Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: 20hc3lzaITFpgHGe/jAYMYgUQ4tkURYObJTL5/YHMB0=
Subject key identifier: 58:2E:96:91:8A:64:D8:CF:F6:56:21:BE:A4:AC:58:11:D1:70:34:BE
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01A1C10A4E180719A48D90AC65F601F36621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1AEC
Signing time: Mon 09 Nov 2026 16:00:40 +0000
Manifest this update: Mon 09 Nov 2026 16:00:40 +0000
Manifest next update: Tue 10 Nov 2026 16:00:40 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: +MFsB2UQfwOymrfIx8HlVN6GDhtEEQWkll17rn6R9qs=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:4e:18:07:19:a4:8d:90:ac:65:f6:01:f3:66:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Nov 9 16:00:40 2026 GMT
Not After : Nov 10 16:00:40 2026 GMT
Subject: CN=582e96918a64d8cff65621bea4ac5811d17034be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:6b:d8:c2:7a:3f:38:d1:90:4d:31:2f:1f:
4f:a3:0c:7c:44:42:2c:64:43:e7:59:90:e7:79:5f:
fb:4e:54:04:e5:80:ab:d4:4c:58:42:6b:9b:09:4f:
31:a8:84:c8:14:a2:04:e7:d6:b1:ed:38:3e:ee:ec:
aa:02:b2:08:93:fe:0e:f4:75:ba:76:7c:f8:84:6e:
b0:f1:7a:a9:f8:34:7d:83:5c:3e:ff:83:e4:1d:64:
96:c5:66:ef:50:48:67:93:90:21:1f:58:ae:ae:90:
f5:2b:97:f7:7a:01:f9:b3:d1:c4:74:2d:a5:82:cc:
e7:f8:b2:83:50:77:cd:3b:ef:75:74:d9:eb:23:af:
1b:9b:7b:70:a9:22:86:df:67:6b:50:0c:25:13:84:
dd:24:3f:34:2a:90:bb:81:79:cb:86:23:b2:64:c4:
24:fd:f0:d5:3e:ce:12:8c:2e:d4:f5:2b:58:38:d6:
c0:23:f8:b1:d7:3c:ed:56:dc:05:5c:a7:57:54:ce:
ae:4e:33:92:31:92:46:82:38:17:4a:6a:8a:95:62:
9e:25:35:c3:33:45:57:ba:99:46:99:ab:53:d5:e7:
d7:de:5e:8e:39:c0:55:31:92:3c:4d:a9:00:83:0d:
b6:8d:46:bc:19:80:17:30:eb:bb:15:ee:d2:ee:17:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:96:91:8A:64:D8:CF:F6:56:21:BE:A4:AC:58:11:D1:70:34:BE
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:06:da:cd:a2:dc:27:16:62:9d:35:c2:cb:42:b7:ad:9e:da:
b2:2b:22:ca:59:61:83:da:82:cb:98:96:de:11:0d:74:2e:c9:
b7:22:4a:02:02:5e:6c:8a:c3:ef:7d:14:40:58:87:83:ef:50:
48:23:0a:52:a9:54:84:df:11:33:cc:7f:53:2a:0a:51:be:45:
03:a0:c3:70:52:e6:7b:eb:5f:f0:e1:d0:69:b5:30:30:72:70:
6e:28:df:17:cd:00:f0:0e:39:dd:8b:bb:00:d8:5e:f5:25:8e:
df:af:18:65:48:4b:b1:ed:b9:bc:e6:f8:1b:11:44:f0:11:aa:
d6:1b:50:18:06:b2:72:1c:de:f4:e0:22:9e:39:8a:0e:1a:b8:
7c:9e:95:ca:5c:01:d8:e1:b8:b1:50:5c:a9:07:76:53:d3:ab:
71:62:1d:cf:7d:08:92:ed:de:14:87:b3:ae:38:3e:b1:8a:db:
3d:d7:b0:8b:41:9b:3a:41:aa:f9:b0:26:16:c2:cc:bb:92:30:
8c:de:0d:cd:4d:54:35:76:c9:69:aa:01:07:9c:02:78:4a:c6:
37:59:57:9a:de:5c:44:3d:94:98:7b:1d:b9:49:a1:8e:0c:8c:
94:d5:a6:35:37:67:93:55:eb:a6:9d:da:48:56:0e:5b:63:08:
0c:09:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:30:13 2026 by rpki-client