Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
File: 2j9sNTSiCwTriKpxWOVqSqdTeog.mft (raw, json)
Hash identifier: FKkLTNq4ure03p2dbNgE0CkVWUimYVDENH4fQoQZMUo=
Subject key identifier: D9:D6:3B:ED:40:7A:1B:EA:9E:2C:DE:49:37:1A:2C:8C:4E:48:C9:6C
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 01A0B6F6F2E4BE2D8639650C034645EE01F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:00:32 +0000
Manifest this update: Sat 19 Sep 2026 00:00:32 +0000
Manifest next update: Sun 20 Sep 2026 00:00:32 +0000
Files and hashes: 1: 2j9sNTSiCwTriKpxWOVqSqdTeog.crl (hash: Y7hRiGIFZQEXUh+m0FYXEwyyl2Fw/73YCCQS2EqkxuI=)
2: b9Kj8gfLKZHCgmEEwm6-Ul9eyIU.roa (hash: MHlb8AOUqnzkLRPY36W3fQ2GLEGyR8Wv/G1vui2alzc=)
3: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (hash: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f6:f2:e4:be:2d:86:39:65:0c:03:46:45:ee:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Sep 19 00:00:32 2026 GMT
Not After : Sep 20 00:00:32 2026 GMT
Subject: CN=d9d63bed407a1bea9e2cde49371a2c8c4e48c96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:ff:7d:27:d7:16:30:55:8f:3c:8d:73:cd:
89:23:9c:8e:17:a2:fe:d5:07:11:8a:32:3f:96:21:
e7:e4:2f:f6:0c:a2:61:bf:d2:43:64:f5:e4:95:e5:
55:20:db:cf:15:cc:11:54:c3:4a:6d:0f:43:97:a2:
df:a4:88:5e:a2:f0:1c:7f:9c:ed:ba:49:96:ce:8f:
44:59:3f:00:9e:07:0c:cf:fc:d2:f6:e5:62:e0:9a:
cc:f3:87:6c:cd:e1:df:56:2f:48:bc:90:46:15:b4:
d2:fa:6b:a6:74:56:81:2f:bf:54:72:00:5f:9b:98:
53:cf:03:54:60:f7:b5:5d:25:c1:84:7e:1a:61:6e:
9d:75:14:5b:fb:91:25:6f:ae:cc:50:14:d8:d9:9d:
58:2c:82:f5:b7:54:d0:6d:35:83:0e:74:41:3a:47:
9b:06:3c:98:41:cb:b7:ff:7c:7c:5e:bc:4d:34:19:
71:bf:72:f3:ae:d6:7f:fe:46:ad:cd:71:6a:32:1c:
d9:d4:33:51:59:40:33:a3:f3:d2:a9:01:4c:b6:ca:
20:44:9b:fd:4c:10:d3:d4:f0:6d:6a:a3:e3:51:af:
c7:ca:67:1f:c2:d3:c0:83:4f:7d:45:d6:38:3c:4a:
7d:db:bd:5d:7a:62:d2:b9:19:48:08:95:7e:f1:a0:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D6:3B:ED:40:7A:1B:EA:9E:2C:DE:49:37:1A:2C:8C:4E:48:C9:6C
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d5:f9:1b:a7:36:33:a0:11:54:56:fb:05:25:6c:7d:60:42:
3d:44:68:13:8c:a6:90:c3:9c:8a:d0:95:98:30:b5:7a:95:2a:
3d:ed:05:34:c3:b0:66:d0:5b:8a:b5:02:87:2d:48:31:3f:f0:
cf:24:0a:20:44:ad:24:c5:e1:5e:94:09:85:ff:24:5e:36:90:
a3:88:69:dd:d0:78:a0:30:f4:d7:ad:84:62:69:6b:28:76:de:
8f:44:77:c3:59:52:53:01:a8:18:ab:f3:72:32:2f:9c:24:a0:
52:1d:af:7c:1c:8f:d9:2f:df:da:07:06:26:2c:47:b7:7e:5a:
09:6b:02:fb:25:d9:f0:35:f8:a8:a8:42:2c:05:d2:52:7a:83:
ac:02:35:59:c4:03:c7:e2:b4:13:f2:9b:56:06:f8:67:22:65:
9e:4e:d1:d2:85:a1:e1:d2:a9:29:e1:be:9a:b2:36:07:ab:42:
f5:73:2a:c5:8b:8b:e7:2f:85:54:94:d6:be:a9:61:46:e4:1e:
85:cd:a6:f2:a2:4a:0a:fc:18:49:4c:1c:f1:44:27:a1:9b:3e:
fb:48:c7:22:80:48:06:9c:77:59:fe:e6:fa:04:ab:c3:c3:55:
fd:c8:4e:6c:63:b5:39:98:ef:1e:f7:38:13:83:a0:bc:80:35:
61:e4:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:44 2026 by rpki-client