Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: tSD1ng+un5TZzsPXP+jGamjBNagG8AOn9IEipPXulAM=
Subject key identifier: B3:B7:D7:B1:87:EF:54:85:83:FE:D3:EC:B6:19:C3:DC:CB:48:E0:00
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019D992B36E5F357EC5576B7A49ED1C02A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 096E
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: ZcKJRDyKoNARqkdzOWByJF25Fpjx5mwYTxTrrttCrzo=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:36:e5:f3:57:ec:55:76:b7:a4:9e:d1:c0:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=b3b7d7b187ef548583fed3ecb619c3dccb48e000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:e5:83:22:e8:fa:be:71:cc:7a:12:98:ef:
f1:25:6d:48:63:9c:42:36:d7:64:7c:ee:7f:a9:ce:
40:6f:05:b6:83:67:36:d1:9f:66:d7:58:aa:67:d9:
cf:ed:0a:a1:a2:74:67:b6:db:06:7a:ec:86:fa:38:
ae:ea:50:6e:4c:c3:ce:a3:9c:5e:bc:7d:c6:c2:b3:
88:f2:06:ae:d0:fe:7f:c0:98:2d:df:59:75:ee:85:
2f:be:a8:8b:9a:9e:41:de:8c:a0:b6:1e:98:64:8a:
f4:9a:e0:9a:87:46:c6:f1:8a:75:18:d3:e7:44:5c:
e8:56:eb:6c:45:d6:d6:c9:aa:6d:ee:86:c7:04:d2:
b3:cf:4e:fc:c0:b1:87:e7:6c:a5:bc:58:b2:c1:8e:
7d:9c:56:18:c5:26:53:73:45:6a:61:72:2a:36:59:
0c:a3:c9:44:75:dc:97:eb:14:5e:54:b8:23:db:de:
4c:28:96:35:56:3d:83:3d:46:1b:1b:a0:77:e6:4d:
9b:e1:12:66:48:30:3a:6f:8d:36:0f:ab:10:09:a3:
cf:97:bb:65:0b:a1:f6:d2:2d:9d:35:93:12:d2:51:
1a:c9:59:ed:21:44:bf:13:46:f3:16:a4:87:47:3b:
d3:88:dd:58:6d:47:86:41:3c:e7:42:76:6d:60:de:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:D7:B1:87:EF:54:85:83:FE:D3:EC:B6:19:C3:DC:CB:48:E0:00
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:95:35:b2:8c:7c:3f:36:34:15:7a:6b:ff:6c:da:65:ff:
f7:40:1a:35:64:4b:be:27:ff:41:7a:8b:68:05:1e:29:0a:c5:
b1:b1:75:a7:a1:d8:98:33:9e:ba:94:37:48:37:9c:52:57:64:
0e:96:ba:56:99:6f:4e:38:11:38:bb:ca:aa:05:8d:03:ac:9f:
74:4a:2a:99:b0:3d:f8:c6:47:59:6a:cc:c7:e7:54:cc:13:cf:
bb:62:ad:21:0c:27:e8:86:45:d2:8c:df:a9:4c:d6:15:84:c3:
71:f6:70:d4:c6:5f:da:db:1c:c2:11:2f:9b:41:bb:fc:93:cd:
9f:a4:dc:8d:9e:e0:a4:85:93:e3:ac:dc:c5:46:6f:c9:a4:1f:
12:23:6b:9d:10:07:44:61:5d:8b:39:34:47:ee:9f:15:5e:c6:
d7:a3:3c:c3:85:b6:a1:3d:29:dd:b1:e3:ca:50:4a:f2:db:4c:
33:1e:e7:06:f1:d8:7b:11:3d:a2:e4:b2:6a:bb:9d:85:f3:eb:
5d:5d:9e:ca:b1:8b:96:89:7d:20:dd:a5:19:f0:c3:ef:13:00:
5b:86:e3:b7:fa:86:d1:5a:61:46:79:0e:50:68:82:fc:a6:f9:
e2:cd:3e:da:e5:6e:b5:ac:2f:9c:64:6f:17:e6:c3:d6:1f:af:
db:c8:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:57 2026 by rpki-client