Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: rbuogIXFkGBKrN4MxUm4Jg05n0RorLNhf7VcMbcBpcY=
Subject key identifier: 3E:40:40:94:37:8F:58:43:6B:50:23:97:EA:A5:22:24:9D:89:E6:1E
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019CABD9DB563ED497F7D31D72A6E1E72131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0C9E
Signing time: Mon 02 Mar 2026 00:01:47 +0000
Manifest this update: Mon 02 Mar 2026 00:01:47 +0000
Manifest next update: Tue 03 Mar 2026 00:01:47 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: 5HGGJ9NWxhVMIfpb+7H0qQ5bqRphOkqJTsAsWkLDUww=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:db:56:3e:d4:97:f7:d3:1d:72:a6:e1:e7:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Mar 2 00:01:47 2026 GMT
Not After : Mar 3 00:01:47 2026 GMT
Subject: CN=3e404094378f58436b502397eaa522249d89e61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:f8:d9:7e:4a:e7:64:15:6b:c9:58:e2:70:
42:70:86:83:de:41:2c:6b:0b:60:25:79:44:3c:5e:
c8:2e:8b:ed:39:82:ce:36:51:d8:cf:d3:3b:a2:2e:
ef:c0:a5:16:17:c5:7d:67:ae:89:9c:c8:b4:64:81:
8c:d1:03:5d:4e:9d:36:47:46:c4:fe:c2:85:ed:c2:
d5:1e:b7:d3:0c:29:e1:26:88:c4:85:f6:7e:54:cd:
bb:c2:86:56:1c:df:1f:8f:0a:ac:46:d2:71:ec:cf:
23:8b:45:9f:27:18:5f:bb:82:1b:78:bf:7f:83:57:
4a:44:82:0a:58:ba:ec:d1:b4:fc:d4:1f:b2:27:90:
3a:78:3f:5f:39:73:3d:5c:e7:22:1a:f1:83:b1:a6:
0b:28:42:12:dd:d3:a4:53:fb:9a:aa:15:a5:3b:c7:
bd:5b:ff:6f:7c:d8:bd:b6:d7:9d:a2:c3:34:e0:d8:
6d:ed:f0:4b:fe:ff:99:89:28:2d:c7:d9:a0:4d:36:
21:84:cd:e6:25:31:f3:aa:d2:c7:f3:8d:14:2f:85:
9d:63:17:f1:bb:61:ff:aa:9a:b5:5e:65:df:7f:9a:
0a:27:1b:28:02:c5:60:4e:c5:79:ae:11:68:b0:ac:
49:07:a0:c0:72:73:86:15:20:a8:4c:8e:d4:aa:9b:
c3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:40:94:37:8F:58:43:6B:50:23:97:EA:A5:22:24:9D:89:E6:1E
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:05:ef:c4:c7:6f:d2:fd:96:c7:c2:33:cc:c6:2c:7d:de:fb:
9e:a5:a0:ff:bd:77:42:6c:9b:5b:0b:11:94:3b:79:a0:6b:a6:
99:36:69:e5:fd:af:4a:be:89:47:ed:87:5b:cf:e0:c4:dd:bd:
4b:fa:13:d9:a6:65:f2:99:18:ab:4b:70:ad:64:d1:04:22:22:
9a:8d:a2:da:97:44:c3:e8:27:ff:df:5a:e4:ad:da:31:2f:dc:
6c:75:96:11:90:54:4d:80:10:61:a4:a6:a9:3a:a8:69:f0:50:
d9:9e:ef:de:2e:70:e7:30:03:0b:97:1c:a4:a2:5f:c5:9a:9b:
3a:23:ba:c5:34:23:f9:e7:0b:af:0e:a6:33:02:7d:9c:f6:cf:
b9:e3:b7:26:af:18:8a:76:2c:42:1e:a0:1e:ce:77:63:66:96:
d0:e5:a7:fa:e1:e1:f4:1a:a1:c4:a8:c3:ae:c6:ad:c6:72:3e:
0c:0d:67:11:49:2b:c6:14:59:91:88:f1:c8:a0:6e:13:73:a3:
25:ff:f3:0f:5e:b8:1e:d0:d7:25:82:de:fb:80:70:3e:42:4b:
a7:99:50:73:9c:3c:fb:4c:56:86:01:4d:d5:10:af:98:8c:ff:
5b:9f:1e:3c:44:43:96:ec:7b:db:e3:3e:9a:08:70:56:c6:55:
59:88:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:16 2026 by rpki-client