Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: XrYnfxppkMMBLcRAHSYnCimYlrs8JKbhwRfjFMCDhs8=
Subject key identifier: A0:2E:D5:08:57:0C:C5:E9:56:AA:7D:45:EB:CE:57:F2:05:32:EC:01
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019EBF91030E8EE90345A5CD8314D922B198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0FE6
Signing time: Sat 13 Jun 2026 06:00:12 +0000
Manifest this update: Sat 13 Jun 2026 06:00:12 +0000
Manifest next update: Sun 14 Jun 2026 06:00:12 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: /TpmLDN2kNyooWO4+A2Tb9MU2dxOEVINJRED+uBLa9Q=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:03:0e:8e:e9:03:45:a5:cd:83:14:d9:22:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jun 13 06:00:12 2026 GMT
Not After : Jun 14 06:00:12 2026 GMT
Subject: CN=a02ed508570cc5e956aa7d45ebce57f20532ec01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:72:18:bf:dc:f4:39:75:6a:35:db:a7:d4:
69:01:a7:5d:aa:6e:96:8e:e3:6e:d2:ee:69:01:ea:
5e:b1:23:aa:55:7d:c1:c8:82:b6:cf:e8:a0:50:01:
59:3a:20:8b:77:4b:11:63:54:e3:9c:d8:04:4b:6b:
21:01:23:8b:d3:ff:cf:4e:cd:dc:27:81:6f:cc:2f:
06:82:da:23:9a:8a:a3:4c:4e:a5:55:d7:6e:f7:18:
e0:76:b3:54:80:c1:c7:bd:64:e4:41:9e:1d:22:99:
64:9f:53:72:3d:cc:86:27:34:34:cb:ff:b0:4c:2c:
60:65:30:00:4f:36:bd:72:6f:c7:97:5c:30:31:41:
94:2f:47:32:a9:21:3a:12:f2:25:03:46:18:f8:41:
46:ad:cc:30:c9:5f:12:50:8e:cc:9a:c4:ca:3d:fe:
04:87:03:a1:16:a4:21:6e:7c:a0:75:da:4a:b6:25:
a5:8b:13:11:d9:90:e5:af:c0:db:4d:97:d8:60:9a:
c1:7b:96:c8:6a:54:07:a7:65:b8:3d:f6:f6:fb:af:
80:35:1c:c4:54:13:98:15:18:1d:48:14:4a:5a:86:
38:f9:13:4c:ba:db:4b:1c:90:66:65:89:5b:6c:35:
3c:3f:39:40:8a:d9:67:bf:6b:97:0f:f7:81:6f:fc:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:D5:08:57:0C:C5:E9:56:AA:7D:45:EB:CE:57:F2:05:32:EC:01
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ac:3f:05:3d:00:70:b9:00:5a:b7:04:91:40:c2:ab:7c:e2:
e3:b2:17:74:8f:64:86:8a:a2:76:5c:89:b3:91:97:57:1d:aa:
76:41:5e:64:d2:61:09:fe:17:c6:39:e3:c1:25:ab:5a:b9:ab:
41:3f:d0:ff:63:be:e9:3b:0f:5d:d7:a8:d9:f7:40:6e:21:56:
75:f2:a6:9b:c8:cf:51:4d:8f:8f:e4:a1:d2:85:9a:ea:93:0e:
be:e2:d6:de:a3:10:d2:c0:88:7b:c7:58:80:17:10:bd:cd:f5:
f2:c6:ef:9f:b5:ee:77:10:c1:09:c7:2b:01:ad:b9:d6:65:8b:
d8:02:4b:d4:31:8b:d9:aa:77:d5:7e:8d:fa:bb:99:e1:d9:dd:
74:4e:51:d2:27:1b:b4:2f:d9:26:f4:29:0e:21:e1:c5:25:5c:
63:fa:ed:2c:f4:c2:d0:65:6d:c8:a7:0d:0b:57:61:a6:3a:b3:
dc:22:79:99:c2:7e:3f:52:dd:b8:97:34:32:c0:b8:6d:35:2b:
ee:07:ca:b8:9f:d8:b6:83:c7:d7:c6:2f:f9:79:67:24:5b:26:
63:6a:4a:16:94:6c:6c:84:36:0d:7e:3e:29:76:99:7a:55:3d:
67:40:02:bb:7e:df:f0:77:07:eb:13:7a:cc:b1:33:62:f8:73:
97:4b:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:48 2026 by rpki-client