Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: FjLHFyvgf2wGGzyUdIqh7Pb7V+RxEMhgo1cVECvdxE4=
Subject key identifier: A9:9D:C2:FB:EF:7D:B6:39:69:55:5B:39:59:04:4A:13:DC:FA:43:BE
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019EBEECAB3A4EFC22C7C6EC266E33F79854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 1661
Signing time: Sat 13 Jun 2026 03:00:41 +0000
Manifest this update: Sat 13 Jun 2026 03:00:41 +0000
Manifest next update: Sun 14 Jun 2026 03:00:41 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: ew+KlckDQOFcbdpz4n5xNHxyKFTSC4ixNFt8c/67jts=)
2: t90Pf8i78ir-qZaXDxbGjf9fnfQ.roa (hash: xVvLDALVTXA20CqaVC5YheWUUzGYCzjMpdYIhNnbISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:ab:3a:4e:fc:22:c7:c6:ec:26:6e:33:f7:98:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Jun 13 03:00:41 2026 GMT
Not After : Jun 14 03:00:41 2026 GMT
Subject: CN=a99dc2fbef7db63969555b3959044a13dcfa43be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:23:ee:70:77:2c:18:b4:5e:a9:5b:31:2c:
7a:53:d9:04:56:fa:2e:de:b3:02:52:87:b3:ed:89:
37:a7:59:ba:f7:58:e7:9d:ac:fd:5f:c6:f0:0a:5d:
11:8a:e3:50:48:f6:9f:e1:dd:46:34:82:8b:f1:f5:
83:db:04:e6:03:c4:59:7e:cc:f0:6f:95:56:0b:de:
77:87:99:10:f1:6c:ec:ab:eb:45:4b:7c:d8:3b:91:
17:b1:25:46:77:71:e4:36:0c:0e:7b:fe:1d:44:3d:
b1:a9:9e:76:77:23:bd:28:6d:49:72:98:7b:80:74:
2a:83:28:4a:52:5d:60:bc:5c:77:77:89:b6:8f:87:
a4:8f:fb:93:32:fe:5c:54:c1:44:05:6f:36:96:c5:
4d:bb:61:2d:95:54:d2:c8:68:16:5e:10:31:05:58:
c5:4c:03:da:1f:f8:8c:02:41:36:ea:ed:71:8d:f6:
2c:8c:23:e8:67:f8:76:1c:80:e2:54:51:ea:98:34:
60:0e:f4:89:c1:45:84:d2:c4:6b:82:7e:7b:6e:80:
a6:ab:79:1a:98:89:06:e4:7b:45:6a:c2:6b:62:c0:
56:c7:4d:b5:24:99:9a:c5:5e:10:9b:1d:64:42:08:
62:16:c2:3e:2f:97:6f:83:20:fe:fa:cc:f6:f6:83:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:C2:FB:EF:7D:B6:39:69:55:5B:39:59:04:4A:13:DC:FA:43:BE
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bb:8f:df:da:46:38:1b:86:aa:0b:85:03:95:b0:63:a4:8c:
41:2a:c5:8b:00:8d:1c:1f:dc:da:be:e2:6e:34:8a:93:48:e3:
07:58:06:fe:3d:7d:df:a5:96:52:62:62:07:1a:9a:fd:60:6a:
ad:22:5a:5c:e5:45:ca:88:64:74:07:c8:99:f8:c2:8e:53:77:
6d:9c:1b:ae:51:62:5c:2d:0b:2f:d8:f6:78:7f:39:03:94:b4:
55:14:5e:3e:2e:a6:88:2a:2d:61:9a:49:b3:e0:85:15:ab:98:
84:d8:8a:77:ac:4b:be:a2:7f:01:bd:d8:0d:72:3e:7b:78:2d:
1e:d0:6f:8f:97:64:e6:65:46:c7:3a:e9:c5:93:97:8f:25:cf:
a3:87:46:b2:23:8c:84:18:48:93:0e:84:ba:9d:5c:49:03:a0:
85:46:9c:ce:d4:4d:ad:8e:aa:f5:d2:b2:9b:2d:16:c6:67:96:
2d:f8:cb:3f:ae:57:f0:d7:ff:f0:57:70:21:04:8c:fb:99:fb:
8b:2a:f2:1e:79:af:bf:28:38:53:6a:fe:b7:2a:10:0f:f9:bb:
d6:3a:0f:5b:fa:64:de:fb:f7:44:7e:d5:1e:ea:6e:44:09:26:
ad:24:b0:43:39:d6:4b:ba:e4:b6:39:a9:15:5c:ec:9e:e2:d4:
5c:97:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:36 2026 by rpki-client