Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: 7trIxm1jE0Ii9Tni+wsoeQc2J4+a/oxsu2hb1TUwmrk=
Subject key identifier: B8:6A:84:F0:B3:23:AE:48:07:52:9D:05:20:B1:CB:7E:9A:73:0F:E8
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019CAD5989C39A926B78687D9FE4FF4CD183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0E20
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: iRp4yafcjis/ngPrvZkXDdFbYzUGXPlDEp5ir7ULALA=)
2: 7bhypKkq_YiwBFbSjFBZ11wqFpY.roa (hash: FLgsBun3WcR/Y/Hs/uzj7VkaiD9LTSEAN6HkmFtXkeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:89:c3:9a:92:6b:78:68:7d:9f:e4:ff:4c:d1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=b86a84f0b323ae4807529d0520b1cb7e9a730fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:44:e3:45:c2:6a:c2:40:dc:5b:6c:d1:96:
35:44:f2:c5:2d:07:c8:aa:de:9e:7f:7b:40:47:71:
55:fa:7a:e2:8e:fc:15:ac:ac:9c:5a:bb:83:27:b9:
72:ba:33:2d:71:6a:1c:20:5c:5d:21:41:31:10:79:
a0:a6:cc:a5:41:05:b3:f9:85:be:4f:b0:1c:10:71:
47:b6:93:65:56:e0:41:35:b3:8c:34:bb:14:ac:04:
e4:d4:1b:13:59:f2:65:5f:76:1f:27:ff:16:e0:56:
39:e7:4f:84:e6:52:48:6c:1b:39:59:08:0e:ed:d7:
84:7a:12:d3:88:c8:35:b9:a7:85:98:a2:dc:7f:4e:
b9:be:93:8f:56:e5:5e:b5:4f:e8:3e:3e:90:a0:a1:
4f:14:2d:50:62:7e:e8:49:44:98:86:db:2b:ae:17:
58:0f:1a:54:14:c6:cc:44:49:f4:24:65:9c:8c:b7:
c4:ed:cd:f0:e0:c3:4d:f0:a5:79:80:03:83:f5:cb:
e2:36:ad:72:76:85:82:5b:fd:22:0c:77:88:70:8b:
87:a2:77:9c:4d:db:9d:20:15:58:d6:cc:ba:bb:eb:
eb:30:7d:76:4e:a9:8d:b2:99:78:fc:ee:5d:65:0c:
19:9d:8a:22:9f:7a:56:b0:ed:56:54:33:6f:c8:3a:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:84:F0:B3:23:AE:48:07:52:9D:05:20:B1:CB:7E:9A:73:0F:E8
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:de:45:e9:0b:19:71:cb:6f:19:78:40:8a:b8:71:a2:57:
02:af:23:c6:24:2d:62:29:5c:81:bf:94:22:a9:8b:d8:33:b8:
35:f8:e5:cf:8e:8b:b9:85:0c:df:09:fe:4e:bb:24:17:65:ba:
cd:24:62:4e:69:77:52:c6:01:49:e5:c9:6f:15:30:d3:5f:f5:
b7:df:58:fe:22:37:d0:08:d9:f5:a1:27:98:15:39:9b:88:3d:
8a:8d:ac:bb:81:f6:5c:8b:26:8d:6e:bc:13:dc:1d:d7:86:cc:
26:04:7e:c1:63:f2:47:bb:33:11:2e:b0:dd:00:d6:38:73:62:
49:a8:e7:06:ca:ce:73:3c:a6:5b:ad:23:a3:3e:44:ec:db:70:
4b:20:0d:0f:32:47:93:f3:1a:06:3e:55:b0:a2:49:98:86:3c:
3f:d0:a1:47:ac:da:df:e6:ae:ee:be:55:45:c4:c5:54:fb:4c:
e4:87:ed:b2:8c:69:99:24:5e:8e:2d:7a:af:77:4e:ae:fb:99:
4c:91:46:82:03:b5:63:2a:08:0a:d8:08:73:04:f8:58:0b:fa:
7b:60:50:dc:55:e3:0d:3d:f3:44:d2:eb:49:50:73:fa:58:4d:
04:ae:0f:d1:57:9d:5b:00:2a:d5:bc:be:c8:86:d9:07:6f:a2:
cc:91:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:45 2026 by rpki-client