Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: 8t0nh4YCjFqF8C2phfX+v6QnKpAJJQmI0eXQ2di3cyI=
Subject key identifier: DC:2A:20:BB:C6:42:95:7E:60:83:B4:6A:E0:E4:D0:5B:AD:84:63:C3
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019E314DC6A8B2FC5DDD5E60F0D1E4246EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0FB7
Signing time: Sat 16 May 2026 15:00:41 +0000
Manifest this update: Sat 16 May 2026 15:00:41 +0000
Manifest next update: Sun 17 May 2026 15:00:41 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: 4nCgVo2v/XExM6E+euwlSwNdVTqSr3HfuqQ8LywhiOY=)
2: GJE_tPOgXeLJ3DgOojgp5O691hA.roa (hash: 4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=)
3: PIER6XCYCxthUakxWv-c4X999-4.roa (hash: aFXr3MnR3gymMlu+fiuuP0AS3tEEg0TArF5MnDX4EOI=)
4: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (hash: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:c6:a8:b2:fc:5d:dd:5e:60:f0:d1:e4:24:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: May 16 15:00:41 2026 GMT
Not After : May 17 15:00:41 2026 GMT
Subject: CN=dc2a20bbc642957e6083b46ae0e4d05bad8463c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:e9:a7:e9:d8:85:53:86:c4:b8:27:81:7a:
77:21:8d:6b:e0:0a:45:3d:c0:8d:02:66:13:b9:9a:
60:de:6f:69:91:13:cf:f9:bb:ab:53:ae:c2:bd:9c:
01:a3:a1:02:e1:5f:dd:96:b8:e1:f2:9b:86:20:f4:
8a:77:b8:56:c6:cb:86:66:07:12:64:8f:5e:b2:e5:
d3:9a:d7:ce:18:c4:c1:22:9d:e1:dd:1f:8f:f3:21:
50:8e:82:4d:99:51:cd:3d:27:dc:f3:2c:4c:d3:09:
18:a3:76:a5:1a:0e:3c:7b:44:f8:8c:3f:18:05:db:
12:68:76:9f:88:bc:fd:b3:d9:c4:d7:ca:56:86:6b:
23:af:2d:c6:b5:fa:b0:1c:a8:e4:ed:5d:36:5e:31:
e4:92:f0:00:27:2b:ff:95:1a:82:27:3f:b5:2a:f5:
08:40:37:9b:2f:9e:b7:69:d4:3c:6c:06:4f:90:41:
00:47:b5:27:8d:cc:48:35:e4:46:24:f0:38:4f:7d:
36:cd:e4:e3:24:02:cd:3f:b2:84:6e:5e:03:11:58:
44:5b:48:1b:e8:f9:40:ef:dd:c4:17:df:4e:24:eb:
fc:6b:4b:23:55:21:ab:74:06:34:27:d1:f7:70:84:
4f:3a:64:86:84:b6:1b:f7:85:bd:d5:f3:4d:21:22:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2A:20:BB:C6:42:95:7E:60:83:B4:6A:E0:E4:D0:5B:AD:84:63:C3
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:79:32:e8:d7:9f:fd:0e:e2:b1:5d:2c:ae:7e:9a:25:81:3a:
90:a4:e2:9e:6a:38:e7:c5:13:97:60:05:33:2a:66:41:f4:2e:
0e:f1:45:96:f5:c7:e2:99:8e:5b:87:96:7d:f9:5e:9e:61:18:
89:38:51:92:83:41:22:6b:f3:04:66:91:bd:7e:a0:d1:07:de:
30:87:83:09:b6:83:7d:7d:b9:9b:ac:a0:42:8d:29:c4:8e:ef:
35:a8:73:af:5c:e7:ff:53:9c:1c:a6:d7:8d:dd:ce:5c:57:07:
4e:06:96:72:89:25:97:fb:02:02:d7:71:9e:f2:29:fa:0c:08:
c6:b2:86:f7:c9:c4:a7:8a:40:4d:83:b7:c0:f2:45:c0:7b:61:
96:73:0c:8d:c7:47:29:06:3f:54:2d:58:e0:d1:3f:5a:0d:7e:
b9:1d:21:03:a9:fa:4e:ca:7d:b5:d9:f1:c9:e5:f9:f2:1a:74:
66:a0:30:2b:5e:c6:b8:82:3d:a3:47:c1:fa:3b:a7:36:ee:40:
5a:4c:e2:b4:40:fc:01:04:7a:85:3f:df:77:01:91:82:ed:99:
9e:d3:82:4a:cf:09:77:ac:49:de:e8:cd:62:7f:d3:e8:8f:fa:
ce:5c:f9:60:2f:81:59:60:eb:dd:f3:7b:2b:a0:e9:98:ae:c0:
3c:2c:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:11 2026 by rpki-client