Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: nE5YB2bYkNV8yEhk6+XB013ZwzmMXp0IUw8argpFTkg=
Subject key identifier: 67:F6:30:7C:EF:6B:2C:76:A1:32:D0:B2:8D:40:85:9E:65:EB:EF:95
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019EBEED2B2A9C7063547372410618168B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 03:01:14 +0000
Manifest this update: Sat 13 Jun 2026 03:01:14 +0000
Manifest next update: Sun 14 Jun 2026 03:01:14 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: zO5qZ790GuKOXX8EPqrnLqHNlgI4+3nplPX4e93cspA=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:2b:2a:9c:70:63:54:73:72:41:06:18:16:8b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jun 13 03:01:14 2026 GMT
Not After : Jun 14 03:01:14 2026 GMT
Subject: CN=67f6307cef6b2c76a132d0b28d40859e65ebef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:67:44:e0:f0:67:0d:e0:11:85:2b:3d:90:
fa:72:f1:37:c4:1b:0c:5d:c3:5a:4e:70:00:e3:29:
de:74:b6:95:e1:0f:fa:05:75:85:fc:e3:4c:bf:36:
e5:6d:54:08:1e:c7:67:e3:77:41:ce:22:b0:79:49:
57:38:59:23:54:7b:7b:6c:be:82:02:b1:a6:f4:72:
5d:87:ac:74:bf:ad:38:65:f1:4a:ef:dd:e8:9a:1b:
c2:7a:d4:de:1d:e3:bf:6a:39:36:cf:de:68:6c:d0:
8e:8e:c2:16:9c:a2:aa:f1:dc:0b:b4:f7:90:5e:d7:
c4:8a:55:a3:67:c8:33:89:1c:71:9f:7d:5f:1b:2e:
ac:b0:d5:a7:77:57:66:36:a5:26:c4:a7:1b:69:70:
9e:73:e3:aa:27:65:18:95:2d:77:40:69:ef:c4:de:
23:15:c7:34:b8:16:52:0a:4d:7d:fb:62:34:89:b3:
c7:8b:ee:ba:f6:e4:a5:8d:6c:f8:e0:42:a6:e7:31:
3f:b2:31:4d:d8:0d:67:27:b6:48:c4:12:48:ff:ab:
72:b0:48:47:5a:3b:6b:78:1c:d3:3e:18:88:6f:f8:
2d:a3:d5:e6:70:da:36:81:54:6d:7b:4f:9c:6e:6e:
bf:f9:cf:2d:e9:6b:87:59:a9:36:5b:6d:28:a5:28:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F6:30:7C:EF:6B:2C:76:A1:32:D0:B2:8D:40:85:9E:65:EB:EF:95
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:aa:43:0d:98:58:7e:ea:84:91:a5:c9:53:4a:8f:d1:a6:d8:
10:53:88:13:74:aa:3f:9d:07:2c:f6:3a:2b:46:50:9c:39:db:
4a:7c:3b:e7:42:18:d1:09:de:f3:26:84:81:56:57:90:79:67:
d5:6d:13:a0:7c:c8:df:8a:f4:e6:7f:22:cf:4f:73:ec:82:bc:
8d:b5:35:c3:3d:ab:96:da:59:77:b7:be:59:b9:3a:7d:a1:89:
e7:7c:7f:09:bf:a5:38:a3:42:94:0b:e7:39:ba:ac:e7:5a:78:
d9:9e:bc:74:86:d1:ae:ba:06:4e:54:cc:bf:3a:8b:2e:27:ca:
60:ce:d9:13:8e:13:97:97:10:36:9a:96:00:0a:35:ca:d4:c0:
0c:67:21:98:cf:c5:f5:0b:da:7e:f2:de:03:77:a1:52:db:a8:
6b:cc:69:dd:59:c1:41:9c:5e:8e:be:2d:91:28:ec:8e:ed:83:
76:ae:d8:c6:75:c7:a2:e7:e2:f6:db:27:48:be:ef:61:72:b8:
b5:c8:5d:0e:23:ea:d9:3f:5a:55:a3:da:5c:ba:95:ac:73:6a:
06:12:9e:4b:4f:d5:f2:45:44:b0:66:f5:ba:23:77:3b:1d:81:
07:c5:d1:51:7a:36:63:ee:c2:91:a3:98:f5:84:b9:76:a6:e7:
b2:e1:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:48:42 2026 by rpki-client