Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
File: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft (raw, json)
Hash identifier: PjPVK7GV08NhJCfaiRyyUDsV92oarsFCPAseSLzOGtc=
Subject key identifier: 19:CE:6E:4A:6C:52:A1:B3:E2:2C:FF:AC:56:AF:6C:35:DD:4D:16:59
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Certificate issuer: /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial: 01A0D5390BEDC707FE381F8FED81DBBE17DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
Manifest number: 11FE
Signing time: Thu 24 Sep 2026 21:01:20 +0000
Manifest this update: Thu 24 Sep 2026 21:01:20 +0000
Manifest next update: Fri 25 Sep 2026 21:01:20 +0000
Files and hashes: 1: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl (hash: s6jTMjoVhgoDH4YumTiesWgXbLxtdwKCwzCyQFZicAI=)
2: XGXdZuWArU8DUaMKbDMpc7L7WG4.roa (hash: b1uv3hiq3QuqB6rWvknFaAIJIJ6UZQWlgoHNYzcvoDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:0b:ed:c7:07:fe:38:1f:8f:ed:81:db:be:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Validity
Not Before: Sep 24 21:01:20 2026 GMT
Not After : Sep 25 21:01:20 2026 GMT
Subject: CN=19ce6e4a6c52a1b3e22cffac56af6c35dd4d1659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:6f:e4:db:17:eb:da:74:db:1c:23:7d:5c:
81:97:13:75:1e:62:d6:54:59:4e:4e:c0:8e:16:ec:
1a:40:c5:05:80:5f:cd:2d:0a:b8:66:f7:48:83:72:
a0:2a:1e:20:4a:12:43:1d:88:1e:57:de:ac:5f:2b:
93:d9:f4:27:ff:2f:10:32:0f:f1:b7:93:fd:23:01:
94:2b:15:69:b1:0a:05:92:da:3e:4c:ff:06:e6:ee:
85:3a:dc:3c:b9:83:72:77:5c:fa:69:0a:88:08:56:
64:67:b2:96:06:75:e0:12:a0:38:1c:b6:c5:1f:a5:
8d:e9:8d:c2:fc:7c:18:b3:47:33:8c:ce:47:88:86:
da:80:34:66:e3:83:96:63:99:52:d8:39:f1:2b:ab:
30:6d:ca:b6:75:ab:ec:3e:9a:ac:f7:75:24:82:3c:
ad:23:e6:27:f2:01:e4:b3:bd:42:5e:71:35:10:57:
af:68:35:75:33:80:c1:9d:db:1a:7d:cc:4d:dc:40:
39:a6:1c:ef:e4:f4:31:ac:af:9f:6f:06:a7:1a:88:
27:68:60:48:98:45:6f:98:24:8c:7f:67:93:78:6b:
48:d7:c3:c2:43:42:94:17:d7:2c:ac:54:66:de:d1:
26:9d:83:7c:cc:c6:39:99:25:a2:ba:02:bb:cc:0d:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:6E:4A:6C:52:A1:B3:E2:2C:FF:AC:56:AF:6C:35:DD:4D:16:59
X509v3 Authority Key Identifier:
keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c2:a9:2d:64:5d:89:05:8e:9f:80:50:9e:60:85:4f:01:30:
59:7e:74:1f:28:0a:a7:a4:b3:65:6a:3c:16:77:67:57:b7:36:
3b:d7:05:b5:56:84:16:3c:df:dc:ed:50:cc:77:77:bc:72:20:
b6:c8:bc:56:87:bf:e5:22:5f:58:5c:09:16:34:84:8c:61:45:
da:d1:4f:92:c6:58:b9:07:1a:3f:da:a6:70:6d:13:ac:5c:4f:
84:2c:d9:ca:32:48:26:86:f8:f7:7e:67:39:f0:51:70:ce:99:
14:84:77:55:20:d3:a5:cb:d9:5a:d2:24:44:94:ff:b2:16:75:
14:83:ee:07:d5:e4:11:27:66:0d:79:1d:9f:10:02:f3:47:47:
55:75:50:9b:70:58:1a:2d:1c:ba:ff:63:ba:19:bf:62:fe:43:
e2:5b:7c:44:da:a8:b8:65:13:0c:c8:6e:35:dd:a7:61:89:f4:
a1:15:aa:5b:40:9a:08:e2:33:5e:e9:98:36:9b:27:e5:06:5e:
aa:34:cb:8b:cd:15:05:e1:0d:0d:92:f4:f3:94:cb:39:28:f1:
be:e3:17:f5:d8:9f:e0:5b:a9:4b:ab:68:96:59:bd:df:04:8d:
e1:6f:ac:38:f1:82:b2:57:27:ed:e8:0b:b1:f4:6a:4b:7d:11:
a3:5c:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:07 2026 by rpki-client