Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: 6znTFwK1FRfRYEcI7g4FGCukwzmF7kCVODwMkgqTkz8=
Subject key identifier: 8B:6D:2E:D9:7E:6E:F0:1C:0E:4F:78:C0:87:68:15:EB:4F:35:38:E4
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019FA89A5D2924071C7BE8FABC5B3DFA5AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0E2A
Signing time: Tue 28 Jul 2026 12:01:56 +0000
Manifest this update: Tue 28 Jul 2026 12:01:56 +0000
Manifest next update: Wed 29 Jul 2026 12:01:56 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: TEhOx8b0X7XmNnpOd5ZErrfc7NOSkS/q57sYgg6H6YU=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:5d:29:24:07:1c:7b:e8:fa:bc:5b:3d:fa:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jul 28 12:01:56 2026 GMT
Not After : Jul 29 12:01:56 2026 GMT
Subject: CN=8b6d2ed97e6ef01c0e4f78c0876815eb4f3538e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:96:8a:16:3e:78:10:f6:f9:44:a9:18:73:
75:1c:20:d5:23:8c:f9:86:fc:3b:e4:c3:cf:71:84:
d7:6f:15:ab:13:cd:a6:13:be:7f:74:14:cf:6c:c2:
30:73:61:d4:7c:00:94:eb:42:35:16:4f:11:08:0f:
04:ab:37:5f:93:ea:b2:f8:8a:6f:85:60:82:1b:71:
37:e1:b4:fe:11:57:4e:a5:49:43:ba:f0:5b:52:53:
fb:fd:57:a4:d2:c8:87:74:64:13:e8:c0:d0:06:57:
28:62:eb:5a:0f:de:eb:12:c1:8d:5e:48:f9:43:84:
f0:92:0c:16:26:59:af:80:90:cf:b6:f4:02:90:7b:
de:12:f5:d0:2f:9d:a2:e2:c1:25:44:b8:7c:35:d3:
13:fc:44:08:5b:b9:a7:d4:b9:e6:f3:09:c7:01:6e:
3f:fc:58:d2:90:cd:49:d6:2e:df:86:60:ab:2c:31:
c9:f0:f8:25:67:5f:02:db:ee:17:48:3c:fe:82:8b:
d7:aa:f0:a0:a6:de:16:87:d5:22:05:b7:fd:28:fe:
09:87:56:6d:60:d5:7e:2b:7e:69:da:7a:64:5c:ea:
d5:6a:60:9c:68:f1:a3:ff:2d:c8:72:46:89:b4:fd:
51:b8:d7:fb:05:9b:05:83:92:3b:39:d6:5c:2b:90:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:2E:D9:7E:6E:F0:1C:0E:4F:78:C0:87:68:15:EB:4F:35:38:E4
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:22:a1:3e:71:9e:07:85:c9:5b:95:e4:80:b4:64:bf:81:4d:
25:a7:15:75:62:77:12:95:e1:98:ad:c0:9a:d8:db:cd:67:4b:
87:83:e0:b7:59:dc:0e:a8:25:6c:3b:7f:0d:48:ae:93:59:d9:
c1:4e:68:4f:f9:5a:6f:be:14:89:6c:2c:67:90:2d:2a:18:fc:
13:b2:8c:44:cc:a5:6b:fe:ed:58:3a:35:7a:b4:fc:37:1e:02:
b7:87:fa:2a:ee:3a:b3:79:e4:09:7b:f9:3f:98:3b:1f:1e:26:
a8:3e:f0:f0:c7:4b:4b:36:f5:43:d7:c0:35:e1:4f:a9:b0:b8:
8a:6e:24:d0:b8:62:a4:26:10:0a:91:4e:89:95:8e:83:5b:1d:
0f:36:05:1b:2e:29:2a:ee:cb:fc:9d:a4:fd:9f:eb:9f:be:f4:
a3:26:94:01:64:cd:72:06:91:df:e9:31:21:d0:0e:cf:45:fc:
8a:99:66:4d:58:7c:af:05:fe:a9:e6:a8:fa:6b:56:a4:43:75:
24:53:1b:20:63:73:f9:ba:26:32:37:b7:b7:82:38:f0:23:6a:
13:bd:01:fd:91:44:2b:08:f1:98:d2:aa:37:9e:6d:59:25:45:
ca:78:e1:b0:79:6d:a9:4c:a2:fd:d6:d1:0f:7d:44:ce:c9:c9:
be:20:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:23 2026 by rpki-client