Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: YkT3u9CNQ+M2byKfvVGSkm0A4W3fLxEQdJd/DohoOMI=
Subject key identifier: 47:73:AC:E4:E4:4E:CC:B1:E5:46:BB:FD:61:71:6C:69:F3:8C:2A:AD
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019CACEB7D64B7C174E70C980AECFE008DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 05:00:40 +0000
Manifest this update: Mon 02 Mar 2026 05:00:40 +0000
Manifest next update: Tue 03 Mar 2026 05:00:40 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: 5vOcrhp+6fjaQGmufnpz2rewVO5+kdgtrO0S+oetY94=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:7d:64:b7:c1:74:e7:0c:98:0a:ec:fe:00:8d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Mar 2 05:00:40 2026 GMT
Not After : Mar 3 05:00:40 2026 GMT
Subject: CN=4773ace4e44eccb1e546bbfd61716c69f38c2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:42:ea:fd:9f:29:65:ff:8c:1a:f4:ac:d4:
a9:f7:85:7f:86:cb:4c:b6:da:a1:c5:a6:21:e0:26:
0b:69:9f:d4:24:e0:db:86:df:1c:4b:d9:3a:12:58:
e7:91:65:f8:bd:e0:4f:18:42:3b:8a:ba:e6:f0:40:
bc:10:a6:4d:ae:5b:2d:0e:e3:0c:a7:04:59:f8:bc:
cb:73:6b:39:e9:c4:6f:dc:93:13:bb:2c:e0:54:f4:
e5:40:cb:e6:39:c6:04:db:34:5f:56:0b:93:9a:99:
0b:64:9f:5a:f0:d0:52:e6:37:01:75:97:40:c9:90:
ac:df:f6:c5:4a:18:e3:cc:67:03:24:67:be:81:0a:
ce:1f:f0:34:eb:20:7c:b2:25:1d:0d:22:66:a9:f4:
93:56:30:b3:07:d5:be:f6:99:51:e9:85:a9:dc:6a:
a4:aa:fe:a7:1c:f4:60:33:4b:88:46:0a:9e:85:7a:
8a:20:25:13:59:f3:0a:87:38:bf:42:c1:26:fe:e3:
f4:79:80:4c:67:33:e3:16:f2:94:1c:d2:0d:0e:bb:
be:85:21:31:8a:ef:6d:32:e1:8d:48:48:d3:c8:83:
46:be:45:a6:f5:7d:d2:e8:6b:13:9c:8b:44:10:56:
19:f2:49:59:1c:0b:7b:f0:0f:6e:54:c4:14:ba:7e:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:73:AC:E4:E4:4E:CC:B1:E5:46:BB:FD:61:71:6C:69:F3:8C:2A:AD
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:08:09:40:88:3c:24:f8:e5:b2:a7:f7:e8:61:86:f9:23:
84:2d:23:e3:5b:04:33:b7:63:34:8d:cd:ab:66:2e:f0:c1:46:
a7:a6:6b:a5:79:a8:f5:5d:63:74:57:c8:1d:f0:18:e4:3b:6c:
89:dc:c4:e6:12:8d:b3:a2:59:d7:98:75:23:53:9b:12:84:87:
55:64:05:c7:db:28:33:f5:57:60:07:b8:54:a1:23:e4:ec:7e:
40:35:05:5b:8e:ab:83:84:ad:b7:79:53:79:c3:8f:cb:d4:2e:
c0:24:0f:0e:9e:2e:eb:ca:ae:42:db:36:a0:0a:c1:ec:90:b6:
f9:61:35:7f:50:74:57:59:12:74:3f:46:26:20:5b:a6:a0:e2:
ac:97:c5:7e:6a:9f:be:63:e8:fe:5c:a7:32:7b:dc:b5:b2:1f:
48:54:05:36:3b:59:bf:7a:4d:9e:ea:a7:01:93:8d:ca:73:07:
7d:81:16:38:e6:9e:d7:0a:e8:48:a3:2f:49:53:86:21:8a:11:
8f:12:95:1d:1c:f5:4d:44:8c:c6:19:1f:66:2f:07:d0:9d:80:
c9:ff:c1:06:92:26:0e:03:06:3f:b3:0b:ef:4c:b6:81:89:7a:
40:f2:52:e4:b7:17:ab:8c:26:a8:5b:3b:82:88:ac:fa:18:10:
04:5a:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:33 2026 by rpki-client