Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: WFzL7qPOsvTngsm9Oo8u2d5NxiNZdSOlFMayptwsOrM=
Subject key identifier: 37:3B:1B:D3:1C:5C:67:DB:0F:7C:BF:DE:06:9D:08:43:03:20:B7:81
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019EBEEC43D2DCA3F8E847B6D4230505B275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0DB1
Signing time: Sat 13 Jun 2026 03:00:15 +0000
Manifest this update: Sat 13 Jun 2026 03:00:15 +0000
Manifest next update: Sun 14 Jun 2026 03:00:15 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: 1iK1qlWGEcql4LeQg8KfOGiQHvnlpcHxwxo+cMmRiDk=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:43:d2:dc:a3:f8:e8:47:b6:d4:23:05:05:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jun 13 03:00:15 2026 GMT
Not After : Jun 14 03:00:15 2026 GMT
Subject: CN=373b1bd31c5c67db0f7cbfde069d08430320b781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:a4:ba:f5:d5:04:f7:5a:fb:d5:b4:23:c5:
aa:df:bb:02:ba:8e:5a:61:9d:9f:31:98:d7:fb:15:
a7:a9:76:41:20:d1:c4:65:86:41:72:14:e5:32:df:
1e:46:ff:a1:ef:1f:f2:7b:78:ed:25:f8:78:71:f4:
c1:ca:0b:3c:d4:32:20:7d:7e:9c:c8:87:a5:d9:76:
a2:9f:30:ed:bd:0e:ea:39:c9:e7:41:ff:85:07:5c:
d2:ac:9c:ab:ad:1b:8f:7e:ea:a6:bc:61:23:ff:6e:
15:1d:5b:46:d8:96:80:f0:16:f6:57:d4:9f:22:7e:
df:8e:80:17:72:e6:9b:5e:b9:b1:03:24:43:e3:c3:
fa:23:f7:da:f2:6b:3e:59:31:ff:7e:15:8a:bf:66:
1a:5a:fe:5b:a8:89:d3:62:64:04:5a:a9:3d:02:3c:
eb:dc:4d:dd:dc:1b:46:30:05:6a:35:a8:3f:0a:7d:
54:fb:e5:99:93:cd:84:df:cc:a0:54:81:a7:ab:5f:
46:53:36:62:3c:8f:e2:ab:44:8d:18:c1:86:5f:cb:
6b:c2:47:3a:a7:d4:6a:f6:f3:f5:3f:f2:39:41:32:
48:81:c8:97:e0:e9:28:10:bf:a4:e9:87:05:d9:04:
43:ab:e6:02:7f:e6:7a:f9:bb:3b:fc:7b:bd:08:23:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:1B:D3:1C:5C:67:DB:0F:7C:BF:DE:06:9D:08:43:03:20:B7:81
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:ff:3e:2b:d7:3e:d3:b1:01:68:b2:e5:da:bc:66:35:6c:
4b:9a:85:f3:30:e5:2c:fe:d3:64:48:dc:2e:f1:e4:a2:6d:39:
2a:04:a3:32:dc:12:ad:f2:ce:35:24:14:ce:aa:6c:4c:49:2a:
30:cf:db:59:ec:fb:1e:9c:00:a6:25:f1:30:71:3a:4f:ac:ab:
d9:46:6d:42:31:67:ea:7f:f7:1e:52:1d:74:bf:d0:4e:d0:fe:
49:a9:eb:4f:9b:23:23:6f:cc:38:e3:45:47:b6:f9:3c:65:aa:
23:c4:2e:b7:f8:94:32:eb:de:41:95:76:a9:2a:0d:54:af:ae:
95:38:26:e6:b4:f5:06:34:64:e8:fa:65:41:62:f9:b7:11:01:
1a:60:21:36:10:cd:2e:19:e8:c2:67:3b:eb:c9:20:12:5e:51:
a7:d5:40:ab:b0:d8:22:e5:c4:af:ca:d2:a9:30:0b:ff:2c:22:
3f:c8:36:7b:0b:fd:0b:c1:7c:fb:02:81:0a:1a:ba:81:7e:49:
ff:04:0a:70:d1:fa:24:46:00:99:93:f9:46:77:74:a5:a2:ee:
05:46:e4:38:32:09:aa:29:9b:41:b4:c2:48:6d:f8:0c:f2:22:
a3:cb:7d:88:2c:22:8b:94:eb:d6:64:ad:01:e0:4a:aa:26:2b:
9a:bd:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:37 2026 by rpki-client