Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: IlB5RjO1kdrxhP2KbAjCUcYIz6K2lDDGso6Muk/SPUw=
Subject key identifier: 03:F3:28:29:9F:EE:9F:DA:A5:FE:12:40:A9:47:8A:14:2D:F3:60:64
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019CAAFD181401535810CD9032552EC02969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 07CA
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: o5KApZYsX7ThHoB7Of3JYGwDAmgffE6UELpmrF7hb+I=)
2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:18:14:01:53:58:10:cd:90:32:55:2e:c0:29:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=03f328299fee9fdaa5fe1240a9478a142df36064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:47:a9:28:f2:fd:12:b0:10:d6:70:30:95:
fb:3c:9c:26:26:0d:55:28:19:1b:63:8e:9e:06:9c:
b1:37:ce:08:17:4a:b0:e5:cd:68:f8:4c:f4:a0:ba:
73:b5:e0:83:8a:c3:98:49:0e:54:21:f5:1f:2e:1a:
5a:d1:37:e3:33:d3:f3:b6:ab:6d:f4:bf:6e:6b:2e:
a3:6b:b4:97:66:b0:25:fc:c2:9d:c7:13:2d:9a:d2:
4f:14:b8:32:cc:28:f8:84:d6:a4:85:7c:b2:8b:9e:
11:0f:2c:ee:d0:c9:f1:c2:df:e3:30:af:b1:ad:2f:
63:37:af:4e:34:98:59:83:af:11:61:38:20:5c:30:
16:fa:f3:e1:86:46:f2:47:df:89:df:44:c3:d3:09:
98:93:45:cf:45:1e:bb:d6:ac:0a:f5:46:ef:60:9a:
a7:0b:b5:3f:0b:e3:85:d0:77:29:59:a9:16:e7:25:
f0:f8:7e:36:d1:25:be:49:e8:1a:11:01:a1:22:bc:
f6:d8:a4:3f:30:1a:1c:55:ee:22:69:71:3c:a2:44:
fd:14:86:c2:34:92:d9:a1:f7:b3:e3:27:89:72:2e:
c0:54:4f:05:ba:fd:d8:40:f8:44:54:ad:d0:43:ad:
b3:ca:49:fc:95:28:50:e5:49:8e:be:3c:ce:84:22:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:28:29:9F:EE:9F:DA:A5:FE:12:40:A9:47:8A:14:2D:F3:60:64
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cd:da:71:58:c3:35:25:0a:9c:4c:4a:c6:c1:c2:3d:8f:62:
6a:b2:47:79:b7:e3:57:1c:7d:c3:a6:22:9f:8e:88:a2:96:82:
f0:99:eb:df:2d:cf:1a:58:14:7c:9f:85:5a:38:94:b2:50:d3:
ff:2c:05:2c:45:b3:1a:91:18:c0:7e:ea:12:74:80:75:c3:41:
c2:94:8e:87:b5:c9:90:2d:a6:f3:1a:50:00:2e:0e:d3:d6:ee:
c5:14:11:f4:89:a5:54:b6:68:53:a7:18:30:8a:6f:93:d2:22:
d7:55:49:a3:37:18:47:9e:74:64:23:3c:dc:11:48:ad:37:6e:
82:cd:ea:b5:be:65:f7:fa:6c:15:ec:de:15:2a:58:8a:c8:fb:
e8:e3:60:91:b8:c8:61:dc:17:6d:9a:fc:7f:16:13:8a:e4:47:
55:d3:98:86:2f:d5:b9:c3:de:f4:ab:13:87:42:c1:f4:bc:43:
67:f8:48:14:c7:8a:f7:a6:47:08:e0:f4:9d:8e:75:78:a1:77:
a3:a8:07:19:af:fa:ce:cd:ca:01:32:ee:9e:ea:3c:85:5d:56:
22:b3:36:05:e6:fe:4e:db:88:af:b1:06:6d:8e:0b:b3:cb:ea:
01:e6:c3:2f:96:00:d5:b8:27:07:d6:07:da:ef:39:9a:95:9c:
a5:a8:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:37 2026 by rpki-client