Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: hKsPTEV9MbreRGeW2RiIChl2sWjMnNcjGgmuGTvsflI=
Subject key identifier: 06:5C:3B:23:89:E7:D3:81:56:E4:61:C5:40:68:9C:93:42:AA:8A:41
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 01A0C4E9F7E3B633B813B197FBA215DA5DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0FCC
Signing time: Mon 21 Sep 2026 17:01:02 +0000
Manifest this update: Mon 21 Sep 2026 17:01:02 +0000
Manifest next update: Tue 22 Sep 2026 17:01:02 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: adpH7lL1tJXsmHCMt84q/PsubEEyNQvSE65c+qeEfOY=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:f7:e3:b6:33:b8:13:b1:97:fb:a2:15:da:5d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Sep 21 17:01:02 2026 GMT
Not After : Sep 22 17:01:02 2026 GMT
Subject: CN=065c3b2389e7d38156e461c540689c9342aa8a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:e8:24:6b:d0:7a:22:a7:07:20:80:9f:6c:
b7:52:b2:9f:6a:e5:eb:0e:c4:a5:24:50:2f:df:8f:
0a:f9:81:13:d4:9a:52:d5:39:a4:f5:ad:03:0c:28:
f6:1b:51:60:83:b0:75:11:0a:ad:c6:59:ef:42:f7:
f3:77:c1:fd:a8:03:32:56:de:f9:5b:57:53:4d:bf:
0c:48:1e:d4:7a:64:6e:81:27:4f:31:1f:88:e0:c3:
91:0f:c5:59:43:46:f4:a6:47:9e:27:0e:1e:03:99:
e6:54:d6:15:74:10:f0:16:7d:87:8c:d3:41:b0:77:
06:d2:7e:5e:5e:c9:34:7e:68:77:c6:05:f7:ae:08:
c0:b4:8a:ec:3d:54:37:2d:82:fc:61:24:21:89:65:
c6:22:31:bf:0c:51:55:94:20:2d:99:6c:53:30:88:
7e:8b:61:a3:6a:9b:2a:a0:ba:a4:b0:95:b5:90:6d:
f3:a5:20:c3:7c:d5:df:93:65:20:db:0a:6d:34:04:
91:7f:ab:12:ac:2e:55:22:00:c4:d7:3c:bd:f2:93:
13:e3:d1:55:2f:e2:2c:fd:ac:a9:9c:a8:43:65:e6:
77:08:ca:6d:ef:ca:0a:4d:2b:f0:de:95:19:c5:e4:
82:04:17:39:6a:0c:b4:e0:bb:b9:9e:5b:af:2a:d5:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5C:3B:23:89:E7:D3:81:56:E4:61:C5:40:68:9C:93:42:AA:8A:41
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e0:2c:86:7a:53:bf:2a:48:9e:2b:c5:30:85:ab:8f:a1:1b:
64:4f:f3:95:88:ac:e6:a9:5f:cf:d0:d2:cf:d2:2f:1c:75:2b:
41:7c:bc:cd:6d:cc:18:00:6b:37:8e:1d:19:1a:14:af:08:09:
82:4d:07:c2:85:33:97:c1:d0:ae:c4:55:a3:91:3a:f4:97:5b:
9b:89:64:ba:b7:69:45:fb:4c:8d:6f:a6:9e:61:d1:af:be:ba:
a2:a4:21:c2:ac:df:57:b3:ee:25:ea:eb:e0:99:09:92:a7:13:
75:e0:9a:a7:2d:3f:d4:a9:b9:1f:e2:21:9b:20:00:0e:29:ae:
2e:04:7e:69:66:3e:3d:3a:24:69:1c:9a:cd:3f:77:72:56:a4:
6d:e1:a2:1c:8c:b0:78:b2:32:24:10:8c:84:71:e3:a9:11:14:
ea:13:0c:26:66:3a:3f:44:0e:2d:5b:6d:d4:c6:8c:dc:bf:ad:
34:2f:44:39:80:bf:d7:a6:4e:92:61:38:53:5a:85:ea:95:a4:
7e:b3:ca:e5:0a:53:0a:57:db:3d:f3:36:a1:79:34:6a:b9:95:
a3:03:62:8a:0c:8e:0b:79:32:e9:67:80:44:7a:7a:7d:83:e1:
c4:8d:bb:82:fd:d4:12:07:d4:a6:ca:03:32:0f:3a:48:ef:a1:
f3:3d:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:20:16 2026 by rpki-client