Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: bwI7m6Q5W5TXQcj+org8SvXs/3Ag8CagGW40kNzDea0=
Subject key identifier: 5A:7A:24:AD:C2:47:0F:F3:14:4B:D2:B8:C7:15:82:D2:11:5A:54:F1
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019D9A749AED0B427E849CC27D4BD718AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0846
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: oVsLeVtPZZWuK0wJaIsVuJf6d4y2+atu08Ul8fPiVyE=)
2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9a:ed:0b:42:7e:84:9c:c2:7d:4b:d7:18:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=5a7a24adc2470ff3144bd2b8c71582d2115a54f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:a5:b6:94:4b:da:2c:d8:03:bd:aa:3f:0c:
22:16:84:63:97:14:82:2c:6c:6d:79:3c:2c:06:ad:
de:d4:99:64:52:a8:9b:70:8e:9d:68:76:6a:6d:96:
f9:21:76:22:49:e0:f5:63:3f:4b:6d:f2:59:ef:2d:
63:b2:b6:cf:c0:5f:15:28:24:94:c9:ab:f1:47:34:
f9:b2:c4:44:b6:1a:a4:f2:bf:e3:66:aa:2c:33:42:
17:22:73:7b:dc:fb:c3:59:51:d3:4c:4e:61:b9:9a:
24:e5:ac:de:36:c6:38:ff:c0:a6:b3:68:8d:91:11:
fd:2c:c7:cb:47:56:2c:cc:03:eb:bd:5d:bc:a0:cf:
49:64:24:07:f9:a8:64:41:7b:7d:8a:e6:a9:47:a8:
b3:5b:c9:79:8a:10:8b:df:24:7e:53:f0:5c:dd:51:
2c:ca:8f:95:76:fa:ba:c8:40:2b:d2:76:8e:54:47:
7f:7b:54:e8:eb:df:5d:0b:8b:cb:35:72:55:4f:e6:
52:b5:04:7f:48:86:23:41:38:d9:c8:6e:09:43:43:
4e:c8:90:29:a2:9b:e5:e4:90:ce:16:5a:14:79:df:
94:c2:b3:30:1c:2a:49:03:a7:7a:7d:bb:62:82:18:
4e:af:d1:7a:e8:d7:ab:9a:0b:a8:4c:8b:53:87:78:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:24:AD:C2:47:0F:F3:14:4B:D2:B8:C7:15:82:D2:11:5A:54:F1
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f2:20:e4:2b:66:dc:61:7c:8a:c6:25:ed:63:a6:de:b3:64:
2c:80:83:51:ad:59:78:f5:cf:39:4a:42:50:82:cc:d3:2a:00:
98:6e:d5:d9:13:76:7f:f6:74:f0:df:72:27:4b:97:0b:92:6f:
50:bc:3d:50:6d:e5:dc:ee:d2:0b:55:55:2e:a2:30:57:a6:10:
ee:71:8e:18:4d:85:be:c1:f3:24:af:c6:f7:d8:96:9a:c9:5b:
42:da:c6:63:fa:fe:09:33:8d:e7:c9:68:49:e4:bc:8b:33:f3:
a8:32:3f:39:be:68:6b:1a:86:8e:9c:c7:50:6d:78:30:5a:f9:
73:c2:40:fe:5a:d9:2c:8f:69:64:8d:c0:90:8c:f0:f3:05:d1:
ad:69:d8:6b:59:b3:78:c2:9e:c3:7f:8f:98:41:6f:fc:7f:ec:
b4:22:05:fe:86:d7:ef:47:64:5e:5d:ce:9c:32:31:df:ae:5a:
85:d0:4d:ce:78:cf:1e:64:44:95:06:65:95:1e:68:58:75:04:
30:3a:d9:93:88:89:93:9c:c7:ac:54:03:64:db:12:30:3c:b9:
28:67:89:2c:05:dc:21:a4:18:b9:be:6b:52:fa:87:40:e0:0b:
66:ab:93:1b:21:42:8a:4f:fe:db:4b:ec:1e:c1:fc:e0:44:f5:
69:76:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:37 2026 by rpki-client