Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: ZEwxqSxf1IECSLSGC9sEDrH9qCNpBtv1RTrxXlll71g=
Subject key identifier: 0B:D7:9B:8C:51:24:41:7D:AF:6F:EF:92:66:1D:06:36:3E:3F:49:F9
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 019FA907C31F527E7384F04BC9E70B4EC317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 1438
Signing time: Tue 28 Jul 2026 14:01:25 +0000
Manifest this update: Tue 28 Jul 2026 14:01:25 +0000
Manifest next update: Wed 29 Jul 2026 14:01:25 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: Bl3Dle160Ebf49QT75n15bCdZZHV9/lo0q2FM5RTUsw=)
2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:c3:1f:52:7e:73:84:f0:4b:c9:e7:0b:4e:c3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jul 28 14:01:25 2026 GMT
Not After : Jul 29 14:01:25 2026 GMT
Subject: CN=0bd79b8c5124417daf6fef92661d06363e3f49f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:6b:24:42:9d:9e:79:9a:9f:3a:4a:01:23:
77:d6:0c:81:bf:d0:33:90:33:13:ec:dd:98:ce:37:
c5:aa:7c:15:04:0c:af:88:17:3e:72:5f:1f:2c:43:
e2:cf:c1:52:32:c8:bb:5c:9e:6c:0e:5d:42:7b:fb:
7e:3e:42:4e:4c:66:6d:87:c6:95:d5:a1:e2:b5:af:
88:9e:d6:84:13:85:fe:e5:79:74:78:37:b3:7d:21:
bd:d3:56:13:6f:24:cf:2a:04:a7:3c:62:67:2a:7e:
dc:74:2a:93:07:48:62:4f:48:d0:67:17:ab:e5:62:
71:55:97:b9:7e:d8:93:aa:31:cc:2f:22:60:02:a2:
ca:4c:37:84:55:91:a1:27:ca:2b:d5:7e:7c:39:1b:
ad:f3:8f:a7:9b:70:0d:08:16:9f:10:d9:f6:a0:b4:
a2:e6:28:ba:ad:a5:dd:9c:54:3f:32:c7:7e:ad:4f:
87:9b:88:e8:b7:a2:39:74:92:f8:75:60:67:98:06:
d0:6f:e4:ef:26:72:8d:1b:10:eb:98:a0:7d:8f:a0:
51:d8:2f:1e:8a:9e:80:3e:04:83:a3:3c:8f:34:39:
b6:db:85:aa:76:a6:db:78:bb:6f:dc:75:69:1c:11:
e7:0c:93:7e:62:b5:4b:28:c4:90:18:0a:8b:ea:f7:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:9B:8C:51:24:41:7D:AF:6F:EF:92:66:1D:06:36:3E:3F:49:F9
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:3b:55:4e:95:24:bf:e3:b4:b1:64:66:10:44:ad:cd:85:
cb:84:dd:a2:cb:e8:70:6f:49:96:c6:de:e4:2e:9c:dd:3c:2f:
73:2e:9b:cf:d6:98:c0:e9:2e:0f:3d:64:75:a7:01:e6:52:38:
7f:23:2d:6e:a0:66:29:1f:9c:d0:26:f0:dd:5b:26:04:58:bf:
71:a2:8f:92:8f:3e:8a:9c:fe:cd:8a:a6:84:4f:57:b4:3b:39:
30:2b:3b:d5:f9:27:e2:a0:aa:f0:e1:e9:e2:6b:22:87:b8:20:
a7:de:15:7c:2e:a6:87:8a:a5:ae:ef:33:22:b7:90:f2:dc:0e:
d5:72:ce:ec:c1:32:e5:50:2d:72:02:75:44:6c:28:30:9e:8c:
c0:e3:df:43:44:f1:80:ee:42:31:e3:7c:ed:e4:c4:9c:0c:52:
83:5f:c7:d9:d0:49:c0:fd:90:f2:f2:dc:0c:54:b3:96:5f:49:
7a:09:4d:f7:b2:fc:46:7a:20:8e:a6:e1:d8:c1:a4:99:95:7f:
ab:47:19:ec:78:a8:96:57:0b:bb:c3:46:30:08:72:d0:2f:5f:
ba:6d:37:6e:73:ff:20:64:1b:a7:60:8d:d8:c2:de:7e:69:59:
b8:d1:2f:90:43:71:e8:64:d0:38:b0:bb:43:01:99:82:48:2e:
a6:fb:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:02 2026 by rpki-client