Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json)
Hash identifier: R+rXTnbdxGBpENhnfDP50AKnob7k9crQCm2CI9XWboM=
Subject key identifier: E6:19:64:A7:D8:41:47:3C:CF:EB:74:08:DD:0B:94:FC:16:3F:66:C2
Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Certificate serial: 019F91DABF44D9BF26BDF5DA67C0A6BBE75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
Manifest number: 02A4
Signing time: Fri 24 Jul 2026 02:00:59 +0000
Manifest this update: Fri 24 Jul 2026 02:00:59 +0000
Manifest next update: Sat 25 Jul 2026 02:00:59 +0000
Files and hashes: 1: 0AzcAjUT9N1QB5cI07RUAHonZOs.roa (hash: g0trIEnIrBs+QaX8y9UPsVa9Dhsva7/upARrEo7U33o=)
2: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: k0ur1hQxojQwtLEwmm8XR2AYgdA+Mj2x/8l9AFimQYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:bf:44:d9:bf:26:bd:f5:da:67:c0:a6:bb:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Validity
Not Before: Jul 24 02:00:59 2026 GMT
Not After : Jul 25 02:00:59 2026 GMT
Subject: CN=e61964a7d841473ccfeb7408dd0b94fc163f66c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:d4:58:d8:4f:ac:7f:f5:3c:8b:43:e3:47:
7b:ba:a9:e1:92:4b:03:ec:d0:49:33:03:be:d8:ce:
e4:b9:bb:63:16:02:2f:62:a3:63:4b:d1:25:b5:d7:
b6:f4:7a:ae:e3:31:41:7a:c2:98:8e:c8:36:03:1d:
83:dc:5e:e0:2c:fe:8b:56:2f:6e:6a:80:2d:6d:74:
56:ac:78:17:3e:12:2c:6c:66:0f:e3:48:4b:f4:c3:
18:60:10:f0:9b:81:7c:a8:b3:53:e0:3e:4a:49:42:
b8:cf:82:be:24:e7:9d:87:17:f9:29:ef:7e:e3:87:
9b:0d:94:c0:c4:44:03:e5:de:5e:34:53:75:3c:ca:
79:bd:dc:0a:91:ca:0b:33:00:10:4b:97:b6:51:5b:
09:46:78:12:ca:65:4a:be:d9:d2:76:a5:d1:b2:8a:
34:8f:0a:ac:57:5b:e6:4c:ea:f1:44:19:df:0c:59:
1c:7c:18:c6:8f:8e:d8:06:7e:84:e2:17:14:b0:dc:
57:04:e5:66:ad:9e:19:08:76:0e:42:8a:52:4b:4a:
47:fd:fc:d2:a0:6a:73:28:4b:98:6b:7b:72:5e:c0:
88:8a:16:0e:8e:ac:6e:2e:97:2b:a8:09:bd:16:c0:
f8:0d:13:7a:15:04:2e:4a:9d:aa:d4:3a:53:46:b4:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:64:A7:D8:41:47:3C:CF:EB:74:08:DD:0B:94:FC:16:3F:66:C2
X509v3 Authority Key Identifier:
keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:38:a0:e5:ab:e5:b0:cd:d5:0e:c5:26:27:3e:00:c8:f9:b7:
f7:ea:af:63:47:ea:2d:3a:89:1b:a7:44:41:d2:c7:22:c0:56:
9d:72:91:4b:3d:d9:5f:8b:f1:bb:b5:3b:de:78:6a:39:a5:68:
8e:94:66:c6:b3:b1:14:c7:31:ac:95:bc:96:23:a2:56:27:c6:
46:93:ee:a8:80:a7:a1:1a:3e:ae:08:bb:27:f8:c6:59:57:cb:
7e:40:2a:b5:3c:f0:a7:00:e2:27:69:9d:16:10:ab:8d:7b:f9:
85:c8:54:90:a7:72:36:76:0b:68:f1:c2:a7:71:01:e5:f8:6e:
7b:fd:32:81:ca:36:81:32:0b:2c:3d:95:bb:cd:63:e5:d3:29:
50:b7:35:78:11:cb:e3:e3:16:aa:34:2f:ad:00:8a:3d:be:aa:
bd:11:70:c3:55:a0:f6:9f:91:9a:c2:4d:d5:2e:4d:7f:27:b5:
b6:72:4b:34:2c:e4:81:cd:df:63:78:eb:7a:97:c6:63:c7:bb:
2d:49:bd:ae:51:c5:43:b9:82:1e:ea:d9:71:72:e0:66:65:9a:
61:d2:4c:3f:ea:0b:5c:19:e9:67:5b:96:a1:88:6e:6e:ce:9a:
63:97:07:49:3d:46:7c:49:db:41:16:e1:88:ac:f1:ad:f5:e2:
15:d5:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:11 2026 by rpki-client