Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: ZBoTpjLc5NGGvfgXamfK1FuRKm88lQFD+842Y1FAceI=
Subject key identifier: 5B:13:A4:7A:C6:A5:91:8B:57:57:CC:37:39:81:4A:E5:DE:B3:76:79
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019EBE10E3C02A97206AEC7622EEA0FA007F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0698
Signing time: Fri 12 Jun 2026 23:00:38 +0000
Manifest this update: Fri 12 Jun 2026 23:00:38 +0000
Manifest next update: Sat 13 Jun 2026 23:00:38 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: awgY3HM9c+OAD+zzhF4yGdZGNH3C34B7ey/4/AB6k/I=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:e3:c0:2a:97:20:6a:ec:76:22:ee:a0:fa:00:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Jun 12 23:00:38 2026 GMT
Not After : Jun 13 23:00:38 2026 GMT
Subject: CN=5b13a47ac6a5918b5757cc3739814ae5deb37679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:1b:ef:39:a1:7c:15:84:0e:db:45:e5:66:
be:19:9f:78:92:78:48:c6:f0:fc:ed:d5:b5:13:47:
c0:d6:69:2d:53:69:87:39:6a:98:e8:91:cc:7e:07:
e0:63:97:b9:0a:af:a4:f8:d8:d6:0c:ac:99:b9:3b:
1c:b8:37:34:35:d8:4a:a0:65:69:a5:f3:61:43:11:
d0:d5:a4:92:33:48:6b:a8:53:63:2a:31:96:fc:e9:
89:0c:15:8c:71:36:5b:2f:af:ac:0d:f3:13:05:bd:
b1:d8:c8:c7:33:d7:a7:fa:a6:ca:5e:7e:4d:68:39:
20:49:7a:45:34:31:4e:c0:fc:22:aa:dc:d5:20:8c:
c0:73:52:fd:2b:1b:1f:a3:31:16:7c:8e:b8:ee:df:
7f:1b:bb:11:c8:f2:f7:23:45:d8:3a:29:9c:63:8e:
52:88:4d:8f:f4:cb:bb:ec:8a:35:65:1f:8b:32:46:
44:c2:5f:09:91:57:77:9b:dc:d2:04:85:ac:95:72:
22:65:3f:d9:e6:00:e0:0c:c0:f8:63:cb:44:d8:42:
4c:fc:62:19:3a:f7:09:70:67:e6:92:45:31:eb:73:
ed:92:28:3e:b1:b9:6b:0c:aa:f2:e5:f0:6e:d9:eb:
cf:4e:49:1b:76:17:6c:48:08:a5:7c:b1:e8:0d:1a:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:13:A4:7A:C6:A5:91:8B:57:57:CC:37:39:81:4A:E5:DE:B3:76:79
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:7f:63:f6:57:0a:4f:39:89:dd:f6:7a:48:d5:8b:72:42:
a0:39:f7:24:f8:0e:a1:7b:03:ed:a7:61:b3:bd:74:3b:93:d4:
25:6b:e2:b2:9c:61:47:62:7f:24:64:8d:0a:42:a0:d4:bc:6c:
3a:c0:53:6d:71:09:d4:c0:80:a5:58:c2:47:81:31:81:0a:5c:
cd:a7:12:f2:7f:e9:8f:35:dd:fd:ad:1e:2b:de:5e:88:31:2f:
b5:b6:e6:a6:5e:96:93:ce:a6:e0:92:41:36:12:50:42:40:9f:
f7:43:7c:d4:78:95:82:26:43:dd:07:28:fe:9a:b2:7c:9f:e1:
a5:04:61:b9:3b:5b:8a:b4:e0:ff:82:cf:af:16:ef:14:c9:02:
66:2b:8e:31:9c:04:f3:00:d8:9a:e3:73:02:33:70:d2:44:01:
e8:10:1b:93:43:4f:f3:49:6f:e0:f7:1b:4c:09:99:63:cd:d2:
4d:78:82:70:8b:aa:8c:5f:e3:0e:a3:70:50:1b:b7:8d:84:83:
c5:ac:21:e0:04:cd:52:fd:85:db:54:3e:e6:a4:41:0b:1b:7b:
37:67:3e:c5:a5:70:27:c5:22:48:7e:58:8b:f8:65:e3:53:ee:
af:f4:a8:f1:b8:43:be:d1:c6:c6:5b:6e:d1:53:c7:b1:8f:0f:
34:db:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:39 2026 by rpki-client