Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: Y3ThY2ZCEiH5rtVxVu3P+8vGf6Uy6SJe5p4713RBEi8=
Subject key identifier: 3E:4B:42:5B:75:38:35:42:2B:49:C7:41:67:23:CF:2A:0F:A5:AA:8C
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019FA9ABB781DE61B0E811F4CDC13849829F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0712
Signing time: Tue 28 Jul 2026 17:00:30 +0000
Manifest this update: Tue 28 Jul 2026 17:00:30 +0000
Manifest next update: Wed 29 Jul 2026 17:00:30 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: 2je38RJjuvZGqqahmtIFl+S+MczCyM/sFGjSI8K9qEo=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b7:81:de:61:b0:e8:11:f4:cd:c1:38:49:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jul 28 17:00:30 2026 GMT
Not After : Jul 29 17:00:30 2026 GMT
Subject: CN=3e4b425b753835422b49c7416723cf2a0fa5aa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:cf:74:95:60:cc:5f:82:cf:99:19:66:78:
62:ac:69:2b:0e:bd:2c:74:64:52:c0:a8:8d:73:fa:
f3:c9:30:76:12:d1:52:7b:69:bc:40:f9:64:30:16:
e5:01:13:a1:1b:14:27:37:82:2a:c6:a2:c1:71:d2:
9d:c5:9e:e3:d7:4f:b4:c1:b8:0e:84:69:13:a8:a0:
7b:d5:5c:1c:0f:97:7c:e4:b2:87:e9:e0:ff:05:b0:
1a:36:b6:92:1d:3e:72:bb:6a:52:5c:d7:47:2d:53:
3a:44:9e:e1:d6:7a:24:ff:f5:90:40:0c:42:8c:7d:
e9:97:d9:9a:0e:45:a5:d7:4e:62:52:5b:c3:ef:f6:
57:39:54:0f:0b:5b:35:3d:22:98:d2:3a:02:1a:dd:
a1:23:a7:32:47:ab:53:54:74:95:11:5e:4d:2a:00:
15:6a:66:c7:8f:c3:16:72:7c:15:fe:9d:b8:ae:18:
c1:ae:ce:28:34:f6:c3:b6:3d:b8:79:0f:bb:33:8b:
11:e2:ba:91:c3:86:f5:48:5f:49:93:ab:c7:9d:3c:
6d:31:6f:09:49:1e:73:70:18:5b:61:f3:90:6e:e0:
e2:82:48:45:43:23:8c:10:41:de:6c:cd:9d:fa:ef:
5c:c5:fb:b2:14:04:b9:db:21:47:e1:5c:d8:5b:03:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:42:5B:75:38:35:42:2B:49:C7:41:67:23:CF:2A:0F:A5:AA:8C
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:94:f7:98:77:16:5e:ee:66:52:63:fc:d9:a2:e3:6a:7b:e0:
05:09:33:e8:5e:07:03:05:8d:7e:b3:34:33:af:a9:67:f2:7f:
1d:98:64:7a:5e:37:10:b6:6c:43:f0:a0:4f:21:e5:05:76:42:
f4:30:0f:82:fe:d3:b5:88:fd:6d:64:68:6c:75:62:5c:2d:b2:
3e:c3:17:af:8e:0f:a8:e6:05:3d:4c:93:47:47:bf:7c:86:4c:
1b:80:4f:a7:f7:b6:20:d0:db:20:2f:40:e9:79:10:d1:88:6e:
88:f0:80:f9:34:90:a4:b5:54:82:c2:1b:e2:d2:68:20:71:1c:
a5:b0:af:db:12:ef:8f:f7:bb:c8:c3:a4:e2:f4:ff:e2:e7:8d:
c8:a9:c6:4b:32:2f:30:06:72:93:6b:cf:07:55:cf:07:e7:68:
86:a8:fe:64:97:9b:43:e5:cf:0d:7a:7b:53:f5:66:80:6c:70:
6b:8d:dc:7c:bd:11:e5:da:67:e8:90:38:03:35:69:ad:f6:59:
2c:85:be:b9:2c:71:d1:e3:df:b7:0e:ff:59:f2:05:d2:e7:a7:
8f:11:5d:45:d3:c9:04:8b:58:cf:22:5d:fe:b0:be:c0:39:3f:
84:55:9c:ad:75:c3:7b:e5:a8:ad:c6:09:7e:f3:1e:27:64:de:
56:e3:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:10 2026 by rpki-client