Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: oZnn70zcM9kVskxqVKvpyoyKXjQbzQGXTXwxb4Ck4gQ=
Subject key identifier: D4:BF:61:BF:BD:85:91:10:DA:06:45:F1:31:A0:7C:E5:E6:10:AA:C7
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019D39AE8E88A66E761ADB467C747ACDD4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:34 +0000
Manifest this update: Sun 29 Mar 2026 13:00:34 +0000
Manifest next update: Mon 30 Mar 2026 13:00:34 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: y2TMTHkY4hBs0n8VmaIW+GmGcn0acssSYqOI9UptNJ0=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8e:88:a6:6e:76:1a:db:46:7c:74:7a:cd:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Mar 29 13:00:34 2026 GMT
Not After : Mar 30 13:00:34 2026 GMT
Subject: CN=d4bf61bfbd859110da0645f131a07ce5e610aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:07:40:28:55:ec:54:48:f1:7b:f6:fb:ff:
23:71:55:e1:7f:b1:46:e8:98:67:8d:a4:23:19:98:
5c:7b:de:21:9a:5b:83:f5:14:08:ef:62:47:af:d4:
f8:55:1b:27:5f:6c:86:cd:b0:aa:63:e3:e4:56:42:
de:5c:87:bc:1b:bd:0e:f3:04:32:99:c7:12:40:0e:
0d:b3:c2:17:6b:1f:e5:05:43:4b:37:52:55:9d:9e:
b9:0c:cb:78:c8:2c:e3:bb:86:1d:e5:f1:37:4a:f6:
bf:70:bb:41:e1:e4:e8:ff:33:62:97:7c:6a:8f:2f:
95:f5:57:34:44:dc:5b:b4:60:b8:ec:79:5e:1d:6d:
4b:65:03:b8:aa:ec:ff:b2:3e:66:dd:57:96:0e:05:
a9:f8:1f:72:2a:6f:ea:c7:2a:82:3a:a5:a2:aa:2a:
ad:3e:f1:3a:72:ee:6f:22:3e:a3:79:0c:1b:d7:55:
d2:ef:23:42:ea:8a:f7:7d:21:5b:18:a4:60:b0:af:
7c:d8:b8:91:3d:41:29:47:45:55:c4:0b:54:75:22:
49:7b:6c:b5:5a:ae:70:6d:2d:95:28:d0:a8:9c:ea:
8c:98:7b:10:44:df:39:63:06:99:17:e3:70:80:c0:
bb:08:2d:dd:9a:ea:7f:6c:1f:e5:dc:36:d3:4f:e3:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:61:BF:BD:85:91:10:DA:06:45:F1:31:A0:7C:E5:E6:10:AA:C7
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e8:df:95:cd:56:b5:9f:f7:35:db:98:89:1b:eb:c5:89:37:
b3:ab:74:ad:50:e8:ac:b4:97:f4:79:c7:28:5b:b2:5b:6d:ce:
4c:26:b9:41:69:2d:f9:52:8d:9c:ce:0e:1e:cc:72:d3:eb:a7:
d6:e4:79:a0:72:2a:c4:07:79:71:f7:23:3e:b1:ed:93:ca:2c:
13:8f:b3:d3:b9:81:c2:cc:96:ba:1f:9a:35:a5:35:46:7e:05:
0e:31:d4:cc:de:2b:3e:0d:dd:2e:a2:88:0b:08:50:c7:f3:6e:
65:e3:5f:0b:1b:79:3f:09:21:66:37:a6:92:3f:8d:d1:56:54:
59:57:39:52:6d:eb:9c:60:b9:5f:85:7c:8a:3c:df:45:c7:4b:
89:71:dd:b8:64:e7:1f:3e:3e:59:ae:33:73:ef:99:aa:de:87:
dd:02:5b:5a:56:d9:78:d1:d0:f9:60:ca:4e:2d:db:e9:d9:51:
60:5f:d8:71:ba:e3:48:24:95:12:5f:77:c3:22:44:fc:29:b3:
6f:3c:27:1d:6b:9c:b6:51:3f:59:4f:25:ca:29:f2:b4:4b:7d:
7d:bc:75:c9:8b:f7:5f:91:d3:1e:a8:4b:b0:8e:b4:7f:70:59:
ed:f1:6a:e2:38:40:82:c6:26:33:73:47:70:7c:71:94:08:ed:
bd:e5:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:59 2026 by rpki-client