Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: uFcd0Kwnuocw5Pv+8bYcL7MucL0/BpaFFN7oxNI4zP4=
Subject key identifier: D0:AA:1A:94:88:02:B9:4C:CC:85:B7:71:52:D6:A8:B5:36:D4:94:C6
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019EBF5B288FD1C205E282D45E2F2411D982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0EC0
Signing time: Sat 13 Jun 2026 05:01:22 +0000
Manifest this update: Sat 13 Jun 2026 05:01:22 +0000
Manifest next update: Sun 14 Jun 2026 05:01:22 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: yo3kuiYdB1QUdespUZ+MNzoBTsRxw9UZDGAv+xj+FNw=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:28:8f:d1:c2:05:e2:82:d4:5e:2f:24:11:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Jun 13 05:01:22 2026 GMT
Not After : Jun 14 05:01:22 2026 GMT
Subject: CN=d0aa1a948802b94ccc85b77152d6a8b536d494c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:83:30:94:6c:28:b0:f8:ac:03:80:7a:a1:63:
02:bd:e2:db:b9:25:38:8a:e2:5f:28:8a:89:6f:e8:
bd:ca:5b:00:40:55:96:99:9f:c7:ed:83:02:f3:86:
f8:2a:88:e4:38:0f:aa:01:4c:1f:77:99:29:c7:82:
44:66:95:fa:1d:99:2a:f9:91:eb:d6:ea:25:40:ed:
8b:29:26:08:bf:0b:e1:77:6a:bd:23:89:be:43:74:
d0:9e:84:39:ef:2d:fb:63:17:de:8c:6b:b7:25:46:
25:50:82:e9:91:31:bc:c5:a5:48:57:55:a9:f9:96:
7f:6c:25:69:6b:37:ac:da:2d:9b:67:7c:8d:92:d7:
6d:c3:17:63:0a:e6:9b:fb:0f:92:8b:c0:40:65:ec:
71:10:a0:25:d6:df:86:af:cb:0c:08:e0:6f:f2:68:
2d:e0:45:79:af:47:9a:20:6d:a4:a8:d3:cb:dd:af:
9a:48:97:a2:66:4b:10:f3:92:79:3b:4f:0d:96:4e:
95:bf:25:74:53:c8:b9:22:fe:e8:f9:3f:96:cb:53:
ba:cd:c5:49:c4:93:ac:a5:13:83:d9:52:d4:e1:72:
5d:08:bc:86:45:44:43:32:24:ae:87:bb:59:ba:d6:
80:c8:9a:90:df:fc:b3:0b:49:61:dd:6a:6c:b2:42:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:1A:94:88:02:B9:4C:CC:85:B7:71:52:D6:A8:B5:36:D4:94:C6
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:79:90:50:95:bb:e1:76:5b:bf:bc:98:e6:6b:57:a3:0e:de:
a8:46:a3:fe:a9:14:13:84:4d:c2:02:a0:4f:41:ce:4c:e3:ed:
97:d9:ed:7f:78:d8:3f:36:03:6e:d2:06:fe:59:c6:21:0b:46:
2c:3c:42:a5:3b:0b:b9:41:d9:73:f6:8b:b7:00:52:0e:f9:87:
7d:87:3e:a1:bc:c3:a4:44:e7:75:03:0d:1b:ae:29:9a:d2:8a:
42:ae:24:45:25:f7:02:b6:88:27:a6:a1:b9:a7:50:04:59:bd:
b7:29:85:61:2b:71:65:c0:76:a2:e8:a6:11:5f:4e:4a:fc:b3:
d8:86:6b:a8:71:a5:54:1e:73:d9:22:75:87:9f:da:45:66:0b:
c1:5b:d2:71:c4:67:84:1e:f2:f6:82:23:1a:31:8e:36:0d:1b:
c0:e5:c0:ba:8a:88:bc:eb:43:a1:20:9d:cc:25:1e:45:90:30:
07:e0:5e:9e:ff:ed:cc:79:07:1f:6a:6a:af:b1:77:26:3a:8d:
94:d9:3f:3c:2c:fc:a9:5d:c5:29:48:4d:ae:c4:e8:ee:a5:39:
36:b7:b5:bb:d0:fc:6e:fa:71:dc:f6:9d:09:d5:e5:aa:cf:9b:
54:a8:4d:45:d6:61:40:e0:ec:59:0e:63:6c:c9:05:f6:75:09:
42:6d:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:42 2026 by rpki-client