Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: RCCirSieoiyA+iuE9HNXhGZBiYS8cOzfShjj+PArSdI=
Subject key identifier: 57:B1:7E:E9:F6:B7:3C:F2:81:B2:EB:63:B9:6A:8C:3C:C8:87:5A:6E
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A11C3F0D5438A20DC92F6609270232B586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 16:00:56 +0000
Manifest this update: Thu 08 Oct 2026 16:00:56 +0000
Manifest next update: Fri 09 Oct 2026 16:00:56 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: qTKI3Lzsp9QKeyU3TmSJpysZfuSmsrQPLRFNPOr6DjE=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3f:0d:54:38:a2:0d:c9:2f:66:09:27:02:32:b5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Oct 8 16:00:56 2026 GMT
Not After : Oct 9 16:00:56 2026 GMT
Subject: CN=57b17ee9f6b73cf281b2eb63b96a8c3cc8875a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:41:8a:cb:a4:76:eb:a8:8d:88:a0:a6:5c:
bd:2c:aa:ef:7f:86:98:97:4b:3f:60:cd:f2:7e:36:
84:cd:f1:d2:3a:98:06:07:4e:78:a8:8d:44:04:3f:
8f:1b:6e:cf:8d:ed:f6:6f:28:a5:53:53:96:af:54:
71:9d:9d:74:d2:c1:1d:47:db:d7:5d:9b:c7:cd:42:
67:62:d0:1c:f9:aa:cc:e4:26:57:4a:53:23:5d:07:
51:89:86:6a:14:e9:46:6b:f8:f4:00:a2:89:9f:04:
9e:67:75:1f:2f:2c:e6:91:67:09:6c:1f:db:79:db:
23:7d:c5:f7:b0:4b:04:b3:d9:2a:59:c3:ef:79:7e:
65:a6:0f:bf:16:9b:53:6d:e9:38:31:1b:d8:a2:2b:
b8:26:07:31:d5:62:31:63:f5:f0:73:97:96:a6:12:
55:d2:b6:e5:d1:49:3c:7f:d5:73:1f:83:17:09:b3:
b7:93:b1:cf:78:c6:46:f7:d3:e2:cc:6f:58:c8:eb:
22:56:0b:6e:87:3f:d2:fd:90:b3:00:f8:2a:00:5d:
28:62:7b:3e:53:ba:b1:8a:a9:5d:18:fa:20:a5:0b:
76:5b:54:26:9a:e5:bb:c1:d6:f7:a3:3c:2e:0a:7d:
d5:81:04:b1:0b:57:8b:ad:b2:3b:b0:ec:82:29:99:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B1:7E:E9:F6:B7:3C:F2:81:B2:EB:63:B9:6A:8C:3C:C8:87:5A:6E
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:ae:e7:61:65:14:ac:ed:4d:80:1d:5d:30:7b:9b:3f:e8:
ee:f3:6b:49:8c:0e:d1:33:30:4c:89:e1:d6:cb:12:15:6b:c3:
70:12:1f:11:e0:6e:4d:e6:db:93:fa:f1:8e:c5:8f:42:b3:73:
f9:13:47:2b:c7:50:fe:cf:8c:fb:f8:ec:17:41:3f:1a:ac:d5:
92:f5:43:40:b6:3f:eb:a3:43:6b:16:9c:ef:cd:6a:79:21:e6:
93:93:b2:81:f9:78:66:ac:f7:48:33:b5:d0:e0:e4:37:b5:ff:
3e:11:90:bd:55:8d:7b:de:3a:38:e5:62:2d:15:c2:6a:57:22:
fb:67:de:39:29:2e:40:b4:33:0d:1b:a9:9b:4a:3b:fc:57:e5:
1e:65:af:0f:d3:29:68:ca:44:ed:8c:39:75:b0:13:14:21:c9:
fe:bb:ca:cb:ed:5b:1d:78:fd:a4:d3:c4:16:cf:cb:0a:e3:32:
ef:75:3b:5a:13:2d:fb:db:3f:99:04:79:49:9f:9d:a8:1f:05:
1d:41:37:30:9d:01:98:99:ec:1a:92:52:bf:0c:a7:82:4e:8c:
14:a3:3e:90:12:e7:39:f3:8c:04:68:57:2d:0f:fb:85:33:1e:
23:31:4f:3e:40:2f:17:87:88:6b:a5:2b:f5:2e:f4:d2:80:c6:
ba:7e:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:26:49 2026 by rpki-client