Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: eAzPh06y1LPwOWwoXeWhqz+qeATjZDWeEaJbuIXY+Ug=
Subject key identifier: 49:68:F2:A7:F6:B6:43:2A:AA:7B:B1:53:77:AF:D4:F7:5D:7A:A1:D5
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 01A131B42A4FEDAD4C80C3FF37087E4CAA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1AA4
Signing time: Mon 12 Oct 2026 20:00:53 +0000
Manifest this update: Mon 12 Oct 2026 20:00:53 +0000
Manifest next update: Tue 13 Oct 2026 20:00:53 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: rUOtLiL6LVJEmVQd9cRCztq6QiPPRWyIJZzDS4BJbSY=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:2a:4f:ed:ad:4c:80:c3:ff:37:08:7e:4c:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Oct 12 20:00:53 2026 GMT
Not After : Oct 13 20:00:53 2026 GMT
Subject: CN=4968f2a7f6b6432aaa7bb15377afd4f75d7aa1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:76:6f:ef:0c:85:75:cc:2e:6c:04:5b:b9:
75:75:56:ae:e0:1e:03:12:a4:6c:48:08:4b:c5:05:
d4:da:43:8a:30:dc:d2:97:85:df:2b:e0:87:24:44:
9f:6d:64:c9:74:9f:79:66:6b:ca:8b:da:46:ca:1f:
f6:cc:01:b9:06:dc:be:20:29:14:be:91:02:27:47:
8f:84:8e:f2:e7:2a:0c:b7:e6:86:be:45:02:9e:3e:
3b:dd:4b:d0:51:25:e6:22:1e:0b:a5:dc:fa:73:c1:
9b:27:21:65:2c:91:20:74:18:2a:4e:8e:27:5d:47:
81:f5:50:eb:71:f1:64:92:c7:10:b8:2f:15:cf:a2:
16:6b:26:85:bd:5c:bf:09:52:08:55:c1:8a:6d:e0:
ad:32:62:80:ed:a7:75:26:9c:e8:96:c7:84:19:93:
c4:9e:b4:cb:58:a1:bb:ca:03:ba:4a:b4:cb:f0:72:
84:8a:20:91:0a:07:7c:f1:ef:f2:10:89:d9:02:a3:
de:9d:59:e2:b1:0a:f3:56:d5:e0:d6:f8:8e:04:a1:
b3:10:c1:f8:cb:de:2e:89:ac:2b:2a:5d:21:3d:65:
e5:7d:e7:00:09:1f:7f:2b:e9:f8:cf:bf:39:19:c9:
1d:9b:44:1e:4c:aa:03:61:4e:a8:67:b5:19:77:8b:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:68:F2:A7:F6:B6:43:2A:AA:7B:B1:53:77:AF:D4:F7:5D:7A:A1:D5
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:71:51:73:40:c8:db:9b:d2:7f:29:f9:d6:ae:f1:8b:48:
38:95:b9:83:ef:05:87:91:e0:2d:38:d4:d3:78:7a:f8:4c:70:
80:07:c7:5a:81:fb:55:d0:93:51:2e:ca:10:ce:3d:c7:e2:99:
89:54:8b:9e:e6:7b:0f:1d:a7:cd:08:ef:38:96:b4:0e:cc:57:
46:0f:46:10:81:ce:c4:fc:eb:83:a9:a1:65:8b:d9:b9:7a:17:
1f:1f:e8:4d:99:75:d9:d0:b8:b4:86:39:69:70:05:6f:5f:3e:
30:2e:44:14:78:b8:58:bf:78:da:6d:9d:fc:80:94:ce:fe:d8:
0b:fb:e0:ce:04:65:a2:69:6e:48:73:92:bd:a9:bd:9d:f9:54:
48:de:e2:62:5d:d8:30:60:92:fd:6d:5c:1f:06:f5:b0:40:95:
3f:7f:e5:1f:ff:94:02:2d:68:ce:5b:f5:99:dc:e4:f3:4f:d3:
21:2c:d6:5f:7e:22:09:1c:2f:6e:14:d9:b9:b4:d8:36:06:f2:
57:e4:21:57:93:4d:bd:87:fd:d4:c5:d9:a8:93:ae:9a:ad:bb:
2d:a1:19:b1:f3:99:45:9e:bd:29:95:9b:5c:5b:d4:55:d4:8b:
93:39:bb:62:31:d9:96:3e:f9:5a:2b:7f:03:17:83:42:60:d7:
d3:e8:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:14:56 2026 by rpki-client