Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: ENfF+gYxqnHNMNjR36lFWhYGaaK3bPqBI3Qlaenf6go=
Subject key identifier: 1D:5C:7C:03:2E:AA:13:1C:AA:CB:63:BC:C8:5E:D5:19:A4:0E:9C:26
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019FA975C5B966E3E8B20856FBDE3F21F5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 16:01:35 +0000
Manifest this update: Tue 28 Jul 2026 16:01:35 +0000
Manifest next update: Wed 29 Jul 2026 16:01:35 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: ioAUQURyQAGYzRSiSjfZyYl2ul0UFcZ3dnTWbrQgsw4=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:c5:b9:66:e3:e8:b2:08:56:fb:de:3f:21:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jul 28 16:01:35 2026 GMT
Not After : Jul 29 16:01:35 2026 GMT
Subject: CN=1d5c7c032eaa131caacb63bcc85ed519a40e9c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:74:22:61:0f:f4:10:85:a5:45:30:38:25:
24:3c:c3:e3:b3:61:bc:bc:7e:26:ff:ba:ba:d8:6d:
cb:3f:e1:bb:cc:92:1d:e0:5f:3c:3a:1e:ba:47:6e:
c8:95:5b:3d:14:6e:dd:01:28:b9:83:9f:a1:c5:2f:
0f:93:a8:2e:d7:54:f9:c5:a5:fc:02:46:79:7d:83:
2b:5f:3d:66:b9:24:1b:99:d5:de:9a:f8:6f:c1:19:
af:67:ba:5c:77:20:9b:92:11:65:bf:4a:f4:a4:92:
18:6b:08:7f:38:c7:1c:03:5d:08:f9:95:fe:61:6a:
31:4e:1d:63:3a:f4:59:a6:ef:b6:db:02:c0:2d:60:
60:8b:71:77:de:2c:73:f8:f6:f7:1c:83:9a:c2:38:
68:98:dc:e4:d4:c7:35:35:4d:75:41:a0:45:a4:35:
ee:8e:ac:16:40:f9:c7:fb:ce:33:8d:98:c8:04:be:
15:ac:b6:3f:47:1d:37:15:07:f1:30:ae:54:5e:ec:
32:e1:ea:ce:8a:1d:0e:e6:98:22:79:c7:92:39:bc:
b4:16:02:3f:27:87:3a:3f:da:8b:3f:82:03:53:f5:
5c:90:e9:c2:d4:f2:86:0f:6b:d0:03:d0:ea:f3:4b:
f5:b0:13:ef:77:4d:b2:d4:f6:41:72:9e:38:31:9e:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:7C:03:2E:AA:13:1C:AA:CB:63:BC:C8:5E:D5:19:A4:0E:9C:26
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:92:0c:19:bd:0b:47:80:55:94:ac:14:35:27:69:dd:e2:
fa:68:2d:77:86:b3:a8:3d:7a:0f:35:1b:d3:71:91:27:a7:9d:
65:49:30:1e:07:96:8e:bb:78:08:88:2c:4b:ee:f0:75:28:f8:
12:6a:c7:5d:e1:68:77:8f:98:7a:50:14:55:55:d3:20:1a:52:
21:f7:dc:a0:8b:c3:81:22:15:49:a9:34:73:06:f5:11:67:d9:
19:21:75:2b:f8:a0:a3:01:fe:54:2d:8e:63:03:1e:b4:01:c1:
6f:38:93:07:5f:a1:fb:bc:1d:9c:67:40:87:0f:1e:a8:6e:0c:
2c:d8:6b:6b:2c:80:f7:d9:d5:9c:c8:9b:f9:1b:d8:b5:4b:f5:
95:14:f3:66:d5:35:f1:9b:e1:d1:77:c6:e5:68:cd:0a:e2:17:
c6:63:22:a9:f7:41:37:a6:9b:73:70:3c:9a:0c:62:0f:9b:7d:
c2:1f:c6:e5:18:a3:36:60:18:a0:1e:08:c0:22:bd:56:8c:88:
98:5c:3e:e5:c3:39:36:8c:2e:60:e2:39:0e:af:5d:9b:be:c3:
05:7c:42:a1:dc:a4:ee:f1:5f:99:39:10:63:b2:ac:06:ed:d3:
2a:0c:7e:d3:fd:70:dd:8a:8e:a0:6e:fa:45:9e:c8:53:61:75:
30:b0:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:47 2026 by rpki-client