Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: XWx6XwERXcnBE+wyx1bTDmaCMBD7ifanDOOtJg4V2VM=
Subject key identifier: AD:29:2E:A8:55:C1:20:1B:8E:79:AA:31:5E:7B:3C:03:11:B4:02:FB
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01A0C21FB19DED98C2139C6FEE2221562C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 04:00:51 +0000
Manifest this update: Mon 21 Sep 2026 04:00:51 +0000
Manifest next update: Tue 22 Sep 2026 04:00:51 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: Pv44rUfzk+kAQuPOQxXqIoU+E1xHey5CX9PIo5RO+eo=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:b1:9d:ed:98:c2:13:9c:6f:ee:22:21:56:2c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Sep 21 04:00:51 2026 GMT
Not After : Sep 22 04:00:51 2026 GMT
Subject: CN=ad292ea855c1201b8e79aa315e7b3c0311b402fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:c5:34:16:f5:d5:14:32:4f:f6:9e:d0:f7:
09:38:db:61:c5:cf:f5:7f:3d:e1:30:ee:ab:55:4c:
a0:48:1f:58:2c:5b:c6:07:19:6c:90:1e:89:fa:04:
87:5d:17:9e:d5:0c:14:1c:37:34:6d:20:1a:69:a1:
1c:b6:53:ba:8d:80:dc:02:46:27:4c:d1:ea:44:c4:
e7:d8:d0:04:f2:35:bc:ac:d9:62:00:8f:8c:53:03:
8b:5c:a1:3b:2a:4e:93:d3:0f:63:b0:38:ec:5a:a0:
6c:6a:64:88:36:01:4f:75:16:bb:a2:18:fc:80:c1:
e6:e8:99:c5:f8:34:bb:f7:bf:f5:5f:e3:82:23:0a:
a9:72:e0:8c:3f:e7:28:dd:ed:74:1c:42:9c:43:f6:
f6:66:55:5b:95:05:7f:d4:07:bd:44:26:8e:2e:f7:
5d:44:b1:84:fd:22:d8:04:ec:13:f3:e0:55:4f:71:
43:ea:20:5d:0d:06:f3:5b:ae:f8:b3:c8:94:d1:5c:
86:75:3e:9a:26:42:6d:a7:54:28:31:e0:ca:e5:12:
3b:e8:87:0a:53:95:bf:5f:dc:04:6f:72:02:87:72:
fc:e9:e4:37:9f:ac:f3:45:e9:d2:e8:e4:f2:63:bd:
07:a3:09:a6:78:bc:3c:61:ef:1c:cb:a2:f0:a5:0e:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:2E:A8:55:C1:20:1B:8E:79:AA:31:5E:7B:3C:03:11:B4:02:FB
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:05:c7:e5:ab:46:d9:82:1c:87:a7:3c:a0:8e:96:f9:73:05:
24:c8:34:ba:d0:7d:00:2d:0b:0c:b3:e6:7e:fb:6f:ab:b3:f6:
34:ba:14:04:2b:f0:20:84:4e:b5:9c:40:e4:1e:94:d0:ba:60:
30:9d:0f:cc:ea:ef:cd:91:dd:64:9b:e3:78:66:1f:d6:50:96:
ef:9f:bf:3b:25:cb:0e:b6:08:b4:c7:0c:91:a3:74:c3:97:4e:
7e:83:3b:5a:de:d7:16:2c:90:2b:14:9d:6c:7f:19:72:ac:91:
ea:e7:27:5a:51:6a:95:35:5a:00:3b:02:a0:44:97:c9:05:4a:
78:9a:83:e9:51:25:3a:11:c0:b0:16:e2:c0:26:40:fb:40:0f:
bf:18:15:64:61:44:0f:b3:b6:57:d6:cd:71:f0:22:26:be:94:
59:a5:ad:32:28:07:6c:10:a1:cd:56:d1:f9:17:2b:96:8b:d4:
c9:ad:99:ab:be:28:e9:9b:e4:49:31:b1:83:76:54:98:ff:ba:
8f:62:80:f2:f0:ce:03:7b:84:d9:1b:94:33:d8:2a:0f:3e:0f:
bb:f1:f8:b3:a2:e6:54:a3:41:1d:6b:ed:5b:26:09:9a:3d:12:
55:e4:11:de:b2:be:76:b6:d3:2e:35:58:34:36:c8:be:40:f0:
00:38:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:20:53 2026 by rpki-client