Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: 4bnUUB5wLje5acbOpR32TPm9YB6vzMwUt2qjcjbUMJo=
Subject key identifier: AB:CA:2F:D4:8C:A4:17:C1:B1:90:10:8F:7B:41:DE:33:FD:5C:24:EE
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 01A0CA47DAA8D51C49E9D39EA2C7D9B83BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1770
Signing time: Tue 22 Sep 2026 18:01:41 +0000
Manifest this update: Tue 22 Sep 2026 18:01:41 +0000
Manifest next update: Wed 23 Sep 2026 18:01:41 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: PbN2MuAPMv3Ai0SJYHqPq/lHCyHgJN3xWr2Cx9m2myg=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:da:a8:d5:1c:49:e9:d3:9e:a2:c7:d9:b8:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Sep 22 18:01:41 2026 GMT
Not After : Sep 23 18:01:41 2026 GMT
Subject: CN=abca2fd48ca417c1b190108f7b41de33fd5c24ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:a4:89:44:87:43:3a:48:82:5e:1b:d4:73:
24:9d:23:5a:f6:7a:7e:3e:16:d3:0f:97:45:fd:e3:
90:b7:fd:bc:7f:5b:58:71:28:3d:e1:63:8e:0a:02:
cd:54:cd:a9:c3:5d:d2:0b:3a:0f:4e:6a:35:6a:5e:
a2:4b:d0:f9:0e:74:81:46:87:19:d4:5d:cb:54:fc:
69:52:e4:45:71:c3:ec:89:17:db:e4:e0:d8:fa:d3:
e0:b9:bc:d2:a1:22:81:84:68:ae:66:3e:e6:ba:2f:
55:db:d2:27:77:c0:c3:34:27:d5:00:81:90:cf:cc:
6a:7f:84:3f:2a:10:ca:bc:54:06:61:a7:8d:5b:c3:
1d:1a:cb:ad:35:b0:3a:cb:92:db:92:86:85:b6:61:
69:2d:54:c0:2a:9b:dd:0b:d2:0b:66:f0:40:c1:f8:
ea:35:60:f8:6f:0c:b2:d3:9c:3a:aa:7b:70:ab:20:
3f:d8:97:7c:4a:83:2b:8b:01:31:ef:ac:74:ee:6c:
d7:55:2a:2a:53:17:23:21:7c:a5:44:fe:aa:14:b9:
04:7e:d4:00:63:ec:7d:c9:89:2a:78:f4:64:61:59:
98:cb:75:9f:2d:70:03:45:f5:e3:d7:33:43:b3:61:
b8:16:2a:3b:c5:33:45:c9:d6:20:d6:68:dd:eb:6a:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:2F:D4:8C:A4:17:C1:B1:90:10:8F:7B:41:DE:33:FD:5C:24:EE
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:58:0b:8c:1c:7d:39:bb:a6:99:f9:f9:e1:41:d5:be:17:
26:14:78:4b:30:ce:bd:80:ad:b8:8e:66:83:bb:e0:91:e7:91:
7b:5c:a0:3c:34:31:34:ef:89:f1:42:86:c9:ba:14:bc:07:2f:
ea:c5:af:7c:ba:a2:8e:fe:4b:9d:5a:89:50:40:09:64:cf:f6:
65:99:70:71:dc:53:77:f9:94:1f:e5:84:c5:3d:8f:a4:fd:3d:
aa:94:9a:02:09:58:27:7c:16:70:b5:dd:95:f0:88:79:b5:3f:
13:cd:e7:7f:07:6c:48:2f:cc:2c:73:ac:90:fd:77:2c:d9:a9:
e7:d8:e6:d0:e6:3d:0b:77:38:ca:a3:24:4d:e5:f9:d0:3c:89:
49:3b:bb:cb:fb:ab:11:b6:69:c1:47:9e:f1:6f:6f:d9:c7:34:
23:96:a9:87:1b:f0:c2:78:db:4f:a7:c5:ca:5c:4d:93:34:70:
be:43:4b:0d:ac:56:86:87:86:44:09:16:68:52:7f:12:43:15:
3e:96:99:d7:76:1c:28:0f:98:21:f7:e0:31:e9:ee:5d:15:66:
94:62:40:14:cf:63:ad:37:31:c1:dd:f8:5e:b2:f6:05:cc:7f:
88:e8:75:c4:7b:a7:a0:e9:cc:8e:3d:d5:09:6b:9f:f0:5a:48:
53:15:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:22:13 2026 by rpki-client