Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: jff8tGfgrWHbO1076qGSfGE2ExYhGKS2n12xyEp6dNQ=
Subject key identifier: 77:A9:5C:32:47:3E:F5:C1:94:5F:01:61:00:E0:71:4F:8E:93:FF:0C
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019CAAC6C1F8AED26F93794267A311AA9EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 3drNYsIE1o+jZ+ija/boRSZy7/Ccj+gfazeIN8D69Og=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c1:f8:ae:d2:6f:93:79:42:67:a3:11:aa:9e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=77a95c32473ef5c1945f016100e0714f8e93ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:2b:bf:5f:6f:61:93:f3:1b:2d:db:5e:f9:
53:d9:9e:41:67:f3:cc:a1:ca:3e:c6:7d:3a:bd:df:
33:db:33:92:ed:24:04:5b:b4:28:e7:ae:59:79:e9:
07:f1:9b:f2:a0:33:aa:c5:8e:92:ce:99:aa:c9:a2:
58:a5:4c:49:bd:8f:10:53:40:6a:29:c9:2e:69:4b:
cd:0f:7c:3d:93:70:ca:0b:b8:e9:00:54:4d:67:0d:
41:14:7a:88:c5:e8:e7:34:c6:b3:37:db:5d:1e:46:
d7:95:a3:17:4c:a6:0e:63:79:aa:86:29:7a:64:79:
e3:c7:c0:5f:4d:30:50:11:ea:2d:98:d6:1f:ae:f7:
53:9e:25:71:b0:b0:4d:75:0b:8e:c1:15:18:a9:05:
1d:af:df:c6:30:e3:38:ae:2f:66:af:98:f4:69:4d:
1d:9d:46:27:64:f5:6d:33:a0:44:d3:c9:81:67:01:
b5:44:82:30:93:30:90:69:ba:44:2c:b3:4c:75:d8:
f5:59:13:29:e7:c4:96:73:fa:01:8a:ba:9a:eb:97:
14:38:a9:dd:86:60:bc:21:80:48:92:99:8f:11:8b:
88:f7:ad:5c:d8:45:16:da:1e:27:75:51:39:7c:c8:
c7:51:ed:e7:08:72:13:71:15:ad:78:b1:81:2b:ed:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:5C:32:47:3E:F5:C1:94:5F:01:61:00:E0:71:4F:8E:93:FF:0C
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:13:e1:11:96:be:05:9c:ed:23:02:58:92:83:a5:aa:40:31:
98:27:eb:ee:3e:d5:11:68:58:78:e8:d0:5a:91:3c:65:23:f3:
8e:d3:b8:75:c2:84:c1:31:42:cf:4e:dd:93:27:f5:74:15:2b:
f3:f4:c9:6f:13:c6:6c:89:fd:a5:38:c1:e9:17:92:8f:89:2a:
d9:e3:b9:e7:30:15:50:00:6a:43:ae:b3:e3:fc:49:54:07:aa:
0d:04:10:92:80:0a:78:ed:50:15:21:a9:5d:b2:85:2a:65:79:
e5:6d:69:e4:b8:9e:24:67:9f:86:93:ce:44:22:1b:66:0e:13:
f6:ac:8e:cb:fb:37:c2:91:29:b1:11:33:29:e7:6c:74:78:10:
51:df:ba:38:b2:a8:06:f7:23:e1:34:be:3c:e6:d7:4f:d6:52:
1d:b4:b4:35:7a:fc:0b:69:12:1e:79:11:a8:5f:92:ac:be:05:
5d:cd:6a:dc:2b:9c:19:5d:09:5c:86:b2:a2:95:b8:33:28:e4:
4f:86:7b:50:61:66:58:5d:6b:e9:1e:cb:a7:ee:54:75:cf:79:
6f:1d:4c:66:ec:16:cc:f5:2b:6c:cf:3e:cb:91:c1:48:6c:96:
2f:21:b4:12:f6:3f:e7:20:0a:d7:36:5a:b9:b9:da:1b:4c:f7:
30:e2:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:07 2026 by rpki-client