Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: ToZhqv0toELrbEpzax2PzovEGD6GAc1u0huYJCM/ZG0=
Subject key identifier: 7D:3A:00:69:10:31:95:B7:6E:B9:7F:95:C5:6D:99:C1:18:76:68:65
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019E30E0E690C042C215168C412AF7E157A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 13:01:45 +0000
Manifest this update: Sat 16 May 2026 13:01:45 +0000
Manifest next update: Sun 17 May 2026 13:01:45 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: V2i6hF5f9Vae6MYFCeg8Al1KPk3EQK/ZI8At3a2UYqY=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:e6:90:c0:42:c2:15:16:8c:41:2a:f7:e1:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: May 16 13:01:45 2026 GMT
Not After : May 17 13:01:45 2026 GMT
Subject: CN=7d3a0069103195b76eb97f95c56d99c118766865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:1b:d8:fd:d1:0c:93:21:1d:6b:66:16:c1:
f5:a0:d6:0d:06:35:e8:98:e9:2a:d5:90:f6:28:f8:
43:93:37:dd:0b:d3:df:58:69:c1:a9:a8:e7:41:6f:
0e:ef:48:1e:bb:f9:6c:c4:e9:61:2b:e4:76:43:25:
5c:22:77:b3:0e:35:38:10:7b:89:8d:11:ff:01:ca:
d1:09:a2:99:f6:2e:29:7b:6b:f4:b0:66:bd:ed:fd:
0b:3d:30:f7:52:55:a2:d0:76:69:0a:bc:4d:e1:d7:
d3:4d:79:af:41:8d:32:7f:c5:bf:2f:f2:e6:39:b8:
9e:16:24:a2:d9:d5:9e:22:21:00:1c:77:15:fd:5e:
2c:65:b4:39:22:8e:88:30:f7:c7:6b:58:7f:c1:a1:
66:10:06:d2:07:b1:9d:fa:5f:92:b8:d9:69:6c:da:
1c:9a:3f:e8:dd:47:9b:7a:ee:e2:2c:84:cb:b3:3f:
3e:b7:6b:e9:0b:ad:90:99:6b:24:0c:47:5a:c0:e4:
15:0b:d6:ef:1a:b5:d4:6e:36:27:3d:0f:d4:3a:83:
10:54:e4:67:a1:21:68:2e:72:2b:06:f8:32:35:7c:
73:05:01:eb:f0:d8:3a:31:b9:c3:a2:fb:38:cf:66:
bc:31:75:17:35:a6:e3:ba:35:f8:39:50:98:ca:d5:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:00:69:10:31:95:B7:6E:B9:7F:95:C5:6D:99:C1:18:76:68:65
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d3:0f:c0:27:78:18:51:1e:5b:3d:dc:4f:9d:ea:f5:ec:73:
38:83:8f:a0:7c:06:3f:f5:9b:e7:84:a2:da:85:cf:7e:13:e8:
9a:e1:ce:00:51:77:c0:88:0f:16:e1:79:b7:a0:d7:a8:9f:6b:
a6:cf:9c:58:c6:48:b6:4c:c7:13:f4:6b:e2:70:86:dd:fb:e0:
b2:e7:03:66:ae:5e:2d:c9:9c:65:9f:c9:b9:40:23:54:36:a0:
19:85:bb:5d:ab:ec:78:dc:9f:c2:9e:47:e0:8e:ef:40:3a:9a:
71:41:4d:9c:ed:e1:b5:71:44:0c:c9:36:ce:a8:b4:3d:32:ab:
90:23:ff:64:17:31:c1:4b:4e:b5:a2:20:9b:04:92:8d:97:6f:
a7:29:bf:38:56:34:35:b5:55:1e:61:ec:9a:f5:b9:89:7d:b4:
1f:62:f1:51:bb:b8:82:87:2c:58:a5:52:61:00:a8:5f:96:87:
ef:b4:85:fa:3a:c9:08:bc:a9:db:d0:80:38:00:54:9a:45:0f:
49:25:01:2b:4d:e5:83:00:95:4d:92:ee:3c:7f:7c:e5:30:7d:
58:76:68:9a:23:1e:b5:e0:05:25:29:10:68:be:ba:91:80:49:
79:fa:59:b0:b4:6b:6f:61:71:20:72:6c:d0:cb:47:13:c9:97:
d0:b2:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:26 2026 by rpki-client