Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: c/hbrUaimrtmYRkXfzlNXtGZy5KJRBq68VHtatLND74=
Subject key identifier: 2E:24:A8:9B:CF:05:BD:49:0C:9E:BC:68:13:24:3C:92:F5:F8:D9:7C
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 01A0C633468821C4337920AF212450F51949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0B13
Signing time: Mon 21 Sep 2026 23:00:44 +0000
Manifest this update: Mon 21 Sep 2026 23:00:44 +0000
Manifest next update: Tue 22 Sep 2026 23:00:44 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: P43JQd57XdRfiQPgo4X7h0thdSAaYflt561RGNkiP2M=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:46:88:21:c4:33:79:20:af:21:24:50:f5:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Sep 21 23:00:44 2026 GMT
Not After : Sep 22 23:00:44 2026 GMT
Subject: CN=2e24a89bcf05bd490c9ebc6813243c92f5f8d97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:43:20:2d:11:08:14:5f:96:77:b6:1d:57:
fb:02:4a:69:63:35:3a:e0:f1:57:41:2a:86:8b:2e:
cb:0a:b6:41:fb:a2:e9:c7:02:f5:bb:b0:38:5b:e2:
7d:6a:87:42:4a:29:a5:c0:0a:1d:5d:fc:e0:ad:83:
b8:5c:72:7c:f4:96:09:b8:e2:b2:e2:d1:00:ab:96:
d9:1d:e6:94:02:f2:6a:c3:7a:42:e9:fd:a6:f9:2a:
97:dc:61:8b:08:fc:94:13:a9:71:12:96:56:a2:b6:
12:6a:81:a4:f4:bc:e8:04:40:ec:c9:55:ab:ac:ae:
fc:6a:07:fd:55:10:dd:3d:a3:b5:6c:a6:f9:3f:43:
4d:27:2f:63:98:a6:58:ab:1f:38:80:f2:94:af:eb:
7e:92:39:2e:82:02:6a:d5:88:4f:4e:8e:d0:6a:65:
9d:6d:ae:67:58:a0:f5:ac:fe:9e:58:0b:d0:32:c0:
5c:e2:59:b7:1f:9d:5b:50:6d:6c:03:3f:a5:46:c6:
ee:ec:1f:2d:78:8f:df:a4:53:0c:f2:cb:a9:d4:a3:
02:f5:5a:7c:e2:70:25:3b:be:0d:5d:3e:45:ab:86:
c5:55:3b:4a:86:56:64:c2:a9:57:7f:04:06:8b:35:
a4:2c:42:10:a5:42:04:71:02:26:34:37:9f:34:92:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:A8:9B:CF:05:BD:49:0C:9E:BC:68:13:24:3C:92:F5:F8:D9:7C
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:00:8a:ca:e7:89:af:0a:71:ed:96:51:f3:a9:8d:8e:65:
67:4d:3d:24:ba:65:ae:9b:5c:75:16:f9:ca:4e:f2:06:3d:36:
51:ba:a9:37:31:c1:8e:7e:c6:24:a4:8e:9a:f8:f7:dc:9b:05:
3e:4b:21:61:54:35:18:03:5e:a1:f5:50:18:0e:f6:c1:82:6e:
93:cd:18:14:46:b3:46:a8:d7:71:23:f6:00:fb:f3:59:e7:c0:
f0:10:a2:f2:7e:36:71:c4:f2:95:14:e7:83:91:ea:49:6b:c9:
d4:1c:d4:70:50:10:46:84:7e:6a:16:ba:d8:54:71:be:15:c0:
3e:bc:c7:d1:b5:ca:62:57:4c:33:a9:47:e4:d6:14:13:9f:70:
51:85:0e:ed:47:d2:6c:72:8f:20:a1:e4:97:fa:d6:0b:b6:06:
39:53:8d:83:6a:0e:b2:c4:96:e4:d7:ef:bb:d6:c8:c6:e3:01:
15:37:e0:f3:b5:ef:bf:0a:0a:6e:55:c7:e7:44:14:24:1c:a8:
c9:27:ad:ce:09:a6:ab:e8:58:c0:0e:b1:f4:35:85:8f:18:f7:
4b:d8:10:37:67:cc:f2:c7:01:64:39:5f:ad:05:15:9b:52:d8:
a1:12:6b:a1:e2:5b:34:8c:e8:ae:b8:5c:38:1b:e9:dc:b7:20:
91:cd:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:20:23 2026 by rpki-client