Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: a0ug6xbsAAR+XE43CFstXP6PV4coZXfBJVC7Zo1QmUk=
Subject key identifier: 86:1F:A6:C0:41:B7:63:16:D1:19:00:07:94:0A:D7:00:BF:4E:BC:75
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019CC9E3AEDB596B7311DE61EB51F217AC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 07DA
Signing time: Sat 07 Mar 2026 20:01:07 +0000
Manifest this update: Sat 07 Mar 2026 20:01:07 +0000
Manifest next update: Sun 08 Mar 2026 20:01:07 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: qmD60CgOrQDAVhjFhobYoS2Q0zV7JPCfEDFlv1BhBck=)
2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:e3:ae:db:59:6b:73:11:de:61:eb:51:f2:17:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Mar 7 20:01:07 2026 GMT
Not After : Mar 8 20:01:07 2026 GMT
Subject: CN=861fa6c041b76316d1190007940ad700bf4ebc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:d5:45:73:72:8a:b0:cf:63:4e:82:d3:e5:
d6:43:3f:22:32:8b:68:47:97:e9:53:ca:86:44:9b:
c7:41:90:b9:35:6c:79:ee:63:be:40:99:16:75:d9:
6e:12:33:00:22:dd:79:63:85:2a:d7:62:b5:a2:d3:
8d:38:9d:f1:fb:ba:c7:fa:c8:14:9d:49:b8:08:36:
e5:c0:8b:d6:21:f2:6b:95:39:f5:3a:b9:a3:de:43:
ba:b2:0d:d0:d1:3a:d6:44:df:a2:90:46:ec:c9:b3:
d5:1e:53:f4:4d:53:88:a7:a8:29:5e:5c:cc:97:89:
7f:e4:5e:6c:03:00:e4:9f:18:ec:b3:7f:49:50:b5:
25:22:ef:16:20:27:32:a4:e4:bf:b5:84:3b:47:72:
53:1a:4c:37:e1:37:e1:f4:8e:9e:29:f3:fb:ee:75:
6f:06:c1:f7:12:ab:e2:61:73:e4:cc:86:c2:2e:85:
2b:29:bd:75:c1:7e:3f:e3:df:8e:d3:7c:dd:87:ea:
50:e3:7f:e4:b5:85:5d:de:0c:17:9e:ff:6d:f3:29:
c1:66:4f:39:44:2b:7b:e1:13:97:2e:d5:85:3c:48:
83:1a:9d:64:d1:b4:6e:3f:3c:f8:55:42:63:2a:84:
c8:d0:0e:b0:de:96:e3:9a:c2:9e:83:8f:42:6d:4d:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:A6:C0:41:B7:63:16:D1:19:00:07:94:0A:D7:00:BF:4E:BC:75
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:5f:3d:bb:e4:d4:14:c7:1d:80:ba:1e:af:94:00:b6:16:
75:49:7d:db:22:38:49:69:11:b6:67:17:0d:e1:bf:e2:ca:b4:
98:cd:14:3b:33:0f:e6:3a:2a:f1:cc:3b:58:5f:54:8d:5b:5b:
ca:4e:a4:7d:e3:ee:5b:11:14:94:72:62:a5:d1:4a:42:53:37:
46:c3:42:da:cd:7c:8a:70:c9:df:d0:ba:61:f3:69:14:b3:f4:
32:1d:d5:03:67:86:34:1e:df:b4:58:98:e9:2a:d9:3d:cb:3c:
3b:1b:6c:e1:03:64:53:70:05:24:0d:a1:ec:64:03:5b:d7:11:
9b:a8:d6:33:e1:33:36:51:ba:12:bb:95:4b:a2:98:f9:98:c0:
6f:63:48:22:7b:26:93:70:2f:0e:b1:4d:2d:3b:3a:d9:90:40:
66:71:90:57:c0:44:34:98:bf:0f:7f:d7:4a:4c:2c:48:93:1a:
16:b5:32:8d:dc:02:88:99:3c:36:b6:ae:77:30:90:c7:af:ca:
5d:b3:44:d7:59:fe:4e:e6:31:fb:82:c0:b4:c0:ee:7a:ca:1c:
df:47:c0:df:19:93:7b:c1:33:c0:04:9e:c2:06:1c:50:0f:83:
70:c0:43:20:7c:43:c8:3c:69:e6:89:be:5c:6b:32:cc:f6:39:
c7:c0:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:52:46 2026 by rpki-client