Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: HbRRztuoAamLISdCFX53D6Akofhc680GpKxRYCaBhu0=
Subject key identifier: 5F:CF:0C:F6:0D:4C:73:AD:C9:4C:44:54:76:8E:B9:3C:D5:BD:D5:F2
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019F8EA219AC451E6CA8341943244FC59390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 11:00:15 +0000
Manifest this update: Thu 23 Jul 2026 11:00:15 +0000
Manifest next update: Fri 24 Jul 2026 11:00:15 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: TGfNe/snPeEzF8GNjtb/D3w3i3uVXXWV0Bl6Zszdrzg=)
2: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
3: e8ndPG9CObZDTj-sbT27mV5jA-Y.asa (hash: BjxkMb2x4BWpZqw1S8ecX2TBOaHQJopVWEi2IJdALRM=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:19:ac:45:1e:6c:a8:34:19:43:24:4f:c5:93:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jul 23 11:00:15 2026 GMT
Not After : Jul 24 11:00:15 2026 GMT
Subject: CN=5fcf0cf60d4c73adc94c4454768eb93cd5bdd5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:db:af:87:52:85:18:6a:c5:79:46:40:d9:
2f:5b:9a:87:41:3a:5d:4a:63:98:bf:00:4d:50:9e:
09:17:09:c0:4a:46:37:89:1e:90:7a:69:94:b6:70:
b4:76:16:6d:b4:b0:3a:05:ed:e5:a4:17:4b:e3:11:
cf:f6:77:69:01:ec:10:9c:f1:1b:54:db:2f:7a:a2:
a8:f6:ad:fb:99:28:f7:b6:41:e2:c1:c8:45:b4:b2:
6a:27:09:71:dc:8c:f0:e2:22:c7:0b:96:68:4c:7c:
e0:97:9c:7a:0b:3d:66:7e:3c:0b:4d:0c:59:10:ff:
53:c5:40:a1:99:b8:67:c9:5d:4d:8f:48:3e:35:6e:
33:b9:73:0c:58:67:aa:00:1c:28:00:89:4d:aa:7c:
e8:25:9c:19:94:d8:e0:f4:da:a8:a3:d3:d8:54:a9:
04:f2:15:fe:3b:b7:38:82:3e:f6:de:1d:8c:3f:a3:
56:f3:a2:80:82:23:ae:39:f1:27:1d:55:8b:d9:29:
3c:0c:be:9d:2b:01:02:0d:d6:69:06:c1:94:be:7c:
eb:55:75:07:46:1c:e0:db:be:52:4d:64:81:1e:a0:
ae:f1:98:d1:08:6f:f3:ca:80:db:ae:cb:c5:16:ae:
4f:6c:90:ba:f2:f7:9e:38:d9:da:f3:76:00:16:d3:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:0C:F6:0D:4C:73:AD:C9:4C:44:54:76:8E:B9:3C:D5:BD:D5:F2
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f7:82:b4:e1:68:ef:71:53:09:c9:bd:ae:37:48:ff:ab:3e:
9d:29:f8:a6:c4:cb:0d:f2:c0:46:54:63:83:fe:fd:6c:e1:15:
aa:7e:29:f7:d8:f6:80:72:ef:84:01:2c:58:52:fd:98:b8:16:
3a:52:4d:d4:52:11:26:df:8d:d5:1a:c6:a8:58:d4:a2:28:02:
20:f8:06:70:9a:42:82:dc:35:76:95:b8:ab:9b:f3:ff:90:67:
60:79:43:2c:63:3c:3c:f2:c7:f9:24:de:e7:32:92:62:57:77:
b4:e6:f4:ef:db:97:1b:4c:88:f0:dd:de:eb:22:42:12:dc:77:
70:18:91:b1:ff:c4:75:03:74:ad:2b:ec:e4:23:68:d6:c8:cb:
99:7d:a8:24:b6:74:90:ad:71:fa:ce:f1:00:bc:42:20:fd:22:
ed:cc:f5:72:1b:04:9e:de:9e:3c:80:40:8f:45:2a:1a:f0:e8:
2f:d5:f6:cf:7a:8e:c8:46:f5:b3:e1:10:cb:da:e7:04:04:42:
df:e1:a7:fd:68:bb:bd:b0:f8:a0:a8:3b:4b:8f:18:38:40:a6:
5e:e9:11:2f:11:66:4b:2a:11:65:6b:cd:a0:d2:f2:e7:7b:d0:
4b:0b:dd:c5:14:53:e1:ba:54:2c:bb:63:36:48:a3:e0:70:6a:
7e:0c:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:27 2026 by rpki-client