Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: dQkYWie/Rh0pCBZhzD8iAq8nhSWwVciHM3VlYiJPKFg=
Subject key identifier: 68:8F:23:23:4F:3D:A5:99:E8:F7:7F:65:3D:4D:C3:5C:84:BA:A7:78
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 01A0C96BBE225EF9644115C97C2AEA5F57F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 14:01:16 +0000
Manifest this update: Tue 22 Sep 2026 14:01:16 +0000
Manifest next update: Wed 23 Sep 2026 14:01:16 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: BAHZkgeeN+AM2L3dIaRNifxeWkeThpydaukIGPNFrtU=)
2: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
3: e8ndPG9CObZDTj-sbT27mV5jA-Y.asa (hash: BjxkMb2x4BWpZqw1S8ecX2TBOaHQJopVWEi2IJdALRM=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:be:22:5e:f9:64:41:15:c9:7c:2a:ea:5f:57:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Sep 22 14:01:16 2026 GMT
Not After : Sep 23 14:01:16 2026 GMT
Subject: CN=688f23234f3da599e8f77f653d4dc35c84baa778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:8e:bb:16:60:d6:78:90:87:e7:db:18:7e:
61:45:23:a1:ba:7f:88:75:d0:c1:15:af:3e:d9:ee:
5a:0d:75:12:6c:ef:36:36:01:58:86:f8:f1:cd:87:
8e:c3:77:fb:9e:40:df:59:b8:7a:3b:86:f5:bb:d3:
e1:c2:d3:41:65:9c:db:70:88:3c:a3:a6:64:c0:94:
13:28:24:77:ea:0e:d6:92:28:73:0f:4b:de:c5:62:
50:94:7b:c9:db:20:9c:fd:b9:0c:de:cc:d5:3d:9c:
ae:d6:1e:23:af:89:15:16:a6:d8:48:c2:1d:bc:bc:
e9:d0:7f:37:be:9d:47:01:78:05:fc:5d:c8:5a:c0:
ba:22:5a:9f:07:cd:80:a5:24:69:e5:47:d0:b5:bc:
0b:3a:58:b1:a8:c8:5e:a7:54:69:a4:2f:b1:82:59:
44:a1:70:8c:85:7a:37:9f:bc:fd:91:72:ae:d4:2a:
ed:37:37:d6:28:93:f5:3d:0e:4d:ff:b1:ac:c5:b6:
2f:00:d2:4d:d9:4c:ce:5f:f7:cb:9b:b4:00:33:c0:
43:93:ca:9f:5b:3f:60:b3:8c:13:a0:14:23:10:f3:
dc:f5:fa:a0:fc:d6:50:1a:16:2e:68:69:05:31:9d:
1f:fd:0a:18:8e:26:f7:99:9f:42:2d:11:39:78:94:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:23:23:4F:3D:A5:99:E8:F7:7F:65:3D:4D:C3:5C:84:BA:A7:78
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:14:4d:a8:c0:4b:a1:72:a4:47:74:b2:94:3f:20:f4:e3:ab:
f0:ed:33:79:71:87:74:f9:47:da:21:da:6a:ce:d3:0c:54:29:
34:c6:cc:27:05:b1:e4:2f:36:aa:d5:a4:af:c6:9c:47:f4:90:
b7:1d:c2:80:aa:ff:b3:22:a3:89:66:14:b7:a2:39:cb:c8:ac:
86:6d:0b:ae:dc:a8:4c:99:42:5a:87:69:1a:db:51:ac:53:03:
74:fc:9c:d3:17:5f:f5:79:59:c0:d9:05:85:de:c2:7a:92:97:
e6:f6:78:07:4a:30:59:51:ea:d9:5e:d1:8e:c9:68:fe:92:97:
a5:9b:97:f3:89:f7:10:ed:11:aa:db:8f:52:d8:4e:31:2f:cc:
dd:b9:90:c4:a2:f7:c2:85:5b:7c:09:f8:16:54:b5:0c:9a:97:
7e:f1:bc:2b:ad:58:82:93:78:82:eb:d5:5f:26:8b:02:1b:f7:
02:33:f7:fc:4d:07:cc:f0:24:2c:8c:87:ae:7b:f8:93:f8:83:
68:59:4e:71:ec:59:c4:de:2d:65:b7:8c:af:a3:09:62:e4:d0:
b9:92:8c:8f:af:e5:62:80:26:df:e9:21:d5:25:6a:eb:a3:0c:
65:ad:dc:07:75:30:83:26:c8:42:1f:1d:43:1c:d8:8e:b0:e2:
1b:dc:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:50 2026 by rpki-client