Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: hH8kNEgkp2grfjplfVe/3k47X321v7bDBRxXjKnS8tY=
Subject key identifier: 02:AE:17:47:76:70:9B:81:51:43:49:43:3F:1C:B3:90:38:70:AE:10
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 019F9059BD12B890EFFA14A70739BCD32BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 16AE
Signing time: Thu 23 Jul 2026 19:00:27 +0000
Manifest this update: Thu 23 Jul 2026 19:00:27 +0000
Manifest next update: Fri 24 Jul 2026 19:00:27 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: q4CzfeWnwiBwQPn5F2D1bLxfvYKlImbV0nLfQXy6Xc8=)
2: jZ_PcWcN6a-O2Z-3tx9t6lTT23M.roa (hash: EYrD0BtGRs4bNIFPrVTFK250phWOgkEv3oi3twZMLNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:bd:12:b8:90:ef:fa:14:a7:07:39:bc:d3:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Jul 23 19:00:27 2026 GMT
Not After : Jul 24 19:00:27 2026 GMT
Subject: CN=02ae174776709b81514349433f1cb3903870ae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:84:9c:e4:f9:3e:3d:e3:05:70:c0:20:da:
dd:88:e1:97:45:0a:c3:25:66:af:90:c7:d5:1d:3f:
f9:97:f0:ff:52:43:b1:c7:b9:e2:a6:74:a4:5e:54:
27:d8:19:db:c4:15:12:e6:af:d9:c0:4e:1f:af:a5:
70:87:ab:1e:c7:2b:d4:e7:9c:7f:e3:e6:7d:95:ff:
31:e7:0d:71:a7:4a:c0:af:87:75:79:97:81:01:57:
e9:34:90:e1:a4:cb:c2:a1:b4:f0:16:ce:7c:1d:14:
99:34:68:b8:a5:54:68:4a:d0:d7:cd:64:8f:79:62:
8e:0c:6c:6b:5c:3d:1a:f6:24:ec:ed:da:f9:b3:d3:
ed:f0:0c:ef:ab:d2:f3:21:3c:a0:ca:ea:45:1e:87:
1a:7f:ff:ed:ce:39:a2:0b:e9:a8:78:40:d4:ec:e1:
ea:99:43:e4:66:9d:d5:97:fa:cb:39:d5:c2:0e:c7:
6f:21:cd:e5:55:09:6b:81:97:3c:9a:6c:de:c9:47:
89:68:66:6d:6a:9c:95:d8:bc:a7:d7:15:31:dc:7d:
30:37:36:69:74:1d:dc:37:44:79:7d:b2:8d:7f:ba:
24:4a:ad:37:53:ba:15:be:3f:3d:50:01:51:68:06:
26:6a:6a:0d:92:a4:97:6a:9f:a3:c8:09:1c:53:77:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:17:47:76:70:9B:81:51:43:49:43:3F:1C:B3:90:38:70:AE:10
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d3:5e:bd:20:a1:8c:9c:84:1c:59:4d:51:be:7e:36:04:75:
d7:dd:26:78:2a:ce:83:c8:c6:52:1d:7c:4e:34:7c:79:6c:f6:
52:4f:07:4b:72:97:ec:6c:d6:e3:3d:0c:ed:0c:d4:83:82:f9:
58:91:d0:81:ee:0b:11:50:1e:52:f2:54:95:c2:47:0e:7f:87:
03:a8:ac:11:65:42:c6:e4:24:b3:d3:c6:88:8a:73:e7:14:ce:
64:8a:c8:b6:fc:29:73:0b:55:e5:f1:0c:3b:a1:f4:ec:43:fb:
ed:db:d2:a1:9b:aa:4c:75:83:d0:c8:59:8b:93:0d:4a:c0:88:
94:5e:5b:e6:6c:f3:38:48:0b:df:1d:92:c7:de:fb:be:db:da:
e1:2b:86:55:47:53:7e:6f:d3:ab:97:dd:bc:d8:77:a6:0c:84:
56:07:88:04:46:a2:9c:8c:d6:95:5d:d6:5a:c1:c3:4c:d8:80:
4a:c3:6c:e1:53:5c:72:0e:3a:84:a1:f3:32:af:26:27:f2:37:
b1:08:7f:07:10:af:85:8b:e0:54:6c:73:30:e1:6d:76:e3:2b:
ad:7b:ce:c7:2a:94:1e:da:7e:13:85:4d:ee:fb:c8:53:d3:a7:
7f:94:94:a9:db:5b:6b:21:88:11:a4:0d:3c:a2:a9:d3:5a:91:
8d:a3:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:17 2026 by rpki-client