Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: 49eEV9gIgq8OzcgPn+RHufFG78MfZvv59oMehV1V2ZY=
Subject key identifier: BD:90:A9:08:65:08:95:3B:01:FC:5C:57:36:08:74:0F:2A:DC:79:70
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01A1DF4C997DF4225E5C2237F61820DE4CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 13:01:41 +0000
Manifest this update: Sun 15 Nov 2026 13:01:41 +0000
Manifest next update: Mon 16 Nov 2026 13:01:41 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 5qu8JPyTzoxe0c4QcDqd/7SkL4ycainCq5AgJaGMxPQ=)
2: e5m_nqdKosSzqhulF5N30TVDKIo.roa (hash: 1YFkHyzQNc03KuJoIz1DI1dCLrqvCUz3jG4fnw+3h8o=)
3: vT1tE3z7yuExPnOE0FTG45dMtE0.roa (hash: 9AOoibH9QfFgGRhUHWgerTXqonsNMEqvVTd1AYCvoUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:99:7d:f4:22:5e:5c:22:37:f6:18:20:de:4c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Nov 15 13:01:41 2026 GMT
Not After : Nov 16 13:01:41 2026 GMT
Subject: CN=bd90a9086508953b01fc5c573608740f2adc7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:10:0a:2f:76:ef:7b:08:16:7e:dd:1c:4f:
46:b2:4a:8f:a0:fd:6e:ca:22:6e:57:64:54:c4:2f:
2b:d1:ca:3a:24:8a:17:cb:bf:f1:cb:8c:9a:c1:3e:
df:51:9b:53:a4:0c:3e:0f:69:60:e2:2e:af:4b:1e:
87:8b:f7:8d:88:7f:39:fc:7c:2c:63:bb:d5:92:6d:
15:61:50:f7:c0:2b:0d:85:e4:c6:d4:7d:53:df:d4:
dc:f4:9e:53:6b:40:da:45:8c:36:ad:d8:b7:56:42:
8e:4f:d2:77:3c:5f:e3:a7:20:83:66:9d:bc:75:59:
b1:32:d7:2b:1c:ba:ea:5b:a4:1b:c6:d8:b8:32:2c:
ea:70:8c:e0:93:a6:55:a8:0a:97:f1:ab:d3:56:7f:
f3:d4:3b:7a:d0:48:ac:ae:f9:01:33:6b:dc:ed:53:
7f:88:ca:15:7c:23:f7:a0:47:f3:16:ea:a6:e6:10:
60:40:7e:e6:9e:e6:56:53:22:f4:d3:f8:63:14:54:
1a:15:67:ee:1b:ae:aa:e5:35:ac:4b:07:98:f3:62:
c4:8d:fc:d3:ff:4a:cc:37:bc:2e:34:9f:f2:df:60:
47:43:a2:ba:ba:f9:87:72:fc:ee:4c:1f:86:3e:de:
10:02:d5:ea:9d:15:82:82:da:f6:64:83:ae:9e:de:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:A9:08:65:08:95:3B:01:FC:5C:57:36:08:74:0F:2A:DC:79:70
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3d:52:56:78:29:9c:27:18:46:7a:9f:97:e7:ce:24:46:a3:
35:3d:22:94:41:9b:0f:51:00:63:3c:63:86:62:69:08:6f:53:
3a:1e:d5:4f:2e:c8:3d:4c:36:2a:a6:8a:41:a9:29:81:b0:4f:
66:11:3d:be:63:4a:cb:bd:00:f4:8a:3e:7f:d3:79:dc:87:8e:
48:a6:b0:15:0d:9a:dc:92:d0:05:96:02:5d:e7:f5:03:3c:16:
28:65:27:23:33:29:98:60:b9:eb:6f:33:d6:3c:19:0a:44:37:
b1:1e:c5:e1:a3:eb:ab:02:1b:00:e0:87:09:67:64:f9:b8:04:
c4:38:ea:50:88:f1:2c:ef:03:dd:e4:c7:34:18:ea:76:9e:97:
00:81:28:6d:ba:1c:cf:8d:62:4a:15:29:85:61:eb:28:f3:14:
2d:87:58:38:d5:55:b1:27:bc:4e:51:c1:d8:3f:b9:2d:8e:c6:
8c:0e:9d:f3:4a:3d:80:88:b7:36:b5:15:6b:dd:03:63:1e:cc:
84:37:1c:09:22:a5:83:ec:47:f1:dd:46:d6:ba:05:e3:88:5e:
7c:85:d5:49:b9:e1:6b:76:26:32:8c:0b:16:a9:e4:e7:1c:5f:
3f:f6:b7:ec:ce:03:1d:fe:56:3a:fb:34:c2:c9:f6:22:1f:f8:
bd:97:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:19:42 2026 by rpki-client