Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: ZRLMRV6tuCDV767bKKXyS1QGDxgeB55cHXhJdKmMJg4=
Subject key identifier: A7:C8:FC:F8:A1:18:A0:9A:34:B9:7C:FD:E0:01:50:58:67:A1:B5:33
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 019DCF071C8B42DB3CFDBAE3B2AE7B88A064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 1811
Signing time: Mon 27 Apr 2026 13:00:42 +0000
Manifest this update: Mon 27 Apr 2026 13:00:42 +0000
Manifest next update: Tue 28 Apr 2026 13:00:42 +0000
Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: mltrsw2uvWq8fbCNJinja5J1+SVgfHvPzXNF7jfVA38=)
3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:1c:8b:42:db:3c:fd:ba:e3:b2:ae:7b:88:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Apr 27 13:00:42 2026 GMT
Not After : Apr 28 13:00:42 2026 GMT
Subject: CN=a7c8fcf8a118a09a34b97cfde001505867a1b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:4a:a9:45:8d:01:74:5e:c4:52:3a:a7:35:
dd:f6:81:a6:77:6f:65:25:02:55:a7:97:cb:1d:42:
25:8e:41:60:1a:a3:8c:a7:6d:38:b0:cd:28:67:3d:
18:87:a5:dc:53:cd:3f:15:00:ab:ef:4e:9d:bf:8d:
98:6a:9c:c4:da:0e:98:6d:70:0d:88:35:03:19:6d:
b4:22:9e:0f:9c:01:8b:31:b8:6d:f3:f4:88:55:12:
4f:b1:2d:8b:1b:21:35:2f:11:5e:b5:3b:e4:36:24:
d3:f2:5f:ac:07:03:83:70:20:bf:b4:fd:fa:b3:d0:
dd:24:f0:6c:4f:11:2b:7f:bc:d4:b8:93:74:78:47:
7f:2a:9e:6f:a3:9f:3c:7c:36:91:a1:ff:10:21:3d:
a2:a8:7f:3f:d6:be:b3:50:4f:43:d8:18:45:20:72:
3f:b0:36:57:88:6e:af:99:ef:ee:7a:1e:b9:15:0a:
51:58:76:28:7c:71:a4:9c:3a:60:22:c8:50:ae:53:
24:4f:49:fa:cd:06:f3:66:17:c8:eb:29:01:24:b0:
b6:db:3f:8c:61:7a:af:09:04:f9:20:a2:a2:44:ec:
60:bc:fe:30:14:a6:8f:ed:0e:c3:6b:24:48:dd:10:
df:9f:c4:94:4f:75:90:05:64:ad:b4:d7:e3:7e:2c:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:FC:F8:A1:18:A0:9A:34:B9:7C:FD:E0:01:50:58:67:A1:B5:33
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:37:a1:90:00:6e:68:8f:94:f1:36:de:04:44:f6:91:4e:
13:f0:37:c1:9c:60:27:b4:94:ec:42:bb:05:08:4a:20:19:75:
02:11:b2:32:0b:74:0b:a7:a5:8a:d5:5f:ad:6c:2d:fc:dc:8f:
8d:ae:d7:cd:80:fa:f1:48:16:36:0a:1b:2f:0d:b5:1a:47:80:
13:5f:c8:59:a3:79:f7:65:27:81:14:47:49:18:cf:1a:8e:35:
c9:e5:70:9e:e6:51:bf:37:e1:2f:92:f1:01:62:a5:ca:9f:5d:
b2:15:81:61:e5:c8:2d:b2:d3:e7:6a:dc:45:97:8d:6b:cd:1d:
f2:c3:15:d8:ea:ce:fe:18:49:33:45:66:60:e0:dc:b6:66:4f:
f5:ec:da:9c:7c:54:be:41:4d:89:d3:d3:aa:7a:6b:11:9c:5e:
2a:4e:01:2a:2e:2e:8e:c6:56:2a:ae:5c:7c:ec:eb:b5:78:a1:
a2:5c:07:0b:dc:c6:98:64:38:dc:e2:5f:0f:1c:0b:6e:a3:7c:
24:15:a5:c7:28:b3:2c:31:8f:69:9a:40:db:aa:38:42:7c:16:
d9:4f:30:89:84:8b:39:8d:11:bb:be:5d:4d:b8:78:68:53:90:
47:ce:d6:bc:43:97:36:de:13:84:9d:6f:54:0f:62:6a:44:2c:
2e:9d:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:04 2026 by rpki-client