Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: Ohcx8tSY6hkeC6pAYA5y9KWx8XH8pJiXeSfoepS3+88=
Subject key identifier: DA:7D:93:D3:BF:18:5C:EF:E9:99:D6:0D:B5:C9:6E:6D:C2:D6:F3:88
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 01A0E28685F6CF795A08FE6EC0FC720616FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1A7B
Signing time: Sun 27 Sep 2026 11:01:01 +0000
Manifest this update: Sun 27 Sep 2026 11:01:01 +0000
Manifest next update: Mon 28 Sep 2026 11:01:01 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: XegORMIjBQopBnsRkeQovmPursk8UIjZXSZuV+cXqLw=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:85:f6:cf:79:5a:08:fe:6e:c0:fc:72:06:16:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Sep 27 11:01:01 2026 GMT
Not After : Sep 28 11:01:01 2026 GMT
Subject: CN=da7d93d3bf185cefe999d60db5c96e6dc2d6f388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:83:81:c2:cf:0d:71:f9:0b:37:d2:9a:38:
06:29:75:02:dc:a8:a8:ad:ba:e0:fd:2f:1a:a0:e8:
df:53:11:34:57:61:3f:4c:fc:f1:00:e1:1e:ae:87:
6d:5a:6d:62:22:a3:66:f3:02:6a:d0:b8:74:7f:fd:
a9:0f:3b:4e:4e:f5:0f:82:81:da:87:96:bf:da:8a:
6a:25:26:e5:10:82:6a:43:a6:f3:86:56:62:1f:98:
0c:74:3d:9d:fe:2f:ce:8e:e6:e4:3d:52:75:53:3a:
74:ed:cf:15:f3:17:96:91:91:5e:6c:b7:05:e9:0f:
56:11:2f:a1:12:1a:dd:95:ee:40:92:bd:0f:9b:d1:
6e:f1:1b:d7:79:82:de:b5:9c:56:c0:0e:63:1c:96:
9e:c6:dc:1c:9a:c3:bb:25:f1:71:df:47:30:36:cb:
44:d2:d9:7b:62:c5:21:c3:35:e0:e3:ff:c8:3f:cb:
c7:54:d8:d1:af:39:92:3b:a7:c5:7e:91:0c:d7:ce:
d7:de:9f:b6:97:a3:b1:82:91:71:a3:83:4a:15:05:
98:f0:60:d9:e8:e0:d3:ba:11:f3:8f:31:d4:92:ae:
fc:c1:79:55:39:6d:73:78:10:34:5d:fb:c3:51:7e:
80:44:b5:51:39:5a:e0:1d:d8:e0:ed:64:ca:25:4b:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7D:93:D3:BF:18:5C:EF:E9:99:D6:0D:B5:C9:6E:6D:C2:D6:F3:88
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:86:df:d6:ec:77:6a:63:ab:52:ea:0b:98:7a:80:65:4f:7a:
00:c6:56:13:93:5d:10:ff:4c:37:3f:13:7b:23:65:28:8d:62:
44:a0:50:d0:14:7d:3d:21:09:fe:a2:f2:df:d8:92:50:e0:c6:
5d:fb:aa:fa:8d:a3:b6:63:0c:9e:35:e1:46:31:c3:0a:a9:01:
53:66:88:34:d1:a4:0a:a3:b4:d0:26:0a:20:da:61:95:c1:84:
2c:95:1a:0a:65:d0:1a:78:b1:a2:1d:5f:be:52:79:97:4f:09:
eb:48:19:e6:83:f3:d0:49:9a:6a:85:65:3a:0d:50:15:23:8c:
d4:b7:31:0d:2b:ab:91:d3:46:4a:9a:5c:75:ef:91:a3:49:a4:
d8:a4:4f:26:62:ed:15:ed:99:cb:3f:3f:98:01:6b:07:82:a3:
b5:60:8d:33:34:64:20:69:2a:be:53:8f:28:11:d6:fc:6d:11:
e1:a4:60:80:67:29:5a:3e:e4:f1:39:fd:93:e7:01:fc:f2:a5:
b8:b9:3f:97:ae:8f:65:85:9a:e7:31:a8:53:a7:94:18:9a:a3:
58:7b:4b:6b:55:4d:ef:a6:6e:4c:25:c2:60:82:e5:26:60:c0:
ff:46:a1:b9:cf:2a:65:62:b8:81:aa:d2:ac:5d:3b:bf:e6:9a:
13:ea:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:57:39 2026 by rpki-client