Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: T3jWTaYNUMNKR+kkutpna/k+wMIDEQ9HVQD5CcA56Og=
Subject key identifier: AF:21:F6:23:0D:22:FC:80:CD:84:7E:29:B1:0D:CE:01:7D:16:3E:37
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019CAC7E4E3DBBA0AF5D6B920C338B0C9F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:24 +0000
Manifest this update: Mon 02 Mar 2026 03:01:24 +0000
Manifest next update: Tue 03 Mar 2026 03:01:24 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: iZM4ivJMt9i2pjeWXCxx36tK3GXSKEdrkFYImKWKzuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4e:3d:bb:a0:af:5d:6b:92:0c:33:8b:0c:9f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Mar 2 03:01:24 2026 GMT
Not After : Mar 3 03:01:24 2026 GMT
Subject: CN=af21f6230d22fc80cd847e29b10dce017d163e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:41:15:fb:15:1f:d4:aa:30:3b:6e:d7:28:
de:8a:82:bc:12:73:4b:b8:c4:4b:bd:92:11:9b:6b:
79:6c:8e:ad:b8:d9:2b:f4:d2:fd:07:1a:3a:64:76:
5d:94:20:3e:eb:65:57:b6:48:c0:dc:6a:95:93:64:
d0:a5:cf:38:61:bc:ad:22:8c:37:54:46:f2:8a:a3:
aa:b8:28:a8:8c:fa:c1:0f:57:9b:80:55:7c:d9:89:
b5:d4:cc:4e:f9:5e:77:8d:04:f0:c5:c9:b4:ee:4e:
9b:51:91:a6:fe:60:ed:7d:01:a7:49:79:e3:43:7f:
d2:a3:f7:e9:d3:d6:f8:e7:db:eb:4c:93:49:d5:a3:
0d:7e:9b:5a:45:30:7e:08:a6:c6:0a:a4:04:a1:9f:
f4:48:b1:1b:bf:e9:0d:73:a9:c8:00:d1:b8:4d:53:
f0:1b:4d:f3:3f:7b:14:30:16:f7:51:08:1f:c8:9c:
00:f7:13:b8:a6:33:2c:43:ea:09:f6:c8:b1:89:2e:
d1:12:3b:8f:2b:a0:5e:2c:09:ef:64:f7:28:ff:8f:
d7:cc:2c:79:51:b0:e6:66:85:50:71:8e:87:d3:f8:
ab:94:ff:2a:8b:61:c9:2c:57:21:e3:6a:7f:8b:3d:
a2:74:94:39:1f:43:08:6b:7b:f7:be:37:97:41:fb:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:F6:23:0D:22:FC:80:CD:84:7E:29:B1:0D:CE:01:7D:16:3E:37
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e7:e4:15:27:de:6d:7a:58:02:3a:fa:25:6f:3a:22:8f:3c:
2a:a6:b0:13:1b:e1:f7:09:10:e0:9e:98:a4:ec:51:f1:0c:84:
5c:3f:f4:ad:ed:8d:cf:ba:fc:f9:90:61:89:b9:5c:cd:bc:cf:
a5:83:63:de:73:f2:ee:48:6c:1b:9d:8e:31:e7:43:7c:b7:1f:
3c:51:29:bd:97:32:e1:43:5a:d6:84:05:d3:38:71:94:4f:b8:
b6:ca:fc:48:21:1b:87:65:aa:32:c3:5d:11:9d:6c:c3:52:12:
bc:e9:ce:db:9a:64:16:c5:68:aa:74:88:ca:62:7b:4d:ce:fe:
aa:b9:86:83:6d:5b:f8:7d:83:23:8b:e9:bc:ec:68:a8:6b:5d:
d4:f7:f1:67:e8:0a:a0:87:ce:2e:3a:4c:57:b0:60:6a:ab:46:
d9:06:71:67:d1:5d:c0:27:be:3d:dc:80:e0:dd:24:04:35:97:
0c:5f:01:a2:fd:22:1a:13:19:54:13:b1:50:53:e4:17:d6:2d:
33:53:36:23:c7:33:fd:0f:7e:99:ef:06:1f:d4:14:ca:51:88:
dc:4b:a8:09:23:eb:49:e4:7d:ef:65:d3:13:64:e3:a4:d9:df:
cf:c2:43:c8:db:5b:e1:11:f0:5a:18:76:ea:e3:95:11:c3:63:
2e:93:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:18 2026 by rpki-client