Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: Xw9JHEbdxSY5FRnX0fDpS35gnl9jsGFImOeM5PXIr1c=
Subject key identifier: 75:ED:24:23:BA:9E:17:6E:85:44:85:38:FB:3A:B9:C7:88:3D:C5:86
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A11A5070188F68C15BD6C25EF73579B875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 07:00:41 +0000
Manifest this update: Thu 08 Oct 2026 07:00:41 +0000
Manifest next update: Fri 09 Oct 2026 07:00:41 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 57hWbuC50tocHIcG7bA5BP5Y0obRiJS+HH/gTKiCvSY=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:70:18:8f:68:c1:5b:d6:c2:5e:f7:35:79:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Oct 8 07:00:41 2026 GMT
Not After : Oct 9 07:00:41 2026 GMT
Subject: CN=75ed2423ba9e176e85448538fb3ab9c7883dc586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:27:e6:6d:f9:c5:9c:ce:54:3c:d3:06:c3:
98:d1:89:2b:0e:49:f1:04:61:2d:10:8c:3f:9e:b4:
c9:94:82:48:5b:96:0f:6d:ac:5b:6e:39:cf:fa:51:
72:af:f6:de:6d:a4:b2:d1:ca:0b:f5:52:34:67:10:
53:0e:5f:6f:34:a8:9f:aa:84:36:d2:ef:38:70:88:
b9:f1:28:2d:7b:5e:86:e6:03:be:ee:6f:ec:7f:17:
1a:5d:54:9c:f6:69:32:4c:9a:95:ee:d3:dc:e6:15:
ac:ef:7a:72:27:ab:2c:3a:b3:d7:bf:1a:f6:c9:78:
f8:9e:f7:f9:fe:52:63:b8:0d:67:15:03:e9:2f:fc:
78:72:15:b0:9d:b9:e2:5a:7f:2f:0e:a1:08:3c:2d:
91:e4:e3:42:bd:41:1d:6c:f1:f4:ef:46:90:e0:ff:
3e:00:17:ca:18:d8:41:f2:93:4e:b6:65:0e:05:6d:
cd:4a:58:63:a7:fe:53:2a:4a:5e:34:d7:20:18:fc:
f1:12:2f:f1:26:50:32:38:3d:00:93:9c:00:51:6a:
ac:f0:23:89:09:b1:f8:2b:53:1e:75:2a:5e:db:70:
1f:b8:ae:9c:e2:3a:e6:e3:23:7a:6f:7d:36:92:5c:
e7:e2:18:34:17:cb:2c:4c:c3:5f:30:28:df:69:96:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:24:23:BA:9E:17:6E:85:44:85:38:FB:3A:B9:C7:88:3D:C5:86
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:8b:df:a1:88:dd:14:2b:3e:a4:f4:08:b5:78:c9:2b:53:
11:d8:6d:38:0e:02:86:2e:e8:29:3a:2f:30:64:7f:a4:49:72:
c7:42:9d:38:aa:70:79:38:d4:0e:77:5b:02:74:7e:b1:ed:82:
b6:ee:eb:c1:16:cd:d1:2f:ac:9a:a4:2c:be:77:3c:99:83:a5:
02:03:b1:95:36:1d:dc:98:7d:d4:1b:fd:d4:66:09:a0:e9:40:
dc:b4:4a:cf:85:5c:b3:32:bf:9a:59:73:c7:59:a3:89:c8:48:
e5:7e:2d:12:74:83:97:c3:56:78:50:35:32:b2:28:ec:53:3f:
9a:66:5a:a4:aa:be:54:62:58:0e:2c:ba:ad:0a:1b:61:92:c6:
95:9c:59:bb:47:f1:78:a2:36:3c:6e:8f:3c:76:cb:9f:41:2f:
9c:07:63:e9:8b:d8:4b:2e:d2:54:66:41:1f:af:b7:9b:44:70:
19:ac:b1:4d:79:73:9f:a6:27:3a:29:1d:f7:9f:55:02:9a:e9:
a6:50:d3:b4:d8:71:f9:41:ec:79:a7:11:c2:af:80:8b:56:04:
cd:47:f1:cf:55:59:bc:a7:42:cb:3e:b1:e2:f8:c9:80:05:1b:
1e:50:76:a3:fb:e6:e3:8f:0a:46:8d:0c:73:a3:e3:66:2a:c0:
5a:f1:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:42 2026 by rpki-client