Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: sdhtYzH2j8GxhHSJLiSut2BRkpJPzX7EP2i+xZCiPOc=
Subject key identifier: 23:7A:C1:A5:1B:B5:CD:D0:C7:67:E4:6B:3E:9C:2D:07:62:9F:5E:21
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019D98F4922C23307E7AA2F304B3236042AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: KDDXeuXTJp5MVSlvCkX4ikYGke7SfTMcGW2ZCz2RY/U=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:92:2c:23:30:7e:7a:a2:f3:04:b3:23:60:42:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=237ac1a51bb5cdd0c767e46b3e9c2d07629f5e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:f0:3e:24:2b:fb:a0:24:9e:96:f4:5f:d6:
9a:5a:10:aa:4d:b6:06:62:1c:c2:5b:4b:a4:37:19:
91:77:95:da:f0:7c:b3:2d:af:95:29:9c:73:1f:a8:
58:ce:8d:f0:08:9a:bb:f4:7e:93:40:98:c3:ec:ec:
d8:39:f9:18:4e:82:a3:29:4f:b6:ee:98:fb:26:37:
f2:28:9a:bd:d4:54:6f:3c:cc:e7:3d:8b:75:e4:0b:
ac:f2:15:98:56:b5:a8:89:dd:50:26:3a:99:d7:56:
6d:9f:c5:c9:ed:6f:10:88:99:23:d7:37:2e:7f:76:
d3:5d:32:5b:8f:94:dd:b8:93:81:32:86:19:47:1f:
e2:ea:89:ce:b0:a6:f5:4d:32:08:f4:09:b1:de:77:
91:f9:06:6b:9c:4b:f5:0e:2d:93:ca:1b:52:f0:34:
6f:11:ff:dc:4c:28:de:21:7b:3b:89:e1:e6:db:37:
2b:c9:b3:6a:51:fb:e0:41:fd:a5:78:f3:38:0b:d7:
9a:32:8b:a2:6d:fe:2e:91:cc:4f:ca:3f:14:fe:33:
7e:39:7f:09:3c:1f:1a:17:34:e1:32:f4:ed:4c:20:
fe:32:c2:dd:f9:47:3f:d9:04:85:b6:67:8f:17:eb:
9b:08:2c:00:9c:f0:9c:af:d9:cc:82:d3:3c:bd:ad:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:C1:A5:1B:B5:CD:D0:C7:67:E4:6B:3E:9C:2D:07:62:9F:5E:21
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e9:be:1b:89:c1:8e:2f:16:15:cc:83:20:6c:2a:14:74:4b:
b2:ad:66:91:db:19:94:7d:81:49:bd:71:9b:5a:7e:46:a2:05:
f6:33:26:c6:fb:46:41:0f:00:57:f6:40:20:8d:c6:fd:bb:b5:
4d:29:a6:d8:06:2f:62:25:2b:be:fc:5a:63:de:3e:c8:43:96:
0d:63:30:e5:87:8f:4b:a0:44:02:ed:f7:a7:5c:c9:12:c7:66:
3e:41:1d:1c:b5:36:4d:64:2a:cf:21:f1:77:78:ae:16:43:44:
21:1d:b0:68:09:d9:26:1e:0f:84:74:7b:1e:aa:fd:25:e9:c3:
3c:54:0b:9e:d7:ec:e2:99:7a:cc:ad:97:27:d0:49:d7:49:72:
07:73:f4:e7:94:b9:b9:5a:08:ac:1a:cf:a7:df:2d:f9:38:a5:
b9:2e:89:f3:bb:d4:56:f9:ce:b1:13:c6:21:ca:bc:09:58:2e:
3a:7f:7f:57:81:ba:d7:69:71:f3:4f:fc:2e:5f:c1:38:e3:a1:
7e:77:a6:11:f9:53:42:05:c9:8c:af:9b:55:0e:62:08:57:4d:
68:9c:78:29:3d:f8:af:86:e7:36:93:e9:9b:3b:84:a9:03:a5:
07:60:ab:6a:47:7b:23:be:a3:ac:fe:b1:8b:69:7c:28:fc:e5:
a9:0a:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:03 2026 by rpki-client