44:51:76:30:
e5:67:43:ee:85:47:cf:8f:b7:01:bc:c3:06:21:16:be:f1:2c:
94:b3:44:cf:2c:2d:01:5f:2b:0b:16:77:9e:55:ad:e9:6f:4b:
29:e5:fb:32:5c:f1:5b:38:51:5f:12:94:3e:4e:99:00:ae:43:
55:b7:86:ef:ed:26:f5:74:c6:b2:0a:6f:a6:5e:d1:f2:c2:04:
69:87:32:42:6d:f2:0d:e4:ae:5f:f9:d6:1a:8f:b6:77:34:89:
d9:71:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:21 2026 by rpki-client