Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: taMH8woI6y/J0siILLeCwIitoeuCRaVd8KkaOrmZ/Os=
Subject key identifier: 77:13:4A:90:82:C6:A9:23:2C:CC:49:A5:76:38:37:1D:E4:EB:88:72
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019F189E73D1B0F93C939B7C9BAB86EC069A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 13:01:05 +0000
Manifest this update: Tue 30 Jun 2026 13:01:05 +0000
Manifest next update: Wed 01 Jul 2026 13:01:05 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: eLQn8uOMKk/6CIJ3UkprMfrslK+nO/IsVd49FuFHarc=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:73:d1:b0:f9:3c:93:9b:7c:9b:ab:86:ec:06:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jun 30 13:01:05 2026 GMT
Not After : Jul 1 13:01:05 2026 GMT
Subject: CN=77134a9082c6a9232ccc49a57638371de4eb8872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:85:2d:bf:58:3a:ef:28:5a:0c:82:92:96:
43:9d:a8:90:74:83:38:25:23:1e:8d:26:01:06:1e:
05:45:1e:62:b5:e2:6b:67:f2:f8:40:82:8c:60:56:
53:d0:2b:d4:7c:b4:e8:0a:4b:4b:ca:ac:fa:de:28:
97:45:e1:30:1c:11:1f:e2:b5:18:04:de:3f:a1:95:
75:d3:18:26:b5:2c:4f:1b:16:af:b0:ea:3f:65:38:
57:2f:fc:43:3b:ff:cc:3c:54:11:20:b1:e5:6a:36:
2e:13:dc:29:9d:ef:63:eb:62:b6:ed:aa:eb:78:a0:
f4:eb:2a:00:0b:ed:83:be:35:69:ba:28:55:24:91:
99:8c:ca:c4:21:5f:48:d4:4c:5b:e7:c4:3d:ae:bb:
e0:3a:2f:21:8b:cb:30:8b:19:90:74:a8:64:72:a7:
3a:b9:6d:18:7d:0b:da:21:63:33:db:df:d0:34:cb:
55:a5:6f:35:6f:94:17:86:2e:4d:c3:44:bf:3d:9b:
e3:75:d9:9b:6f:65:e2:d0:17:19:7b:d7:c0:77:f7:
82:7e:0e:86:07:f8:05:7f:89:d3:81:fd:7d:a4:a4:
2d:d9:18:17:b3:48:f0:8c:12:53:a0:78:ac:e5:62:
36:6f:54:27:8f:37:26:d7:ab:0f:ad:80:16:45:e8:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:4A:90:82:C6:A9:23:2C:CC:49:A5:76:38:37:1D:E4:EB:88:72
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:e5:42:21:64:cf:be:ec:72:1f:60:b2:b4:35:61:37:b8:
e4:69:00:2b:8b:fc:70:37:9e:50:5a:14:57:a1:26:35:ce:60:
65:00:ee:2c:9d:af:9a:41:50:fd:93:e1:98:9f:62:85:49:f0:
e9:a0:43:8e:9a:d7:84:2d:cf:2f:f9:ee:8a:79:b2:6e:36:61:
3d:e0:c8:a9:32:06:d8:27:a0:ba:de:f9:35:23:0e:8f:77:eb:
9d:3e:2e:23:b2:13:c6:28:a8:78:22:1c:d5:33:19:30:5e:c0:
9a:4a:1f:ac:6e:f0:18:f9:d9:1c:9a:0c:f3:89:e0:a1:2b:2a:
6e:af:c9:fb:33:06:1b:b7:27:aa:7f:40:62:38:eb:c3:0e:36:
7f:ae:2c:30:f3:2b:92:90:11:79:ad:07:c9:71:96:eb:27:6b:
ee:b4:7e:ec:64:75:31:89:49:b0:3c:01:41:30:8b:61:fe:f9:
31:8a:a1:e5:a5:81:03:f9:0c:4d:8f:02:2e:63:d8:40:4b:d1:
bf:b8:df:57:ce:d0:a3:98:57:b0:6d:34:cc:1a:ce:83:d9:95:
96:8d:e1:46:46:a7:ae:07:b4:c3:37:15:df:76:18:61:06:a6:
c4:a4:08:d9:46:20:26:e0:87:e8:85:89:64:b6:aa:15:e3:95:
d1:97:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:16 2026 by rpki-client