Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
File: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft (raw, json)
Hash identifier: mcWb0syEh4LCStz9HQqHOXh1hMgmCGgxQVBdbUW6JI4=
Subject key identifier: 1E:44:A4:22:BF:91:CE:44:F6:30:1C:DD:2F:CA:96:75:DB:1D:07:C1
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 019DCE998B7C5858282D0AC247F90CE56424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
Manifest number: 1837
Signing time: Mon 27 Apr 2026 11:01:02 +0000
Manifest this update: Mon 27 Apr 2026 11:01:02 +0000
Manifest next update: Tue 28 Apr 2026 11:01:02 +0000
Files and hashes: 1: 2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl (hash: vSrjZ5RkTT/4ogYktIQrORb/kMipVShkug34qspVX68=)
2: 8n9b1McJwVwYSHNYtuA1BPtMKyQ.roa (hash: znLA/cadcAOzu6Norl0ideQ8XGJcQszWKS7ox01S1jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:8b:7c:58:58:28:2d:0a:c2:47:f9:0c:e5:64:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Apr 27 11:01:02 2026 GMT
Not After : Apr 28 11:01:02 2026 GMT
Subject: CN=1e44a422bf91ce44f6301cdd2fca9675db1d07c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:3f:a2:a8:59:11:4b:de:64:a3:69:ee:df:
16:cb:03:90:aa:42:0f:14:eb:43:2c:4b:18:26:50:
20:96:ba:f5:c2:84:ae:2d:3d:b4:d7:5d:54:5c:15:
73:40:a7:67:f1:d4:e9:40:6f:28:f8:f1:5c:41:a6:
92:33:1d:70:08:1f:1a:b8:1d:c2:c4:07:84:f8:07:
69:f1:50:d8:56:e0:d2:fd:f8:b3:d1:48:d6:e7:f5:
5b:b6:1b:94:7f:aa:0a:42:ad:d7:39:c2:9b:eb:47:
90:dd:52:d0:d7:6a:05:b1:e0:3e:56:21:cc:3b:0d:
f9:b4:6a:56:0f:aa:f9:f3:e8:70:31:d4:34:11:89:
7c:38:31:b3:a7:f1:0e:ed:3d:ec:a4:29:61:de:01:
f1:66:02:fc:fa:99:d0:59:eb:6e:13:3f:c6:d3:ef:
58:35:8b:4d:b8:19:0b:12:96:60:83:b2:07:9a:1f:
0a:c1:7d:b6:78:a5:36:6f:cc:7a:d2:f2:86:4a:b3:
69:d3:22:76:3d:5e:7a:b2:9e:ad:91:db:6a:1d:a1:
61:15:5b:e8:67:76:31:26:4b:4d:3f:ac:c5:6d:c2:
21:a2:14:33:bb:a7:71:67:21:b9:fb:59:f3:63:37:
8a:47:68:24:94:15:d5:38:64:2d:e5:c4:88:ea:5c:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:A4:22:BF:91:CE:44:F6:30:1C:DD:2F:CA:96:75:DB:1D:07:C1
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:48:3b:bc:74:24:70:8c:ba:c4:ad:e1:c3:e0:b4:51:5b:69:
23:28:ad:0b:5f:79:a3:1e:0b:42:80:99:55:7e:67:d3:b3:9f:
28:bc:17:fe:03:10:44:00:b6:47:1f:dd:4e:65:1e:36:75:eb:
67:bb:9c:20:d2:92:6d:39:69:77:60:ef:fa:2b:8e:d2:a0:ed:
17:83:4e:ab:2a:79:68:7b:55:85:61:9a:8c:25:fc:89:56:c0:
29:89:e1:16:64:33:7a:31:57:df:c1:c4:22:c0:5c:a2:a0:ba:
90:23:38:e4:5e:16:43:cf:76:e4:32:e4:7c:92:fe:76:0b:e6:
c1:28:97:3f:50:90:f3:89:3c:08:a1:6c:1f:47:d7:b0:22:f7:
a2:7b:53:7b:d8:61:17:ff:a4:d4:e0:7d:a5:2f:dc:0a:6c:5b:
43:30:25:24:26:ac:77:b8:48:16:83:a7:42:e9:d3:57:d9:a0:
a8:a7:9a:78:97:ee:ca:32:57:ce:bb:44:b8:a0:f4:36:21:e5:
af:c4:0a:7f:16:fe:0c:66:7a:81:cf:9d:2e:1e:5d:d3:82:39:
b3:ae:fc:5a:d7:d0:3e:d5:26:2a:5b:5e:e6:66:3c:8d:5c:da:
a0:c5:5b:c0:9b:5c:c5:54:5b:96:17:a5:46:ce:af:9c:0d:d4:
cb:98:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:07 2026 by rpki-client