Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: 9mdvCg4XhpLd+r5p7rI/dMpWvptx9dSkc/V/58IcJ0s=
Subject key identifier: EB:51:AB:9A:9C:DB:D8:1B:32:FE:DD:8E:76:3F:F1:35:70:01:7E:76
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019FA86247034A45FABA69417EEC5087F375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0A7F
Signing time: Tue 28 Jul 2026 11:00:40 +0000
Manifest this update: Tue 28 Jul 2026 11:00:40 +0000
Manifest next update: Wed 29 Jul 2026 11:00:40 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: sf9DQ/caV9T3xLEfKNrsnlt3Vz/SZ0qW2ooTi0RE0I8=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:47:03:4a:45:fa:ba:69:41:7e:ec:50:87:f3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jul 28 11:00:40 2026 GMT
Not After : Jul 29 11:00:40 2026 GMT
Subject: CN=eb51ab9a9cdbd81b32fedd8e763ff13570017e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:f7:a0:27:c9:c6:93:8f:fd:b9:70:d0:4c:
fd:2c:7b:e4:73:77:56:41:df:54:b5:a3:03:65:a6:
65:8c:b7:b0:79:2b:ea:14:b1:de:ef:f5:39:e2:b9:
f7:b3:b0:6c:7d:d1:10:48:ad:28:f8:d1:35:6e:b8:
fc:55:df:62:1b:d9:de:64:87:64:01:fa:77:8b:91:
c7:35:f4:a8:74:c2:e1:b6:ec:67:45:ef:87:bb:d8:
08:d6:05:55:43:96:89:13:ca:ea:17:3f:57:a0:16:
0b:1e:aa:fc:b8:83:8c:29:20:30:d9:61:81:fc:b6:
4a:15:a1:d1:8d:5a:50:11:92:be:b5:54:1b:b7:f1:
ac:1a:86:95:a5:85:05:59:3e:9a:64:39:3d:ca:d4:
33:49:5d:c9:19:95:cb:a9:16:aa:8a:21:cb:17:32:
86:1d:3c:de:3e:29:e7:bc:60:f4:43:29:e6:31:30:
c7:69:5a:d7:93:f4:7a:c2:14:ec:2f:48:f4:f1:ed:
56:01:6f:07:5d:bc:90:b4:0b:88:dc:65:ca:34:7a:
5d:9c:ae:b2:e3:94:db:00:a9:dc:89:b9:ec:a8:2a:
08:c8:06:18:11:40:1e:d2:13:e7:df:28:c5:c2:48:
27:7b:39:8a:76:23:fd:95:d8:13:51:60:1f:87:ee:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:AB:9A:9C:DB:D8:1B:32:FE:DD:8E:76:3F:F1:35:70:01:7E:76
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f4:fd:94:d0:6d:a0:65:5e:90:d5:f2:22:ea:4c:3a:c4:0e:
62:9f:ff:85:e9:f9:1d:81:81:62:7a:6b:c4:9a:76:c4:c4:ae:
db:34:9f:4a:b5:a6:2b:02:57:0b:f2:ac:ec:5e:2a:08:4d:9e:
9e:f7:dd:04:d5:23:85:8d:a3:62:13:3f:bf:1a:54:a0:f2:ed:
b8:3f:d2:ae:98:be:8f:ff:65:3f:47:32:6b:0f:6c:a9:11:5d:
37:fd:df:7b:e5:f6:33:21:3e:95:b1:fe:1b:21:09:2a:0e:c7:
65:2b:3e:15:09:74:73:d8:97:8a:b8:ef:46:9f:93:e4:bd:2a:
ad:2a:67:42:22:4a:5d:0d:cc:f1:2f:09:37:e6:80:e8:a1:d8:
7e:8d:6c:95:68:c6:43:db:a9:7f:b0:8b:10:f3:84:1c:ed:0f:
3a:d4:25:71:e1:ff:1b:4d:8d:5f:dc:a0:cf:e6:d8:d0:4a:97:
ff:b2:5d:25:41:d4:72:fb:25:51:a4:5d:14:f7:a4:52:d3:d6:
4d:d9:2c:f8:3d:7e:99:a4:2a:a4:3f:6e:93:98:d9:4a:e3:27:
67:4e:8f:33:3a:3e:71:84:76:29:9f:8e:22:ff:fb:92:bf:2d:
ea:73:40:72:fe:f7:6a:34:c2:8c:90:ce:5c:6a:f9:e1:6f:c2:
ad:56:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:59 2026 by rpki-client