Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: rVMgf2lltqjeLMcsYd54Cjvs6AnK0hgEHlwtS4pDm0E=
Subject key identifier: 34:C3:A7:F0:69:42:57:D3:58:BD:E7:27:3A:83:BE:DF:39:2A:F8:4A
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A0C557610BC787DA14C7EA695A8EE74A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 19:00:33 +0000
Manifest this update: Mon 21 Sep 2026 19:00:33 +0000
Manifest next update: Tue 22 Sep 2026 19:00:33 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: C1V6B4fY5O97lm440tgWwOKi2qmSBoDCPWQPSa9BpZA=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:61:0b:c7:87:da:14:c7:ea:69:5a:8e:e7:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Sep 21 19:00:33 2026 GMT
Not After : Sep 22 19:00:33 2026 GMT
Subject: CN=34c3a7f0694257d358bde7273a83bedf392af84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:90:5b:e8:4b:fd:65:47:7f:22:23:0f:c5:
42:a8:3e:3e:d3:8a:79:c4:13:6e:ee:26:13:a7:e5:
03:ff:f9:74:fe:07:70:c0:ce:75:d1:cc:8a:3c:1b:
a1:de:f1:68:ce:6a:a8:72:b0:5f:92:78:61:30:b1:
03:ba:d8:a3:60:e3:9b:28:4d:aa:09:c8:c3:4b:6e:
5c:45:68:74:2a:fb:a0:96:99:a3:b6:72:1b:3e:b9:
d8:14:d2:ad:8c:5d:c6:12:91:c0:3e:9f:cd:f5:17:
8e:df:80:7d:64:8e:e2:bd:f9:23:82:d6:cd:37:6b:
8c:24:41:f2:32:20:19:2b:2b:9c:a5:1a:f7:30:ae:
80:94:f0:51:72:fc:76:86:a1:fa:0c:08:2c:dd:e2:
12:d4:2f:59:39:f7:d5:b7:8b:67:3f:84:0e:56:db:
de:35:87:b0:05:05:09:b7:f7:0e:bf:57:31:15:8f:
c1:0a:b5:3c:0e:b2:f5:af:7f:94:0f:d5:9e:fa:bf:
b6:68:fa:7e:93:04:a5:6a:e4:77:b9:57:4b:ba:8d:
6a:12:fe:35:c6:5a:3d:e7:d8:a1:41:cf:9c:bf:81:
db:4a:c5:9c:fb:3b:ef:d6:ca:bf:9f:f5:e4:28:9d:
46:fa:fe:d2:8b:30:d3:9a:59:67:34:ae:91:9b:3a:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:A7:F0:69:42:57:D3:58:BD:E7:27:3A:83:BE:DF:39:2A:F8:4A
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e1:6d:77:01:46:5e:61:d9:63:67:be:86:27:67:34:d4:fa:
0e:02:c5:dd:f4:1d:1e:ce:83:c5:0a:5a:43:43:46:5c:65:1b:
0b:b2:43:33:3a:f3:c0:27:24:93:7e:d1:8a:ee:03:b4:b4:d7:
3a:29:f9:a5:3b:91:0a:d6:83:3b:d5:24:6b:32:cc:70:59:07:
a2:cd:d0:dd:5a:de:92:b3:64:6d:f2:73:f0:6b:3c:f1:ff:84:
b3:c4:4e:7e:a9:16:06:0d:31:4f:ad:6a:39:1d:ce:8e:61:fb:
ae:ea:b5:00:7c:5a:12:01:09:d6:9a:fb:7c:55:ea:65:f4:95:
f8:ab:ba:99:a0:3d:92:b5:5f:6d:33:fb:16:1c:5e:6c:23:2e:
6f:25:34:53:09:e8:51:7e:03:35:8d:8f:8d:7a:b4:42:d8:8e:
3f:b4:51:ff:f4:0a:11:a0:2b:96:f2:6e:3b:e4:cd:1c:fc:9e:
88:58:a1:55:b0:4b:9a:18:ad:90:66:aa:4d:5f:7d:6a:74:8a:
df:1b:94:c9:28:15:78:1f:9f:46:5b:69:33:cb:2e:3b:4d:ab:
c7:06:e9:e9:58:21:ad:89:85:36:07:65:74:cd:10:ef:35:68:
d1:41:32:e8:89:82:14:fa:bd:d7:f6:56:45:21:c7:55:7f:f5:
72:a4:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:30 2026 by rpki-client