Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: RDHz5rMJUhs84FuQI0/KheQ4rCE5tTM+WrRuyEhqvA0=
Subject key identifier: EA:5C:13:DD:23:D0:D1:ED:CA:AA:27:5B:D8:E0:FC:C8:D2:8E:8E:4B
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019D9AE293CBBDCBE523B13FF8233477F53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0E9B
Signing time: Fri 17 Apr 2026 10:00:33 +0000
Manifest this update: Fri 17 Apr 2026 10:00:33 +0000
Manifest next update: Sat 18 Apr 2026 10:00:33 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: k/3jC63S1JEZUJQTKHpnQQ5dk8cCn2Wj0lXiflzKCww=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:93:cb:bd:cb:e5:23:b1:3f:f8:23:34:77:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Apr 17 10:00:33 2026 GMT
Not After : Apr 18 10:00:33 2026 GMT
Subject: CN=ea5c13dd23d0d1edcaaa275bd8e0fcc8d28e8e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:af:68:e2:ba:a6:21:aa:63:be:a6:93:fb:
01:05:f0:5b:15:fa:66:14:e6:33:22:f4:42:53:d1:
9e:8c:74:d9:a2:87:33:f8:15:ae:49:82:20:89:76:
37:f7:a7:c1:ab:da:a9:32:12:af:9f:76:e3:31:d3:
ed:97:ad:b0:67:37:d5:23:eb:49:68:7e:9c:32:56:
8a:b1:9a:88:cd:27:50:4f:22:3c:b1:f6:f2:ed:58:
e2:d2:e6:53:84:37:0b:2e:f2:40:37:af:8e:6b:a4:
fe:2b:1f:1f:66:cd:1f:f0:1d:a8:29:e5:96:f0:6c:
99:27:27:17:cf:f8:4d:76:03:b4:90:19:a8:bb:f8:
fc:4b:f1:35:64:07:10:ff:42:e6:b9:37:a7:be:6b:
7c:ed:33:7c:f4:f0:d8:5d:97:04:29:ab:77:54:68:
f3:1f:ce:90:a4:82:86:43:83:89:e5:5d:a3:72:81:
9c:93:39:03:09:8d:8e:8d:79:40:72:07:2d:55:dd:
87:21:53:63:d8:ea:87:f2:e3:17:c7:01:ee:fa:ac:
9f:7f:fa:dc:d5:7f:4d:ab:3b:a2:ee:a0:c3:8c:4c:
b8:87:1f:ff:38:67:5d:0a:c7:2f:ac:1f:67:10:77:
d3:70:ad:bb:4d:f0:9f:6e:17:d0:98:14:e6:b4:cb:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:13:DD:23:D0:D1:ED:CA:AA:27:5B:D8:E0:FC:C8:D2:8E:8E:4B
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:a8:61:98:e6:01:05:cb:14:f5:4d:7e:fe:dc:7b:84:7c:
73:fc:fa:d0:0e:05:2c:ad:c8:c0:f0:04:30:b5:62:c0:33:b8:
42:eb:a3:28:23:1a:bb:75:fb:d2:84:cc:84:a8:3c:f9:f4:08:
92:9a:c5:68:e0:ff:2b:7a:bd:fb:b3:e5:a0:f6:6b:54:ac:f5:
ad:31:a5:aa:31:3d:01:56:6d:b6:aa:d8:40:23:48:d0:cd:be:
8c:72:64:cc:1a:5d:84:a2:a9:54:5f:ac:15:c4:35:3a:e6:d0:
bd:8e:ca:e4:ec:b4:7b:a6:3b:1e:50:0f:5e:26:da:81:b4:d9:
52:ad:bc:9c:6e:99:82:2c:15:4a:3e:2c:bf:68:64:9d:84:10:
4c:86:b6:3c:5c:0e:61:f3:87:13:14:9e:3e:69:3f:73:10:26:
c3:f2:a3:e4:3f:a8:bb:32:87:15:b6:bc:dd:87:f9:ae:88:f9:
ef:bd:e2:85:6c:b8:39:ba:80:de:85:40:51:4c:23:89:a6:d5:
cf:29:74:a0:b0:3e:5c:ca:da:9e:21:69:36:c8:a5:d4:b3:e7:
ba:40:2d:4f:92:c9:a7:00:4a:ee:7d:94:34:05:5c:c4:da:94:
b3:ef:04:84:c5:77:da:e7:98:1f:fe:96:c3:35:c1:8b:9f:2f:
de:d2:42:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4pPLvcvlI7E/+CM0d/U9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjYwNDE3MTAwMDMzWhcNMjYwNDE4MTAwMDMzWjAzMTEwLwYDVQQD
EyhlYTVjMTNkZDIzZDBkMWVkY2FhYTI3NWJkOGUwZmNjOGQyOGU4ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxivaOK6piGqY76mk/sBBfBbFfpm
FOYzIvRCU9GejHTZoocz+BWuSYIgiXY396fBq9qpMhKvn3bjMdPtl62wZzfVI+tJ
aH6cMlaKsZqIzSdQTyI8sfby7Vji0uZThDcLLvJAN6+Oa6T+Kx8fZs0f8B2oKeWW
8GyZJycXz/hNdgO0kBmou/j8S/E1ZAcQ/0LmuTenvmt87TN89PDYXZcEKat3VGjz
H86QpIKGQ4OJ5V2jcoGckzkDCY2OjXlAcgctVd2HIVNj2OqH8uMXxwHu+qyff/rc
1X9Nqzui7qDDjEy4hx//OGddCscvrB9nEHfTcK27TfCfbhfQmBTmtMuf4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpcE90j0NHtyqonW9jg/MjSjo5LMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcSoYZjm
AQXLFPVNfv7ce4R8c/z60A4FLK3IwPAEMLViwDO4QuujKCMau3X70oTMhKg8+fQI
kprFaOD/K3q9+7PloPZrVKz1rTGlqjE9AVZttqrYQCNI0M2+jHJkzBpdhKKpVF+s
FcQ1OubQvY7K5Oy0e6Y7HlAPXibagbTZUq28nG6ZgiwVSj4sv2hknYQQTIa2PFwO
YfOHExSePmk/cxAmw/Kj5D+ouzKHFba83Yf5roj5773ihWy4ObqA3oVAUUwjiabV
zyl0oLA+XMraniFpNsil1LPnukAtT5LJpwBK7n2UNAVcxNqUs+8EhMV32ueYH/6W
wzXBi58v3tJChA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:03 2026 by rpki-client