Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
File: 2Jf66pSBXgUgtG8YXD6-wps3bvA.mft (raw, json)
Hash identifier: PCxOmO8HndCoYgSKIQYFW932tKI83nLBxWs7UIQHnSU=
Subject key identifier: 32:36:DD:E7:59:7A:F6:E9:07:0A:41:5E:A1:94:F8:D8:45:44:40:66
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 019D98BD3AD23BDC5DDB6A1EAB5228237A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
Manifest number: 0F68
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: 2Jf66pSBXgUgtG8YXD6-wps3bvA.crl (hash: fqKFi91O7b7xm2lJZ92qN2IsLhClJa73u9NV7hYkWiA=)
2: GJE_tPOgXeLJ3DgOojgp5O691hA.roa (hash: 4D2iI83061LtWXrvOvTMbMz1c4sOHyfoyv2X47hDDUo=)
3: PIER6XCYCxthUakxWv-c4X999-4.roa (hash: aFXr3MnR3gymMlu+fiuuP0AS3tEEg0TArF5MnDX4EOI=)
4: zTdnnLc0QIacm1YbtJWIsiovLTw.roa (hash: kSnRCK8ElhlM0eULOEc3cJ4DBP5BQZF3/MbAm+M0XF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:3a:d2:3b:dc:5d:db:6a:1e:ab:52:28:23:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=3236dde7597af6e9070a415ea194f8d845444066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:52:e9:44:fe:08:62:68:e7:3b:80:cd:80:
90:c0:99:03:0d:53:b5:a6:b0:80:2a:50:bc:4a:6e:
71:e9:7c:1c:46:b5:37:fd:6e:58:f3:8e:36:97:d0:
d3:9d:94:ff:2a:7a:27:19:c3:a4:62:d5:e7:61:9f:
aa:01:5c:f9:c9:03:79:ac:e7:f9:71:fb:6e:a0:ac:
cb:40:23:3f:a1:68:24:c7:44:8a:6a:55:b3:20:c9:
0d:23:f4:91:4b:f2:f1:27:44:cc:d0:c2:56:cd:b1:
39:92:8a:de:c0:e3:a9:9d:9e:72:cb:3b:6c:85:c3:
b8:f1:e8:bb:8d:20:3d:46:13:b5:c3:f2:36:f2:29:
57:f3:4b:2d:0a:54:2a:bb:42:57:b1:2d:21:55:c4:
20:4a:94:74:89:13:3d:b9:68:c0:d7:85:72:c5:0a:
01:35:7f:ef:e7:87:0c:bb:47:61:de:e1:8e:10:48:
34:7e:ce:86:35:03:c0:a2:8c:c1:3b:6e:52:6b:60:
d7:e2:b3:09:fd:57:85:38:5d:5d:1d:b9:8b:7b:bd:
e7:f5:3d:da:f7:11:b6:db:7f:b4:4a:dd:89:43:d3:
2f:e9:45:2d:02:8c:4d:c7:09:33:dc:4c:f7:7e:57:
89:b4:16:2d:83:5c:f1:0b:1b:e2:0e:22:35:a2:67:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:DD:E7:59:7A:F6:E9:07:0A:41:5E:A1:94:F8:D8:45:44:40:66
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:82:91:2c:10:c3:f2:74:ee:74:b6:07:54:51:f9:be:6e:
17:bc:ff:67:2b:94:7c:63:e5:d7:c4:1f:98:49:e0:c9:cb:29:
b5:21:cd:b5:a0:83:5b:cc:83:7d:60:81:b6:12:6a:23:75:b0:
9f:52:29:dd:5c:7e:63:f2:e1:86:b4:3f:7b:b8:bf:2f:e8:34:
f9:c0:fe:d3:15:11:cd:94:ef:6b:59:ab:47:a7:3b:f4:44:3d:
c3:ff:9c:d0:c6:93:79:b5:06:35:3a:5c:66:d8:35:58:1a:e7:
3f:9f:8b:e0:64:62:3c:8d:31:b1:b3:91:3f:7b:5e:56:c2:3a:
95:a2:3b:32:8e:aa:18:0c:05:98:29:27:c2:f7:5b:07:30:13:
18:f3:8a:f6:22:8a:9c:77:5e:11:61:cb:6e:18:55:aa:8f:87:
66:2b:2c:9c:83:01:2a:d9:1c:f3:cc:f5:4c:d2:48:e9:14:e7:
6a:a1:cb:29:06:33:9f:19:df:f7:83:f4:1c:a2:ca:92:36:e2:
7b:47:77:5d:44:44:ea:5f:0e:77:c4:be:2c:0a:13:84:d3:59:
af:4d:d5:84:e0:36:48:5f:d4:88:7b:64:a3:34:b7:46:fa:d1:
94:a0:a9:c0:52:b3:78:5a:1c:95:b4:76:4a:8c:4f:f0:fc:9a:
af:e6:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:19 2026 by rpki-client