Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: k/7jU5MP1bNadUVXFIzYjGb6t3FmMAyLXBvEmT+Yqso=
Subject key identifier: 18:6F:26:9A:BE:DE:1E:44:1A:48:51:F8:57:05:88:F8:E0:BD:D1:C5
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 01A1DF83714BD4538EC7024A7A54837FD919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 14:01:35 +0000
Manifest this update: Sun 15 Nov 2026 14:01:35 +0000
Manifest next update: Mon 16 Nov 2026 14:01:35 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: qol6vvAr14zV8huHT04Jk7lLNbMxeBpsAqiGMCcaPhg=)
2: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
3: e8ndPG9CObZDTj-sbT27mV5jA-Y.asa (hash: BjxkMb2x4BWpZqw1S8ecX2TBOaHQJopVWEi2IJdALRM=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:71:4b:d4:53:8e:c7:02:4a:7a:54:83:7f:d9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Nov 15 14:01:35 2026 GMT
Not After : Nov 16 14:01:35 2026 GMT
Subject: CN=186f269abede1e441a4851f8570588f8e0bdd1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:02:90:11:f2:47:d1:f7:67:1c:05:81:5c:
7e:73:2c:73:ad:35:e9:19:80:8b:fe:5d:e6:b1:b3:
36:38:51:d9:cd:6c:72:61:43:64:e7:30:d4:c4:6e:
5b:e0:f7:ea:c9:6d:bd:2b:4e:44:75:4d:a6:c6:4d:
5b:2e:18:2e:c5:cc:23:8e:0b:b9:30:fe:12:39:f6:
f8:25:2d:cf:3b:90:4f:f8:d2:3a:fd:24:fc:22:37:
e1:14:11:c3:14:f9:bf:a2:f4:36:1b:52:91:b6:74:
53:c6:d8:19:c5:34:de:a6:ec:09:58:0e:85:b4:5e:
aa:f7:cb:da:03:4b:49:60:9a:e8:44:89:c0:e6:49:
d1:da:2f:af:4a:0c:ee:90:01:cb:52:ea:7e:f8:f2:
8d:d3:07:c9:04:64:39:24:f3:72:dc:c6:ef:a9:ed:
c6:59:b1:96:75:fd:d0:19:66:5c:c3:a1:fe:51:db:
8c:c5:1b:e4:f1:cf:aa:d4:58:0e:57:ba:9b:2e:9b:
76:d5:46:de:ad:b9:d5:fe:fa:0f:19:c9:72:27:9b:
86:e2:e9:7d:60:03:93:a3:5f:47:d5:bc:6e:de:82:
9f:55:b0:a6:cf:c3:4a:51:9e:ee:59:13:74:f0:94:
87:1c:c5:29:40:fe:43:f6:4d:67:74:ab:53:ab:aa:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6F:26:9A:BE:DE:1E:44:1A:48:51:F8:57:05:88:F8:E0:BD:D1:C5
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:71:e0:7e:d0:35:79:ac:f0:79:05:fd:97:70:88:88:1c:9a:
a8:e4:8c:fc:d7:a7:b8:d7:1a:f8:7e:78:c1:9a:64:40:c6:70:
7f:fa:9f:6b:22:fd:b9:08:17:4b:94:8a:12:28:7a:5f:4c:7a:
0e:80:62:75:2e:8b:f3:3b:ff:00:83:1a:9a:5f:fd:21:57:e2:
a0:d9:a5:9c:14:8d:08:bc:2f:31:dd:0a:c7:b9:96:90:18:4b:
2d:fd:ed:16:ad:87:26:7e:27:83:af:49:c1:dc:af:1a:54:4f:
bb:e1:5f:39:d8:88:f3:53:e0:94:3d:23:a5:ae:bf:93:82:8e:
c5:5d:3e:d3:31:d3:56:56:b3:4f:cf:f9:29:79:0c:0d:03:43:
3c:79:b0:52:ac:4d:a3:c8:1a:e8:d5:be:1d:d1:08:3a:7c:9a:
e3:fe:29:c6:e7:7f:a8:c3:6f:28:ef:3e:4b:3e:22:f0:cd:ab:
98:d5:3b:7c:42:be:cd:96:f9:2e:cc:15:a0:18:87:cc:d7:21:
39:5a:78:ce:aa:23:40:5f:09:30:4e:8e:b3:04:ba:01:c5:fd:
41:6b:51:67:59:16:11:a9:1f:c5:e4:97:0e:66:db:69:82:bc:
5c:2a:40:6b:76:a3:5f:4a:df:ec:f7:82:14:1f:27:31:13:db:
ed:a4:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:30 2026 by rpki-client