Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: b0KjWTc3ptGCEdrhc5nu2J6sojgbfbAsbhyrZdXh0T4=
Subject key identifier: E8:85:B4:07:05:07:EE:74:71:A2:B5:ED:28:80:94:A1:98:56:91:EA
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 01A0D314E38F0B192C3768FF223E9D9235AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 1894
Signing time: Thu 24 Sep 2026 11:02:36 +0000
Manifest this update: Thu 24 Sep 2026 11:02:36 +0000
Manifest next update: Fri 25 Sep 2026 11:02:36 +0000
Files and hashes: 1: CakG1y3Fn5idWONRdZg7rbvxA_E.asa (hash: HQuMV/VeQz78G82BlBpcw445Ff5+K/MkRwLH08aG4Dc=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: +Isq4Vx9BKFc1gG5RaJS1lweNB1itTpc5NfCfpspurY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:e3:8f:0b:19:2c:37:68:ff:22:3e:9d:92:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Sep 24 11:02:36 2026 GMT
Not After : Sep 25 11:02:36 2026 GMT
Subject: CN=e885b4070507ee7471a2b5ed288094a1985691ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:20:fa:08:4c:3f:e8:05:de:87:1f:76:b4:
99:38:01:63:bb:41:ec:96:19:1f:8f:f0:2d:48:dc:
17:f7:36:7e:72:55:63:44:f5:e4:47:83:df:6b:20:
b9:4a:ab:16:a1:cb:46:29:5e:f9:18:1d:e9:90:5a:
ab:99:c5:b7:bb:9f:f8:2d:be:c6:3a:ac:fe:7c:16:
1f:63:1c:10:06:87:47:c2:14:82:8d:5e:01:e0:5b:
f1:b3:16:b3:4c:9c:b0:7d:f2:8d:d0:b8:a6:21:75:
4c:a0:c5:c6:18:ab:9f:57:a8:b2:81:45:e7:98:77:
71:b1:34:d8:a9:98:aa:9c:9d:72:9a:a8:d0:0d:c7:
8f:49:a9:e0:4b:a7:fc:ec:5e:88:73:c8:68:88:53:
2c:0f:48:91:ce:9f:19:6f:6f:0a:ba:e6:06:a5:8f:
84:a9:59:e5:01:fe:5b:74:dc:cb:49:a1:2e:c7:05:
d7:8f:7f:df:ac:05:87:27:68:e0:25:54:e7:be:a1:
c4:31:65:cf:4e:58:5a:ac:bd:65:72:a9:86:47:d6:
87:18:fc:6c:1c:fc:52:c9:f9:08:7d:70:79:03:a0:
2a:ef:01:8d:ce:22:b1:cf:a0:bf:16:50:9d:f1:79:
8d:ea:94:51:84:60:8b:a4:25:a2:b6:d7:d4:02:f6:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:B4:07:05:07:EE:74:71:A2:B5:ED:28:80:94:A1:98:56:91:EA
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0e:d6:0f:3c:02:0e:83:67:36:85:67:66:d3:22:a1:e1:cb:
80:27:e6:1b:d7:9f:7e:a4:66:34:c9:9e:ce:18:49:8c:86:b5:
cd:9a:de:10:8a:12:e7:5a:4e:ac:90:8e:14:83:91:8b:fc:4d:
41:a7:c1:10:d3:fe:95:9d:a7:32:56:53:8e:b1:b9:1d:7f:d0:
c8:ab:54:1d:6b:63:87:bc:c3:3a:01:83:0a:ac:0c:0d:40:d3:
26:e7:07:16:6c:55:e2:0f:f4:42:cf:e5:b6:3b:12:99:0a:b3:
57:7f:57:69:db:21:41:01:56:2c:0a:38:c6:65:9a:a5:82:de:
5f:d9:dc:d4:0c:4a:4b:e4:4b:45:7e:28:30:50:91:b1:13:d0:
34:65:3e:b3:69:76:74:b1:74:c6:f6:42:8c:3c:d0:99:8e:53:
77:f3:77:46:d3:e0:62:24:2f:c5:49:7c:8e:6c:97:7d:2d:68:
10:0a:9c:ce:91:fb:df:72:4d:c8:4a:1d:64:e5:3a:df:75:78:
33:ce:01:02:8f:ec:b2:a1:31:d0:87:6d:0f:0e:c0:b7:62:82:
13:f2:fe:bb:82:72:09:ec:72:fd:d8:9b:97:48:b6:b3:31:b7:
d4:76:1d:a6:4c:dd:7f:89:74:43:f2:0d:30:1d:a0:e5:58:72:
29:12:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:56:59 2026 by rpki-client