Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: NRjceoVMziphM4ycY0ajEFRhvSbbB+reuvx6FaUj85c=
Subject key identifier: BD:0B:81:0D:FA:13:63:52:D0:5B:99:E2:5A:1E:33:AC:56:7C:6E:18
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 01A08B9EDF5D5FD36A7EABE3FBD6BD2A6EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 19A2
Signing time: Thu 10 Sep 2026 14:00:39 +0000
Manifest this update: Thu 10 Sep 2026 14:00:39 +0000
Manifest next update: Fri 11 Sep 2026 14:00:39 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: nvTDLfnD9h6MWQZrrZ2xfT7oWrHIc5O1qFfpTGq9Dpo=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:df:5d:5f:d3:6a:7e:ab:e3:fb:d6:bd:2a:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Sep 10 14:00:39 2026 GMT
Not After : Sep 11 14:00:39 2026 GMT
Subject: CN=bd0b810dfa136352d05b99e25a1e33ac567c6e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:bb:59:b2:53:64:b9:00:86:1b:69:db:0e:
aa:60:ab:3c:8f:8f:c3:0a:fd:7e:a4:cf:cf:0f:13:
18:17:70:6a:2a:62:d0:cf:21:4c:1f:10:0b:14:8e:
a2:ba:8d:36:77:3d:b6:3d:d5:d2:e3:14:72:7a:3c:
91:33:c6:d1:ad:9e:4e:19:25:44:10:03:f1:4f:df:
c2:25:ed:fb:6f:53:fc:b3:75:83:74:16:4c:cf:b7:
52:46:5b:d7:44:64:e2:9e:4f:3b:e3:c9:62:39:e5:
72:5e:e6:a6:9a:74:d9:db:bc:50:5a:e6:05:13:18:
ae:8c:5f:58:a8:07:67:b3:5b:32:e4:f6:c6:e0:0e:
2d:a1:04:b8:58:e1:ad:a9:4d:a1:46:73:e9:38:97:
14:ba:28:72:0d:3c:bf:8b:1d:00:3e:ca:4d:9a:d3:
fa:81:e4:42:ab:f7:f9:d5:dd:85:71:93:59:b9:a8:
b7:8e:7a:75:e5:84:39:31:3a:a6:c4:8f:e6:ec:11:
d0:56:d9:a5:d1:c5:cd:2a:72:43:c9:ff:c9:87:d8:
7b:a7:8d:80:36:4d:7b:4b:cb:7e:ff:8d:f7:22:81:
d0:b5:60:75:c6:b0:84:99:04:94:6b:8e:d5:24:9e:
38:c1:2e:55:d7:41:ce:7f:00:f8:d0:bc:16:6f:bf:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0B:81:0D:FA:13:63:52:D0:5B:99:E2:5A:1E:33:AC:56:7C:6E:18
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f1:a4:d0:f0:16:03:e6:38:80:98:1e:13:1c:50:f8:52:39:
b4:b1:90:75:31:de:2a:1c:d5:bf:66:6a:22:36:94:5b:49:9a:
7f:4e:d5:6c:d6:cc:e0:0d:50:08:09:03:58:87:e8:f4:83:75:
55:d8:d9:2f:0b:6f:7e:92:af:45:a3:28:3f:21:18:f2:8c:46:
c3:51:63:a1:cc:23:8b:14:17:23:e3:df:76:00:2a:16:da:8b:
e6:73:36:3e:ba:5b:f2:f0:de:4c:49:45:2e:08:20:af:dc:88:
a6:9c:bb:bb:d4:0d:73:8d:9b:b7:ee:61:46:fb:2f:65:1b:58:
6b:4a:09:c9:c8:2a:9c:82:72:00:66:ef:f0:60:45:a0:24:39:
d6:51:3c:3c:be:56:2c:1d:01:cc:e7:73:ae:14:2a:68:5f:58:
2c:68:bd:3a:50:b3:e2:d6:b7:22:4e:33:63:68:92:39:66:7c:
e1:42:10:bb:50:3c:d8:a4:69:c8:4f:16:da:33:06:d0:5c:11:
18:d1:ea:33:30:b4:0a:c9:ab:4f:3b:21:d7:ba:33:72:2d:f9:
59:98:f0:2f:9e:85:33:f9:6f:19:2c:d2:5c:32:d6:99:fe:f0:
06:48:5b:a6:c1:52:18:f5:3a:c4:b6:f4:c8:73:d0:b2:83:f6:
80:4c:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:11 2026 by rpki-client