Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: /fXiI/Pz/SSK6VQk1hChoHBl6RvPU5qgsD9EeZEVDa4=
Subject key identifier: F0:85:94:02:4D:50:56:BF:06:32:86:8B:E8:64:8A:EB:B5:3C:B2:C3
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019F916D66D51921AF807656C05E6EFC4FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0E1E
Signing time: Fri 24 Jul 2026 00:01:33 +0000
Manifest this update: Fri 24 Jul 2026 00:01:33 +0000
Manifest next update: Sat 25 Jul 2026 00:01:33 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: CvY+7EV36HT3vnc+Arw9KDmmXgkSWVOTdMH+8vD3Pkc=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:66:d5:19:21:af:80:76:56:c0:5e:6e:fc:4f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jul 24 00:01:33 2026 GMT
Not After : Jul 25 00:01:33 2026 GMT
Subject: CN=f08594024d5056bf0632868be8648aebb53cb2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:2e:fa:0f:85:3b:9f:e2:6e:1d:28:5a:33:
70:c9:94:80:6d:19:dd:3d:8b:b6:b8:5f:ac:3f:91:
20:ff:c1:22:2d:60:5a:60:7f:bf:ee:1f:58:2b:99:
2e:5a:fd:1b:53:c6:95:dd:7b:3d:55:2a:92:77:b9:
15:58:b5:70:55:c0:bc:5a:f5:17:ca:9a:67:18:8b:
2c:b6:52:16:7a:c0:a0:5a:8c:5a:34:66:e9:66:01:
27:83:50:39:9e:53:81:16:50:11:9d:38:97:be:b9:
db:69:09:1e:4b:5e:52:62:6b:06:21:ef:99:e3:b3:
f5:2c:84:b9:25:d5:90:cd:f9:5c:2d:34:db:7f:4a:
7b:39:16:38:3c:07:e5:2d:29:2a:e7:a5:82:0c:0e:
43:2d:37:3d:2c:83:d0:9a:35:b5:5b:0d:ab:b2:97:
97:00:95:cb:c4:26:78:74:7d:2c:66:16:f9:f7:35:
6d:28:68:3b:8f:1d:20:2f:26:4e:47:23:25:b7:71:
41:01:64:e3:11:6d:80:98:81:89:a9:43:0a:33:dd:
a0:9f:5d:34:ac:56:ed:3f:67:9e:25:59:3c:70:f6:
e6:47:6f:4f:0d:5b:56:db:69:f5:5c:94:6b:e8:21:
34:0e:e9:a6:04:1d:29:9d:d5:f0:bc:ed:fe:42:ba:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:94:02:4D:50:56:BF:06:32:86:8B:E8:64:8A:EB:B5:3C:B2:C3
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:d2:04:cf:2f:b1:4e:2c:1a:0e:86:1d:54:a4:d5:20:1b:
31:4a:db:f2:00:91:d4:0a:51:6f:f7:03:a0:6e:a9:82:5a:f9:
11:21:d8:66:08:70:36:4a:37:aa:04:8c:39:9f:de:c3:08:f1:
48:c5:e4:5f:d7:c8:cf:24:33:05:09:38:52:66:cb:01:0c:da:
8e:07:44:bb:c6:56:6d:23:1d:d1:41:92:0b:e1:89:8d:67:8c:
67:ce:70:f4:ac:37:c6:f6:ee:e1:06:ff:da:14:84:7b:53:9c:
0b:ba:29:44:27:bc:59:5c:7e:66:23:56:c4:32:3c:0e:e3:4e:
ff:2d:56:bf:1c:bf:6e:a9:cc:6f:95:59:db:6a:4b:09:2f:17:
44:e8:d3:45:ac:31:43:2d:20:c9:d7:cd:81:3c:f9:38:c1:8f:
e3:3c:61:6b:54:39:c2:a1:d7:51:b1:8a:ac:5d:72:af:1e:a0:
a4:db:89:c7:56:5d:83:66:7d:70:34:b9:99:ed:1f:58:2f:27:
38:38:93:a4:32:ce:37:68:57:79:fd:5d:90:39:c6:4d:76:c5:
c5:72:08:50:df:6f:45:e2:8b:cc:4b:2a:1c:77:96:4e:51:8d:
cf:2e:2e:70:b3:3d:3f:5c:09:02:4a:21:b9:bb:2b:04:07:f2:
47:37:b7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbWbVGSGvgHZWwF5u/E/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODkwZDA1ZDVjODhiN2RlNmY1YmFhNGMxZDA4NWZlNzMw
MWY1ZDUwHhcNMjYwNzI0MDAwMTMzWhcNMjYwNzI1MDAwMTMzWjAzMTEwLwYDVQQD
EyhmMDg1OTQwMjRkNTA1NmJmMDYzMjg2OGJlODY0OGFlYmI1M2NiMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp00u+g+FO5/ibh0oWjNwyZSAbRnd
PYu2uF+sP5Eg/8EiLWBaYH+/7h9YK5kuWv0bU8aV3Xs9VSqSd7kVWLVwVcC8WvUX
yppnGIsstlIWesCgWoxaNGbpZgEng1A5nlOBFlARnTiXvrnbaQkeS15SYmsGIe+Z
47P1LIS5JdWQzflcLTTbf0p7ORY4PAflLSkq56WCDA5DLTc9LIPQmjW1Ww2rspeX
AJXLxCZ4dH0sZhb59zVtKGg7jx0gLyZORyMlt3FBAWTjEW2AmIGJqUMKM92gn100
rFbtP2eeJVk8cPbmR29PDVtW22n1XJRr6CE0DummBB0pndXwvO3+QrpVVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCFlAJNUFa/BjKGi+hkiuu1PLLDMB8GA1UdIwQY
MBaAFNqJDQXVyIt95vW6pMHQhf5zAfXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYt
YjQ4MzZiYzE2NGExLzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYtYjQ4MzZiYzE2NGEx
LzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrjSBM8v
sU4sGg6GHVSk1SAbMUrb8gCR1ApRb/cDoG6pglr5ESHYZghwNko3qgSMOZ/ewwjx
SMXkX9fIzyQzBQk4UmbLAQzajgdEu8ZWbSMd0UGSC+GJjWeMZ85w9Kw3xvbu4Qb/
2hSEe1OcC7opRCe8WVx+ZiNWxDI8DuNO/y1Wvxy/bqnMb5VZ22pLCS8XROjTRawx
Qy0gydfNgTz5OMGP4zxha1Q5wqHXUbGKrF1yrx6gpNuJx1Zdg2Z9cDS5me0fWC8n
ODiTpDLON2hXef1dkDnGTXbFxXIIUN9vReKLzEsqHHeWTlGNzy4ucLM9P1wJAkoh
ubsrBAfyRze3tQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:38 2026 by rpki-client