Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: T9UjHXcDi/tFhT2wnLj5BoHMky6Rk2X7EwIcwjAMu+s=
Subject key identifier: 20:D1:F3:CE:1F:78:04:12:5A:2A:D1:20:9D:05:EC:31:84:09:0E:81
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A0005C8EF7F5DA834C30598B91240D4228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 13:01:00 +0000
Manifest this update: Fri 14 Aug 2026 13:01:00 +0000
Manifest next update: Sat 15 Aug 2026 13:01:00 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: orOjl9vf00om69RgkplZb4DpMkgWxs3qQExTJUQc2MI=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:8e:f7:f5:da:83:4c:30:59:8b:91:24:0d:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Aug 14 13:01:00 2026 GMT
Not After : Aug 15 13:01:00 2026 GMT
Subject: CN=20d1f3ce1f7804125a2ad1209d05ec3184090e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:9e:8c:c5:4a:99:40:a2:4e:68:17:a8:c1:
22:85:ba:a1:aa:3e:96:03:d2:5c:f7:21:a0:6c:7e:
c3:ff:21:ff:5b:41:7b:e0:e5:13:e3:19:2b:e3:1c:
2c:f1:af:3e:10:85:05:b5:83:1f:50:d4:c6:8d:5c:
00:e4:a7:e0:7d:a6:a1:6d:df:02:66:e9:19:cd:f4:
89:fd:f3:a5:c9:63:9f:38:eb:61:b0:f7:d2:a7:3e:
3a:b1:fe:79:ca:a5:a8:82:d4:86:5c:fa:d7:21:29:
a6:78:43:a8:aa:b7:db:6b:2a:0d:96:10:41:b7:be:
d9:e8:1d:37:8f:a0:a7:24:14:40:1d:0d:49:01:40:
cd:56:59:e8:80:13:01:12:07:c1:c1:08:19:89:61:
b8:65:19:d5:61:63:c0:0f:cd:d4:bc:4c:84:2d:9d:
93:90:75:36:4b:4a:f8:0c:06:88:83:51:4f:cb:21:
de:65:36:23:ae:65:9a:a8:57:73:f5:1b:3a:d9:09:
a8:3a:8d:92:44:98:bb:90:2f:ca:1d:0e:5b:55:4f:
ee:d3:d4:6c:c4:d0:c4:6d:fd:7b:2e:4f:d1:75:56:
72:6a:25:a6:e4:38:9d:f0:49:9a:31:60:38:c5:5b:
f6:16:89:fe:85:41:54:c6:3b:e1:04:4f:4c:fa:37:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:F3:CE:1F:78:04:12:5A:2A:D1:20:9D:05:EC:31:84:09:0E:81
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9d:fb:65:33:59:7b:49:39:7e:da:79:be:4b:fd:a3:f3:65:
0c:49:ee:2f:8c:e5:94:bc:bd:6e:28:23:a7:69:18:0c:19:a9:
1b:95:52:28:68:2e:12:61:27:50:77:26:a5:5a:14:66:6d:58:
3e:11:d6:84:b3:a9:dd:c7:62:fd:1d:06:cd:f7:b2:ee:73:35:
49:2a:a6:9f:79:08:87:56:20:1e:61:21:c4:5f:a7:65:eb:08:
d1:a9:75:94:76:ea:fb:6a:df:16:63:16:7e:9e:81:54:a7:fc:
6e:96:54:28:fd:55:70:43:1f:95:ea:c8:a0:6d:72:f2:69:79:
44:d8:cf:c6:52:66:e9:cf:a9:3d:d9:79:a1:97:f7:b6:1d:3b:
27:48:29:f6:4a:e7:98:5d:54:43:6e:9c:af:03:4b:06:c1:e2:
c9:e3:2d:28:21:e5:11:45:8b:bd:13:53:d7:6a:83:73:36:bc:
bf:4f:38:99:ad:48:a6:b7:7e:32:4b:e6:be:b5:a0:2f:2d:45:
aa:50:f5:2a:e0:0c:b3:dc:f9:e1:11:aa:7d:cf:f3:23:34:99:
a9:b0:36:09:8e:fe:42:71:9a:9d:15:99:5c:51:90:0f:d7:2b:
13:5f:0a:e5:13:0c:55:61:fb:83:b4:1d:15:f9:fe:76:a8:ea:
fd:4a:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:46 2026 by rpki-client