Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: kMOhEg9XdRWvqCpjz2cWz4CMkJmG4ynQRJxrboJLHZ8=
Subject key identifier: 9B:26:FB:66:68:AB:03:51:2F:AF:A5:B0:8D:B5:1B:7C:D0:8D:50:C4
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 019D2583AEF0DC6FB7C1B1DEB9C2C0C03466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0CDD
Signing time: Wed 25 Mar 2026 15:01:20 +0000
Manifest this update: Wed 25 Mar 2026 15:01:20 +0000
Manifest next update: Thu 26 Mar 2026 15:01:20 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: xu9+x8t9cMgRh3Vl9C+4fX6G/MGQym7IFIGIEiNmAXU=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ae:f0:dc:6f:b7:c1:b1:de:b9:c2:c0:c0:34:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Mar 25 15:01:20 2026 GMT
Not After : Mar 26 15:01:20 2026 GMT
Subject: CN=9b26fb6668ab03512fafa5b08db51b7cd08d50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:93:1b:c3:fe:67:9c:38:7f:6b:19:30:01:
9c:26:eb:4f:8f:53:44:7a:89:a1:d8:4d:2c:99:17:
fa:6f:e8:c5:9e:35:72:3d:0e:8e:42:a1:a0:f7:15:
19:9c:92:28:e0:d9:8c:db:b5:98:9d:71:25:1c:3f:
44:48:55:4a:da:3b:ea:ed:2d:6c:c3:74:dc:cc:d7:
93:46:50:8f:1c:f0:9b:80:f3:99:ca:cf:d7:c2:71:
82:e5:4f:06:70:1d:ef:ce:d9:50:81:e9:f0:bb:ee:
23:c5:88:1d:89:ee:ae:5e:ca:7b:4b:04:c8:17:5c:
4e:a8:1b:26:5a:6b:ab:ce:83:4f:30:42:3d:27:c5:
fd:52:9c:1d:6a:a3:fe:16:05:87:ab:93:c8:0a:77:
34:87:3c:6d:60:92:76:ba:ff:e5:70:f2:4a:20:85:
25:bc:fa:86:de:97:c0:99:9e:23:82:46:ea:f3:9f:
01:13:20:0f:73:d3:4c:14:4e:60:dd:c6:34:8c:ef:
76:fa:f3:96:1a:a8:00:32:c9:7d:0d:c1:bb:4a:e4:
33:0f:c8:28:e8:f9:60:f1:2c:b0:43:a2:db:64:90:
c3:be:88:dd:b2:16:8f:94:7f:72:fa:71:af:c1:87:
fa:a5:0f:4d:a5:e6:67:55:f2:9d:0a:f4:a8:8e:77:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:26:FB:66:68:AB:03:51:2F:AF:A5:B0:8D:B5:1B:7C:D0:8D:50:C4
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c9:24:8f:3a:bf:45:f9:c6:20:c5:ef:05:3e:c5:7b:66:7f:
e3:2a:20:95:3e:cf:a9:44:ea:b5:3e:81:60:fe:4e:f2:cc:8d:
57:a8:1a:8a:91:4c:c3:4a:3e:03:11:1d:4a:44:c5:48:a4:75:
76:88:81:cc:97:e7:23:61:98:2c:dd:1f:04:5d:de:da:9b:ad:
dc:09:84:aa:a1:a7:00:76:1c:94:f9:3a:d1:ee:c3:7e:41:27:
d6:f3:0e:2f:ba:ef:53:2f:d8:c0:69:ef:b5:c0:78:3d:01:90:
40:d3:2d:16:07:3c:55:dc:c1:ac:30:04:ab:97:71:53:c2:37:
41:99:c7:8f:86:cb:6b:4d:ed:89:36:00:c4:0d:f7:40:02:87:
16:78:f9:d4:de:79:21:72:ba:8c:dc:e2:46:aa:3c:8f:b8:ce:
da:f6:84:a2:3b:d9:e7:b8:b2:4d:00:0b:05:64:a0:51:62:9f:
be:be:b5:b7:a5:65:60:0b:25:b2:31:ac:6f:7f:3e:88:79:4b:
ac:4a:7a:f2:4d:a9:52:c4:99:cc:0b:1f:fd:0b:53:ac:43:8d:
a9:89:78:26:c4:72:02:cc:18:cb:68:68:e5:4f:60:88:32:21:
82:e3:63:42:4d:84:01:61:24:7f:14:dd:2d:d2:2f:fc:f2:57:
12:56:92:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg67w3G+3wbHeucLAwDRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODkwZDA1ZDVjODhiN2RlNmY1YmFhNGMxZDA4NWZlNzMw
MWY1ZDUwHhcNMjYwMzI1MTUwMTIwWhcNMjYwMzI2MTUwMTIwWjAzMTEwLwYDVQQD
Eyg5YjI2ZmI2NjY4YWIwMzUxMmZhZmE1YjA4ZGI1MWI3Y2QwOGQ1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsaTG8P+Z5w4f2sZMAGcJutPj1NE
eomh2E0smRf6b+jFnjVyPQ6OQqGg9xUZnJIo4NmM27WYnXElHD9ESFVK2jvq7S1s
w3TczNeTRlCPHPCbgPOZys/XwnGC5U8GcB3vztlQgenwu+4jxYgdie6uXsp7SwTI
F1xOqBsmWmurzoNPMEI9J8X9UpwdaqP+FgWHq5PICnc0hzxtYJJ2uv/lcPJKIIUl
vPqG3pfAmZ4jgkbq858BEyAPc9NMFE5g3cY0jO92+vOWGqgAMsl9DcG7SuQzD8go
6Plg8SywQ6LbZJDDvojdshaPlH9y+nGvwYf6pQ9NpeZnVfKdCvSojndJywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsm+2ZoqwNRL6+lsI21G3zQjVDEMB8GA1UdIwQY
MBaAFNqJDQXVyIt95vW6pMHQhf5zAfXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYt
YjQ4MzZiYzE2NGExLzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYtYjQ4MzZiYzE2NGEx
LzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAickkjzq/
RfnGIMXvBT7Fe2Z/4yoglT7PqUTqtT6BYP5O8syNV6gaipFMw0o+AxEdSkTFSKR1
doiBzJfnI2GYLN0fBF3e2put3AmEqqGnAHYclPk60e7DfkEn1vMOL7rvUy/YwGnv
tcB4PQGQQNMtFgc8VdzBrDAEq5dxU8I3QZnHj4bLa03tiTYAxA33QAKHFnj51N55
IXK6jNziRqo8j7jO2vaEojvZ57iyTQALBWSgUWKfvr61t6VlYAslsjGsb38+iHlL
rEp68k2pUsSZzAsf/QtTrEONqYl4JsRyAswYy2ho5U9giDIhguNjQk2EAWEkfxTd
LdIv/PJXElaSxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:22 2026 by rpki-client