Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: 40MKd+PLRVKJScn6xnr+86drTUivtx7lUrJ6Y298PB8=
Subject key identifier: 9B:39:7F:67:F6:2F:BD:42:18:8B:F4:C1:13:DF:06:BC:8D:5B:CF:9D
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 01A12C56CD4B151DEC44D234F6D2934D18DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 0A76
Signing time: Sun 11 Oct 2026 19:00:48 +0000
Manifest this update: Sun 11 Oct 2026 19:00:48 +0000
Manifest next update: Mon 12 Oct 2026 19:00:48 +0000
Files and hashes: 1: BO8ADzpo83mqg2wtWcdlFGRy8es.roa (hash: uPfVJC1lpWKzSiI9ihp2xNXSPIFIpPCsXMwwGJ0GDNM=)
2: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: 68bf56xsqaP1f/H1liUlh/QcfwUsTJE5CWuoGSEyG3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:cd:4b:15:1d:ec:44:d2:34:f6:d2:93:4d:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Oct 11 19:00:48 2026 GMT
Not After : Oct 12 19:00:48 2026 GMT
Subject: CN=9b397f67f62fbd42188bf4c113df06bc8d5bcf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:fe:15:32:fd:8a:8f:ea:c9:76:07:60:7d:
70:a3:85:55:58:2c:21:7d:d5:a5:0f:a5:cf:33:47:
34:4d:94:ab:95:d9:b5:3a:b8:b2:ae:fd:05:e4:3e:
fb:74:0a:48:1a:fc:a5:94:5e:22:f4:f7:cb:47:fa:
75:24:fb:9b:8e:22:34:81:4c:ed:bd:5e:f8:cb:a8:
25:fc:83:3a:1d:db:17:46:ae:13:9b:6c:26:5b:71:
63:39:cc:bc:39:b0:d6:77:fa:9f:c0:24:48:42:16:
13:95:a1:cb:b5:4f:63:3c:20:6c:11:ad:2b:01:e5:
17:04:00:ef:de:a2:84:8b:b5:df:fb:e9:31:3c:a9:
00:d1:7d:cf:79:a2:9a:3a:c3:1c:49:5d:71:f9:fb:
74:4e:e2:61:45:65:f5:5b:75:2b:d7:1d:a1:49:10:
a7:61:c9:03:ab:14:b8:09:7e:06:52:a5:cd:e4:f4:
1b:2b:b7:cd:4b:6c:31:2d:e8:ca:40:d5:05:14:1c:
f4:6b:ea:5d:19:f9:ba:5f:1c:64:ac:cc:1d:67:e8:
f5:74:c8:b9:44:a1:c7:8e:a3:a6:81:7d:46:11:0f:
b4:e3:2d:ba:3d:f0:c4:ea:03:54:47:55:7f:1a:83:
49:46:9f:61:f6:c3:51:98:5b:00:a2:44:7e:15:b3:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:7F:67:F6:2F:BD:42:18:8B:F4:C1:13:DF:06:BC:8D:5B:CF:9D
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3d:0d:07:4e:2a:81:e0:42:3f:86:43:5d:bc:5d:20:94:61:
8a:c0:b2:af:46:3b:2d:af:8a:62:d1:09:37:8e:82:51:2e:b5:
cc:6f:85:65:ef:1c:a3:fb:25:18:ab:74:7c:6f:27:d0:3c:cf:
88:7b:08:80:45:94:bd:fd:9d:e3:20:19:b2:6c:0f:ab:ae:b2:
39:a9:ce:66:d8:c2:8f:9e:a4:7d:3a:1d:42:ca:9d:c8:a6:ff:
3a:f1:46:24:b3:44:2f:56:96:8b:c7:bc:94:d5:9d:e4:70:23:
79:9d:5b:49:dd:f7:50:28:6f:52:09:bb:83:0c:f4:35:df:9c:
7f:ff:52:77:c1:25:2e:2d:b0:7b:c0:42:a7:75:dd:9c:b3:9f:
c7:74:a9:73:d1:46:00:d5:d3:01:f1:e3:49:01:9f:9f:04:1f:
cb:16:4e:e9:9f:78:58:6d:69:20:7a:16:92:51:0f:29:49:81:
d1:f4:94:69:6f:40:f2:00:12:71:ac:ea:b0:f1:93:e7:22:af:
28:46:39:74:a2:6f:3c:e1:27:1d:50:89:b4:7b:72:1b:3c:9b:
0a:ba:dc:ae:44:4b:59:ea:60:b7:20:55:d0:c8:18:e5:03:77:
fd:f5:62:0c:5b:d0:fc:f7:8f:4e:3a:1c:53:88:58:31:59:08:
bb:96:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:03:14 2026 by rpki-client