Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: S3ffZwoDE+HwOR6iZ2de+YvACWpAeBSVFqrab4Nex/g=
Subject key identifier: C6:DA:99:42:70:CD:CF:C5:3E:A8:78:41:FD:D9:5D:80:2E:FD:4B:43
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019CAD59A9C22AD2A19582750D450FD1FEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 07:01:00 +0000
Manifest this update: Mon 02 Mar 2026 07:01:00 +0000
Manifest next update: Tue 03 Mar 2026 07:01:00 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: xOAWT/PwF7vD0Hlp5hM/02q+kskdBCB+g6azuPSAwdw=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a9:c2:2a:d2:a1:95:82:75:0d:45:0f:d1:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Mar 2 07:01:00 2026 GMT
Not After : Mar 3 07:01:00 2026 GMT
Subject: CN=c6da994270cdcfc53ea87841fdd95d802efd4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:ea:1c:b5:33:ad:27:9e:2f:d7:2f:8c:cb:
29:4e:19:34:c8:9d:89:16:03:10:50:5f:9f:f7:b5:
e9:dc:93:81:6a:24:b8:92:4d:89:02:67:14:ba:9f:
0f:ee:5b:fc:6b:3b:fb:d2:b5:06:2f:a5:ef:5f:48:
52:4a:fa:bc:61:b1:ae:cd:86:81:9b:63:98:66:83:
56:31:cf:d5:29:bb:10:5b:45:0a:49:15:f4:0c:4a:
de:5c:5a:f8:d7:6c:a2:8d:d1:19:48:b4:cd:83:f6:
1e:90:a1:23:78:4e:8b:91:7c:52:8b:d4:01:da:2e:
4a:3b:c9:2f:67:1e:57:b6:c8:f3:66:a3:cf:ea:4e:
af:d0:f2:58:6a:96:93:a2:04:0a:59:5a:18:4b:0d:
c6:cc:ad:c8:f6:c1:60:da:73:6e:24:14:62:04:53:
9b:71:62:1a:05:98:a2:65:03:47:73:0b:1e:5b:3b:
05:40:ca:98:74:41:1f:5c:e9:60:18:1b:ca:e5:6d:
06:0d:12:91:43:6a:49:2d:0b:a6:a6:1f:ef:9a:c7:
5c:93:23:ef:a0:f5:bf:d1:b9:7d:0d:30:cf:16:99:
02:b6:43:54:55:9a:16:f6:29:f6:71:56:c5:40:c8:
70:e8:8f:44:fd:45:cf:30:89:d4:b1:0c:f9:ce:ca:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DA:99:42:70:CD:CF:C5:3E:A8:78:41:FD:D9:5D:80:2E:FD:4B:43
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:c4:59:2c:3e:d3:7d:cf:90:3a:50:92:5e:f9:d8:1f:77:
30:26:c3:d8:e6:88:d6:1f:fc:35:b5:0a:da:9b:4b:bf:6a:71:
5d:4c:7c:99:e3:30:17:79:c4:3b:03:4a:c3:98:5f:55:6c:f1:
3b:1d:03:73:f6:84:c3:4f:7c:30:ef:92:3f:f2:62:a1:a7:9e:
6f:8c:e5:55:cd:2a:0f:04:ae:5b:8f:e3:37:8c:f1:96:6c:cd:
d3:1e:c8:b7:08:09:fa:08:3d:d4:16:55:98:a6:38:ab:96:6c:
9c:98:cb:81:ff:46:6a:5a:0e:fa:44:96:32:e6:9f:5a:13:ee:
7b:51:7c:d3:7d:83:2f:31:64:b8:0f:c1:3d:58:60:a1:bd:e6:
07:e2:7e:11:2b:6b:9a:03:ef:02:c5:84:61:81:9f:7a:92:c5:
e2:4e:ab:c4:a9:8e:2e:98:fc:35:c6:0a:21:a2:69:05:a2:e4:
e8:5e:8b:80:44:5e:36:3e:eb:6e:ea:c4:25:fa:da:f0:e8:80:
ba:77:5a:7d:fd:ad:34:57:38:35:e9:14:2b:1c:9e:3e:d7:5f:
b6:a3:61:8e:fa:75:ba:47:d0:e1:2f:8c:9f:83:42:e7:0a:d0:
b1:65:3f:46:1b:df:90:3f:a7:7a:9c:e0:34:7a:e5:44:bf:90:
ed:66:16:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:03 2026 by rpki-client