
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: vczOF2Qqj0RtROCIcZUMV+gKwr8PDn4cNdqCGmWpjqs=
Subject key identifier: 9B:C8:D8:61:3B:38:18:A9:7E:65:67:DE:92:E4:F4:02:8C:82:0F:D4
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019EBDD9E42E22C4F92D9DC949608AB14618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 22:00:33 +0000
Manifest this update: Fri 12 Jun 2026 22:00:33 +0000
Manifest next update: Sat 13 Jun 2026 22:00:33 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: W4WG+zZPMSlfWeHK+yZAc1g066tQRsZGAxsOROkRCSs=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:e4:2e:22:c4:f9:2d:9d:c9:49:60:8a:b1:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jun 12 22:00:33 2026 GMT
Not After : Jun 13 22:00:33 2026 GMT
Subject: CN=9bc8d8613b3818a97e6567de92e4f4028c820fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:2e:0e:dd:7d:ab:68:32:cf:79:39:a8:bb:
bf:27:dd:51:b2:ed:37:cc:65:5d:5d:f6:db:2d:11:
5e:91:cc:b0:d5:cb:11:ca:a1:a2:3e:50:a4:29:ce:
3c:12:21:f9:20:7a:92:9c:ee:2b:07:46:e0:a0:e2:
af:49:a6:e4:4c:28:63:42:cd:82:19:54:2f:3b:03:
3e:aa:e4:b8:be:68:e7:8f:1f:c9:5c:c8:47:ff:26:
7e:5b:d6:b5:2e:e6:b5:47:0d:7e:96:94:95:26:fa:
0d:f2:9f:ed:bf:5b:71:de:a0:9e:7b:99:d0:24:5f:
b2:e5:56:14:b0:2c:c2:8f:5b:b9:72:43:84:40:90:
83:aa:2c:16:d6:93:77:51:7f:a8:b1:e1:9d:cd:a7:
ea:02:ba:3b:af:44:8d:2e:75:b0:8c:bb:25:90:16:
ba:a7:c2:6c:c9:94:17:1c:24:2c:bd:f5:cb:ff:4a:
e4:46:48:38:5b:5e:be:56:29:88:1b:b7:65:4f:26:
c1:e4:60:8a:f6:45:1e:b5:c4:71:2a:68:cf:83:13:
16:1b:7f:58:ff:9f:24:22:1c:36:82:b4:4d:79:2a:
a9:64:8f:1f:ce:09:bd:8d:2a:55:3d:e5:25:97:5b:
54:61:c7:e3:f6:48:3f:94:97:12:c2:cb:08:6a:9e:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C8:D8:61:3B:38:18:A9:7E:65:67:DE:92:E4:F4:02:8C:82:0F:D4
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:2f:3b:52:d4:7d:3a:b1:e7:cc:1e:fa:03:6b:c2:cb:63:
9b:47:ba:81:d0:fe:0c:da:06:76:9f:82:fc:2d:e4:7d:79:cc:
a1:d0:0f:79:7e:5f:4c:a7:36:b5:5a:19:b9:88:c1:ea:a0:98:
c7:a2:cb:1d:2c:19:3b:71:a8:0b:3e:33:00:1b:a3:17:ec:9f:
6a:ca:64:e1:89:6e:a5:74:55:50:c8:1e:5c:f1:78:41:f8:f6:
1d:70:bf:e7:bd:0f:c1:68:46:37:12:69:bd:6a:e9:25:4e:03:
18:b1:48:6f:ef:74:d0:60:47:1e:27:ce:8e:5e:60:7f:cc:e9:
61:21:e9:d4:85:62:a0:6a:53:60:53:df:ce:e6:ef:64:5a:1f:
5a:7d:39:51:11:7a:72:c8:2e:53:49:ba:ec:5b:03:56:ac:c1:
6f:c9:e3:f6:e9:89:f5:73:0c:a7:f8:c4:4e:95:07:64:86:09:
44:b1:61:86:78:d2:b8:c6:80:fe:74:cc:da:f8:ad:f8:08:53:
c2:f0:b7:74:d7:f5:74:22:d8:be:3f:d2:14:ba:1b:3f:d9:4f:
7c:cd:8b:b6:1d:7a:93:96:1f:a5:39:1f:09:72:e9:45:51:4b:
72:02:59:50:0b:eb:c3:24:d0:02:cd:0a:a8:6c:a4:b2:ec:fb:
5f:d1:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:05 2026 by rpki-client