Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: yWgASxYfgp5WKKTIAtZPbiCLBUQJTYnDk4SP/OIl6DQ=
Subject key identifier: 61:97:8B:BB:3B:9B:3D:73:0B:67:28:65:5D:83:8B:22:98:36:04:A3
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 01A0D7CCA044C7A7C4B9BD4B06BF81B026AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0EC7
Signing time: Fri 25 Sep 2026 09:01:46 +0000
Manifest this update: Fri 25 Sep 2026 09:01:46 +0000
Manifest next update: Sat 26 Sep 2026 09:01:46 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: SckKLqZ2G6ErUeNdY+BAW7BeBkW4xl7dsoFO/q7DuuQ=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:a0:44:c7:a7:c4:b9:bd:4b:06:bf:81:b0:26:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Sep 25 09:01:46 2026 GMT
Not After : Sep 26 09:01:46 2026 GMT
Subject: CN=61978bbb3b9b3d730b6728655d838b22983604a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:0c:72:81:38:fa:47:7d:49:42:f0:ea:24:
20:d2:ce:02:23:34:b9:4f:95:9c:5b:2e:1a:df:a0:
2f:10:4b:db:ba:ce:a4:d2:7f:81:1e:72:5d:65:70:
03:73:7b:f5:49:0f:df:cb:57:5a:60:c9:09:ab:90:
b7:f1:10:e6:08:ec:c2:e0:aa:86:05:75:4c:23:6d:
00:5c:f8:82:33:e0:3e:ac:f6:44:13:7e:2e:42:01:
6d:d5:d7:c3:d2:4e:83:ff:a4:fc:de:c1:e1:58:16:
8b:f2:ec:53:bd:ba:15:4e:51:05:0f:35:c1:1e:71:
c6:04:a7:ba:4b:8f:e8:e5:48:6a:4b:6d:ce:32:89:
7d:35:8a:fd:ce:ed:05:2d:52:77:16:82:bf:5f:05:
04:c0:00:72:c7:88:b7:44:a5:26:b3:40:14:08:99:
8a:50:6a:6e:47:b3:13:21:fc:b4:a8:bb:8f:5f:70:
84:ac:09:63:cd:9b:89:52:80:e5:e0:d7:b8:03:6e:
97:cb:57:d5:63:29:ac:34:0f:be:bf:45:66:ea:de:
99:e4:e0:bc:5a:8f:d1:a5:64:be:26:7a:41:5b:24:
50:a1:30:91:85:94:de:82:9f:05:77:bd:24:11:d0:
47:8d:a0:cd:3c:21:5b:db:c6:84:ff:ac:e0:18:13:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:8B:BB:3B:9B:3D:73:0B:67:28:65:5D:83:8B:22:98:36:04:A3
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:a8:7d:95:89:4d:7f:44:be:95:43:82:89:89:2c:00:8a:
0f:ea:28:cf:d9:47:0b:54:12:5c:2b:f3:c2:f9:68:40:3b:6b:
4c:6a:c3:61:19:10:c9:c7:c4:c9:ab:24:99:17:a5:94:31:c6:
91:a7:c2:ae:0f:cd:69:a2:6d:4a:a5:26:a9:cb:b4:e2:2c:3e:
3d:c8:b8:98:ad:84:d1:d8:0f:cb:8d:d3:85:70:9b:fe:f2:36:
e9:c4:17:ca:85:d3:80:31:34:a3:99:83:dc:04:ba:35:7e:be:
63:fd:bd:c1:7f:43:e0:df:6d:d4:39:f2:bd:20:15:5f:5f:5f:
58:64:4d:5b:ec:c7:3f:16:58:68:89:03:14:b6:19:f0:63:af:
ee:55:d8:85:09:f2:f7:a4:4b:a5:aa:7b:62:8d:51:0e:29:c5:
46:a3:0f:7d:0e:c9:85:ba:6e:7f:02:21:ed:dd:36:25:5d:73:
99:74:b2:0e:bd:06:77:b2:40:6c:38:17:cc:d4:80:6d:a8:db:
21:43:1c:05:d7:de:d7:bb:26:e3:2f:53:0e:53:42:8e:dd:ce:
27:f2:54:de:07:7b:70:7e:12:5e:15:7b:f0:30:99:a5:e6:62:
aa:98:83:dd:ef:54:f2:5f:e2:3e:8a:35:0e:31:7f:7d:3e:27:
c8:36:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:18:32 2026 by rpki-client