Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: Bb4Hqy0fczImexZh1fKst1GHNj52iOt+z8Nhedpvc9o=
Subject key identifier: FF:B5:77:CE:6B:C9:52:B5:BF:2C:8D:87:0D:98:E0:CB:09:60:2E:EA
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019FAA1AC36FC0D3AF6284F6C28A9592D518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0FAC
Signing time: Tue 28 Jul 2026 19:01:48 +0000
Manifest this update: Tue 28 Jul 2026 19:01:48 +0000
Manifest next update: Wed 29 Jul 2026 19:01:48 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: zcrAa9AIL4FDLqzgNqOI46Mryil5LIXDV+pCtaDgkA0=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:c3:6f:c0:d3:af:62:84:f6:c2:8a:95:92:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Jul 28 19:01:48 2026 GMT
Not After : Jul 29 19:01:48 2026 GMT
Subject: CN=ffb577ce6bc952b5bf2c8d870d98e0cb09602eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:78:89:b5:b6:da:ef:eb:9b:99:6d:c0:93:
bb:ab:b1:05:c3:4b:96:75:30:e0:bf:05:1a:cc:07:
79:f7:85:b9:9e:69:10:ed:c7:d3:02:15:ba:1d:77:
13:5b:35:00:71:35:54:fd:5e:4d:cf:b5:25:e1:9d:
15:d3:44:73:54:92:fa:5b:b5:8f:cc:5e:d1:17:d7:
79:fe:df:fe:40:6d:bd:af:6c:73:55:a7:57:3a:c0:
d4:0f:7f:66:be:fd:26:36:c7:6f:bf:29:f4:63:14:
d9:73:9a:a1:6d:6f:06:b9:b3:af:73:08:2a:90:ce:
d7:1e:28:3f:81:4e:b2:a4:55:71:31:7e:0c:d9:1d:
f0:25:92:2a:cc:5a:6e:a9:df:15:17:bc:99:19:a9:
2f:be:aa:1c:eb:a3:16:82:f0:b1:fd:91:26:8b:ad:
14:f5:7f:ae:ad:d8:74:75:dc:a7:a8:48:53:fe:5f:
c3:d6:7b:0e:11:2d:c6:b6:4a:96:7c:44:c5:e5:62:
3b:df:20:10:d8:5b:87:42:83:b8:ef:10:8f:83:f4:
82:a7:6a:51:3e:76:ad:d4:02:32:06:f0:b9:7e:41:
3e:ba:48:31:74:8a:71:a2:33:fe:13:35:9e:74:c5:
94:19:8a:e2:7d:6c:d6:60:84:f4:52:0f:21:9e:b0:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:77:CE:6B:C9:52:B5:BF:2C:8D:87:0D:98:E0:CB:09:60:2E:EA
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0c:2b:1b:c8:62:db:cd:46:4a:e4:80:aa:90:bf:af:3c:7d:
7b:4c:eb:1d:8e:1e:9c:64:97:6c:48:17:7c:ca:dd:00:f7:92:
95:b9:f3:48:9a:a6:31:d8:c7:d7:5d:60:b0:96:83:99:c6:f2:
11:bc:84:13:86:0a:07:06:50:50:c4:e0:05:11:a2:b7:c8:13:
f4:2a:de:d8:8f:4c:f1:50:8d:fb:92:bc:6b:27:1c:30:39:e4:
51:de:16:56:95:1e:57:98:4b:d4:7d:8f:c6:91:b7:ad:f9:7f:
42:ab:55:7a:41:df:4d:8e:3f:87:52:2c:fb:72:bf:bb:9b:2b:
ae:29:cb:c1:03:96:4d:8b:3a:36:c3:ee:ea:f3:02:a6:32:b1:
5d:22:4b:76:5f:a1:6c:1f:24:49:bd:f7:42:ff:42:9d:79:9f:
70:f4:30:ba:74:04:a7:75:13:1d:5a:18:28:78:93:1a:ad:fb:
3d:a7:5f:14:00:0a:43:17:e3:f6:5f:a5:27:3d:02:f2:ea:3f:
a4:06:4c:68:ed:34:0e:dc:02:14:b3:5f:e8:6b:2a:17:10:14:
8e:fa:47:e8:41:f0:fe:e5:6f:52:32:69:b6:dd:2d:fe:d7:58:
d8:97:98:77:e8:5d:0a:fe:37:c6:53:b3:1e:c1:f7:01:00:cf:
b7:49:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:30 2026 by rpki-client