Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: Tu7xNCg15Ot3yjXKtCYgWhqCjIvJy0V6O79cEvXUIj8=
Subject key identifier: 58:35:BA:AE:93:83:B9:84:98:25:87:AD:EA:88:89:83:1C:C8:5B:07
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019CABD981FA586A9E553B33181F45E2B75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 154E
Signing time: Mon 02 Mar 2026 00:01:24 +0000
Manifest this update: Mon 02 Mar 2026 00:01:24 +0000
Manifest next update: Tue 03 Mar 2026 00:01:24 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: FtIHYpMK2DcAQoSIfUlHXRN0fruN2F/A6Sle62733hw=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:81:fa:58:6a:9e:55:3b:33:18:1f:45:e2:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Mar 2 00:01:24 2026 GMT
Not After : Mar 3 00:01:24 2026 GMT
Subject: CN=5835baae9383b984982587adea8889831cc85b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:fe:e4:50:6a:15:af:e1:9f:e2:58:38:04:
62:26:df:2c:75:d5:4d:ba:27:19:5b:0e:57:0f:8a:
13:9d:55:55:96:a8:f3:09:9f:1f:10:3d:82:90:28:
7f:19:31:33:e5:ac:6a:17:49:09:2d:48:10:bb:3c:
4b:4a:84:82:bc:53:e1:09:ff:17:94:3e:88:d1:b3:
7c:aa:ff:f1:80:0c:22:6c:01:b2:2d:db:b1:ff:99:
8d:c5:1f:15:d0:44:f2:71:bc:24:f7:5d:5f:cb:df:
90:c7:d7:3d:27:53:83:f0:ed:de:49:04:b2:dc:42:
b0:ac:52:48:28:bb:0e:4b:1a:64:4b:6e:42:ef:79:
8c:96:42:b3:f7:ef:64:5c:9c:89:e0:7d:78:0b:51:
a1:e7:fd:ad:12:db:5c:c7:cd:91:76:97:47:b5:d0:
aa:1e:ee:32:d2:e5:e9:37:bf:18:de:51:4e:96:7e:
19:3d:d6:c6:02:01:e1:06:23:12:92:41:ae:43:8a:
dd:79:a3:1a:32:27:76:ce:18:0a:22:6f:0d:5d:dc:
7c:8f:e6:91:c6:40:eb:8e:b3:dd:58:9c:1b:12:f7:
e2:ad:e2:01:df:90:44:39:3e:cc:f8:21:2a:9b:1f:
bb:f2:e2:e3:a5:ff:96:63:0b:f5:b5:e6:75:ab:dd:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:BA:AE:93:83:B9:84:98:25:87:AD:EA:88:89:83:1C:C8:5B:07
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:d6:37:99:ad:c1:5d:00:25:8c:19:41:f4:db:33:24:65:
86:94:92:13:a6:96:11:c5:c0:2c:48:96:2e:6b:5f:9d:47:31:
80:73:9f:87:18:c3:36:8d:bc:df:ab:2e:a8:a4:a5:49:83:cf:
52:20:68:60:36:7c:c0:e6:61:c9:86:46:32:8a:03:5f:82:c7:
3b:4c:41:d0:05:1f:7d:f1:18:9c:42:40:8d:60:45:3b:cf:ea:
01:f7:22:0e:f1:6f:66:b7:0b:43:36:7d:37:aa:d2:09:c7:fc:
75:56:4b:7e:da:e5:71:99:00:5f:9f:24:87:90:81:8a:68:6c:
a1:e7:ae:58:1c:7c:b8:45:d5:9d:c5:8d:45:27:b1:f9:4b:3c:
65:71:e6:d9:65:8f:96:b3:12:6e:83:01:b7:f9:c6:d4:1a:82:
b5:8d:89:93:df:a6:f3:92:2e:8e:c7:19:86:48:2b:f5:2e:a1:
36:ea:4e:52:2e:ba:31:6f:ce:84:71:1c:f5:dd:e1:4e:f8:0f:
9d:e0:a0:93:44:7c:ce:6c:a6:ba:01:9b:8a:d2:81:c4:5d:2f:
d9:6b:1e:43:ea:cf:b9:66:27:db:de:d2:c7:87:53:4d:70:3b:
20:d8:76:38:e1:e9:e0:80:96:79:8a:87:f5:d9:ee:00:f7:30:
bb:28:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:39 2026 by rpki-client