Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: eAqxl21TEc5y5bDFWgqd3M5GA9by7KOXRL1gVQHrAIo=
Subject key identifier: 42:17:2D:79:3F:53:21:28:5C:5F:73:AE:29:97:54:E3:20:FF:BA:85
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019E1D59C548D7210BA09347FEE6C2C1F3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0F92
Signing time: Tue 12 May 2026 18:01:22 +0000
Manifest this update: Tue 12 May 2026 18:01:22 +0000
Manifest next update: Wed 13 May 2026 18:01:22 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: FG+HQHHAnbEgr7oMU4AbG1TVHmnXqpmGd4aXCU49qFY=)
2: ofgcBJL5IkucI_t2Tbw87DuVUlg.roa (hash: 0n3F9loIDoRxXepxc9dufIeLMM9JHYgsIDsHjtK3JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c5:48:d7:21:0b:a0:93:47:fe:e6:c2:c1:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: May 12 18:01:22 2026 GMT
Not After : May 13 18:01:22 2026 GMT
Subject: CN=42172d793f5321285c5f73ae299754e320ffba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:5a:9a:81:a6:68:03:94:3d:3c:25:0c:b6:
f2:19:da:ed:a2:6d:eb:3d:1c:22:44:7d:7a:63:21:
9a:ef:9a:97:b7:af:b0:2a:ef:74:7a:d1:67:f2:45:
49:6a:1d:7a:d9:b5:c4:c2:e2:c3:81:9f:a6:73:64:
b3:5e:e3:a5:94:68:61:67:9b:28:1f:20:d8:c5:96:
15:4c:09:f2:21:1d:4e:f3:a6:6e:3f:e6:b1:79:7d:
ce:20:de:a2:c2:1d:df:c2:ee:fc:86:4e:32:fa:95:
ad:6d:0f:bc:79:66:fe:f4:59:5c:9e:b8:b4:80:cf:
84:4b:da:85:a4:b2:cf:92:84:93:71:be:f6:a5:d1:
85:83:07:6d:5e:a2:b5:87:b8:db:49:98:05:4b:9b:
93:2d:ed:92:dd:79:ea:92:8d:98:11:a3:fd:e1:5a:
21:3a:ff:0d:b3:3c:52:db:7d:06:5d:50:26:3b:a0:
28:6d:89:f5:00:75:14:85:9d:42:bf:76:a9:91:aa:
5a:14:96:cf:06:d1:78:85:da:4f:6f:0c:8c:5c:69:
3d:64:f1:f2:98:31:7f:a7:79:77:ed:bc:d6:2c:c9:
31:42:26:85:69:ba:9c:43:15:d2:f3:31:2d:60:50:
3f:e3:ae:32:c5:82:9e:d4:70:af:cf:97:df:19:cf:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:2D:79:3F:53:21:28:5C:5F:73:AE:29:97:54:E3:20:FF:BA:85
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c0:45:df:09:e6:80:94:b4:73:a9:fa:75:09:c0:84:f0:04:
ba:b2:27:2b:3c:2b:8d:8d:09:b5:3f:f7:91:b1:42:a2:a7:1f:
30:73:16:e9:58:29:c0:09:29:a0:ad:b2:4c:78:9c:27:bb:2a:
5d:b4:4b:9d:2f:41:1d:01:ed:93:0c:95:05:66:dd:a1:0c:c7:
58:db:02:ad:52:4b:2c:01:06:71:6d:fe:2d:07:96:ea:8b:8a:
ea:4e:5a:52:12:04:6e:30:95:86:69:b5:13:78:93:b5:8d:51:
5c:26:e9:46:e6:db:96:79:82:69:14:b3:44:15:61:f5:41:4a:
4d:3d:51:eb:a1:bc:9d:27:11:c6:96:1b:ba:e1:69:b0:33:8a:
c4:c6:1f:e7:62:12:d5:e8:fc:35:84:cd:0a:40:47:30:e5:26:
f6:89:4c:06:c1:12:38:88:c3:46:fd:b1:15:67:ec:70:74:ff:
55:ff:46:6d:39:1c:8a:f6:42:f2:85:14:2e:0b:cb:ef:ad:e8:
0c:6a:fc:f5:a2:03:2b:01:ee:50:90:64:cd:a8:da:b4:b6:8c:
66:d1:67:97:18:f5:02:3f:aa:49:4b:e7:a9:86:ad:75:c5:0e:
28:af:64:e9:9d:eb:fa:cb:e3:19:39:dd:5f:b5:dd:a2:64:b3:
cc:de:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:43:37 2026 by rpki-client