Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
File: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft (raw, json)
Hash identifier: DKwwwuHurAmcIbbuKK6UfRgEd85IJHYmE0ytsDj8lu8=
Subject key identifier: 43:B3:98:DC:67:32:58:C8:4C:D2:96:B0:37:3A:8D:42:80:D4:2A:B4
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Certificate issuer: /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial: 019FA9071ED9A502E355D828AD157820F4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
Manifest number: 0F39
Signing time: Tue 28 Jul 2026 14:00:43 +0000
Manifest this update: Tue 28 Jul 2026 14:00:43 +0000
Manifest next update: Wed 29 Jul 2026 14:00:43 +0000
Files and hashes: 1: 2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl (hash: VdzxII4YcLUtjbd94Xg+E7ctujYZ1df4pvtfRR/x8Co=)
2: Mwa4BYhszDC6EiMM8uEuQovtbu0.roa (hash: +62IJVapKeotHfACQPyX6dSOxf44Up4jXmezBFrKB6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:1e:d9:a5:02:e3:55:d8:28:ad:15:78:20:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Validity
Not Before: Jul 28 14:00:43 2026 GMT
Not After : Jul 29 14:00:43 2026 GMT
Subject: CN=43b398dc673258c84cd296b0373a8d4280d42ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:43:ec:2f:b7:b9:c4:f4:8b:11:2b:59:dd:
a7:80:2f:2f:43:17:31:c7:69:9c:24:d7:3f:d0:3c:
88:79:e9:4a:d4:2f:13:8c:f4:f1:cd:17:d1:27:c5:
d4:06:cf:33:35:8b:cc:fb:6c:81:b9:19:33:d5:42:
5c:ce:2f:d8:e5:0c:3a:de:e1:47:45:a2:a8:9f:db:
61:5c:9a:e9:e8:67:3c:d9:b6:d2:3c:09:69:90:87:
93:cd:47:54:f3:62:40:97:12:c9:73:64:25:6a:e8:
0b:38:75:23:a4:77:ff:0d:e7:10:52:d2:91:87:59:
07:26:4e:37:b6:bd:5c:63:ab:98:ca:07:2c:ad:ec:
d8:e9:33:d9:b9:5c:ee:7b:c4:f1:1f:c0:75:06:3f:
77:ac:f3:52:f4:c6:c3:47:ea:20:3e:23:10:c0:a7:
9c:43:9a:01:4b:6e:51:5c:95:d3:b8:46:e8:80:1c:
fd:4a:8c:3c:4e:7e:4c:8e:a0:99:49:39:11:0c:ea:
11:cf:28:2c:9f:fb:90:f0:97:48:4a:f5:c3:7f:64:
6e:28:cc:81:35:0c:c4:6c:15:8e:e1:b2:e3:81:09:
14:56:ab:04:73:01:15:bc:9a:7e:af:e6:88:2d:c2:
75:43:9b:75:aa:e9:0e:9b:a1:06:cc:cd:d4:42:7d:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B3:98:DC:67:32:58:C8:4C:D2:96:B0:37:3A:8D:42:80:D4:2A:B4
X509v3 Authority Key Identifier:
keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:f2:29:51:e8:7d:67:ac:f4:8f:d7:53:7c:61:aa:81:8d:
ff:25:55:41:62:7f:13:d6:b4:19:74:45:4f:a5:d1:7c:71:be:
a0:03:82:a8:ce:1f:e1:35:60:a2:92:55:51:5e:4a:56:51:c3:
f4:53:2d:b6:87:77:c9:f8:74:2e:e5:5b:ff:8f:7b:e4:de:89:
b9:3d:78:de:10:fe:0f:f5:dd:e0:a2:3d:d7:9c:89:21:87:0a:
30:5d:46:c5:77:7b:df:f7:af:74:ea:25:d8:dc:9b:72:7f:92:
8d:4c:eb:81:1f:d1:cf:eb:f2:31:58:00:ce:80:d8:72:d1:6e:
8c:09:0e:09:24:8d:ec:ce:7b:5d:eb:60:4f:9b:e1:1b:7b:36:
d3:c4:fd:e9:16:07:e5:26:41:bf:20:d7:a2:bf:dd:38:cd:60:
23:32:8e:0c:7b:0d:0e:b0:52:86:7a:ca:af:5c:df:ae:ee:c7:
b5:89:82:08:15:c3:ee:03:36:83:1d:2e:ab:01:fb:fc:a0:ac:
71:72:4f:db:3e:cc:aa:c1:4f:cf:08:7f:21:d6:ae:21:ab:a4:
8c:a6:8b:21:2a:9d:91:d2:c2:09:9e:00:ce:6f:8d:81:42:5c:
f6:2e:eb:14:e8:ca:ed:3f:02:96:a6:3e:c9:ec:3e:f0:90:a0:
24:0f:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:35 2026 by rpki-client