Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: G3QNmTcreH9H+gJ6mAPirRcmfaEPl80q8U+XoatjXgM=
Subject key identifier: E8:54:5D:D2:D2:6C:90:84:F0:B3:AE:65:3E:61:47:37:60:D0:07:72
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 01A0DA96B5776BA8854694063DD447432443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 1759
Signing time: Fri 25 Sep 2026 22:01:44 +0000
Manifest this update: Fri 25 Sep 2026 22:01:44 +0000
Manifest next update: Sat 26 Sep 2026 22:01:44 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: 3If5LE1FenUj8vnMMThVGVgOoPUI5L47bq//MWE74uQ=)
2: jZ_PcWcN6a-O2Z-3tx9t6lTT23M.roa (hash: EYrD0BtGRs4bNIFPrVTFK250phWOgkEv3oi3twZMLNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:b5:77:6b:a8:85:46:94:06:3d:d4:47:43:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Sep 25 22:01:44 2026 GMT
Not After : Sep 26 22:01:44 2026 GMT
Subject: CN=e8545dd2d26c9084f0b3ae653e61473760d00772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:40:42:b1:a5:3d:ad:9a:0f:09:11:df:e3:
6f:20:06:ad:87:e7:a1:fd:2f:d1:19:84:b4:b1:65:
6d:4e:ee:9b:92:f3:da:5f:2c:d1:80:7d:e7:69:5a:
69:29:c0:7c:4f:64:56:f0:64:2e:e4:07:83:bc:b9:
ae:59:f8:f5:b8:df:3c:12:47:7d:9a:df:2e:8d:e1:
d5:d9:99:59:d8:f2:9b:ad:61:38:3d:e9:c0:00:a0:
f3:5f:15:56:09:b1:bf:11:17:a9:ce:57:a5:25:ed:
f2:0d:f2:77:ab:b7:75:09:6d:25:67:70:80:3a:14:
c8:5e:46:37:b2:83:38:9c:06:d2:f1:79:12:dc:41:
ea:fd:36:fa:f8:f7:fd:f9:7c:41:c0:8b:e0:43:49:
3c:38:bc:20:bd:53:79:17:dd:75:ab:f9:f2:1e:d5:
70:a3:3f:83:24:37:5e:8e:ed:cf:b8:25:c0:46:b9:
cc:ff:ef:da:d5:3f:af:b9:50:8b:81:b2:35:ad:44:
b4:97:f3:6b:60:d3:0e:ff:48:b9:45:e7:cf:8f:18:
bc:1a:ca:6e:4d:68:03:c2:01:ba:bc:89:3a:1f:e9:
90:c0:12:be:68:68:0a:e1:b1:89:02:44:c4:17:ed:
74:89:57:ae:d4:88:b9:97:2b:8f:42:9e:e8:88:74:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:5D:D2:D2:6C:90:84:F0:B3:AE:65:3E:61:47:37:60:D0:07:72
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e4:0f:2b:95:4f:66:df:b0:77:79:2e:98:a3:97:22:ca:a9:
f5:44:be:33:a2:1c:c9:22:5d:40:73:0f:e3:ba:d5:b8:ff:3e:
21:e1:cb:9a:ae:bd:79:b3:f9:45:53:b1:63:5d:8a:64:93:1d:
5c:0b:ed:ca:a6:dd:c6:cc:9b:0e:f8:3b:28:88:d4:34:b8:fa:
40:ec:2f:49:d8:ce:99:a7:93:93:af:b2:6a:1a:1b:6a:e1:1d:
e3:92:cd:de:86:14:37:58:17:c7:e3:5e:26:88:74:0c:e2:88:
8b:4d:be:31:54:62:e6:fa:1d:e0:78:18:7f:04:f7:fb:a0:98:
c0:d2:f6:4d:39:58:ac:38:c5:64:43:d7:42:55:9e:4d:40:08:
23:9f:00:cb:14:00:19:3a:65:29:ca:d5:26:fa:c7:03:8e:43:
ab:56:b9:26:43:eb:08:ca:a5:c7:63:ea:d0:81:2e:da:63:f2:
61:a2:1f:b6:93:be:50:ca:8b:9e:78:ff:a1:33:b9:b6:53:34:
b2:95:02:25:38:60:ff:98:79:c1:2d:8e:d2:a1:c9:15:ba:b9:
4e:af:c3:06:de:c9:b6:cf:89:4a:1d:bf:4c:ff:fc:1b:09:36:
b4:12:e2:92:aa:cc:6d:8e:56:b9:e0:a8:a8:c8:c0:99:22:78:
1b:9f:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:41:48 2026 by rpki-client