Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json)
Hash identifier: zZZxhi5wfiG0fwfqcIlnwzJTZ4x3yPuYT/FojkLIWO4=
Subject key identifier: BD:02:23:56:50:C4:20:95:32:95:B7:06:93:94:2D:34:1B:C9:EA:55
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 01A0CF35D8C2C142A524008C215D5E0434AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
Manifest number: 1892
Signing time: Wed 23 Sep 2026 17:00:07 +0000
Manifest this update: Wed 23 Sep 2026 17:00:07 +0000
Manifest next update: Thu 24 Sep 2026 17:00:07 +0000
Files and hashes: 1: CakG1y3Fn5idWONRdZg7rbvxA_E.asa (hash: HQuMV/VeQz78G82BlBpcw445Ff5+K/MkRwLH08aG4Dc=)
2: IjN9w9R69yDRWNftVupxbr7ls4w.roa (hash: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs=)
3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: /7Xe8WjArEh5Ghn6ygto4c8JkjmFub5f3qakexDysh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:d8:c2:c1:42:a5:24:00:8c:21:5d:5e:04:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Sep 23 17:00:07 2026 GMT
Not After : Sep 24 17:00:07 2026 GMT
Subject: CN=bd02235650c420953295b70693942d341bc9ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:2b:79:07:16:30:8b:47:25:e5:2f:38:3e:
b1:14:9c:c0:cc:84:91:dd:6e:ab:e0:a3:11:b4:55:
71:83:09:53:fc:ec:84:aa:1e:79:c2:af:e6:f8:34:
f4:1e:fe:cb:c0:85:34:69:ca:96:86:a9:70:c4:42:
9b:f4:8d:d8:3f:38:cb:8e:95:1f:e4:62:2c:55:f4:
f1:0f:c8:68:cc:78:7e:b0:67:d1:6c:6d:ab:b5:94:
f2:6b:4c:06:0c:3a:bb:8a:0a:a2:e3:16:32:25:db:
20:d7:c7:c2:8a:b8:3d:f8:73:72:81:b2:17:93:14:
df:6f:1b:51:da:4d:6e:94:d8:d4:6c:cb:3c:53:9f:
68:5a:af:50:90:9f:8a:f0:1c:33:65:be:00:a9:26:
37:df:55:93:7f:04:44:0c:78:3a:f5:78:5a:8c:5d:
9b:db:52:56:45:33:94:fe:2a:23:7b:37:df:49:e9:
67:34:1d:70:4a:81:da:21:4a:c4:3c:f9:f2:95:b0:
1f:e8:37:b1:90:dd:f1:82:8e:47:77:33:f4:c0:f5:
41:47:af:07:e0:35:a6:82:49:ab:a3:7a:0b:f8:9f:
89:89:02:87:33:96:8f:38:91:21:8a:e8:bf:86:2a:
f6:97:74:62:d1:e1:4a:ab:74:ba:55:ff:3d:1e:09:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:23:56:50:C4:20:95:32:95:B7:06:93:94:2D:34:1B:C9:EA:55
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:97:bf:a7:ab:a5:1c:03:25:4e:a7:82:73:04:ac:c9:0e:f7:
ff:63:76:b9:c4:88:02:90:27:54:d3:0b:68:ab:dd:54:83:98:
02:ab:90:62:55:71:ac:b5:47:a2:ad:a5:32:cb:57:1d:98:93:
aa:e5:12:88:f7:3b:5b:5a:59:87:92:97:fc:6d:02:d9:f5:f0:
bd:bc:a6:be:39:c2:38:44:e6:6a:6e:97:7a:d7:c0:24:72:f9:
2c:c0:52:83:2c:b4:17:23:7a:fe:2a:a9:89:1a:1d:09:c8:65:
df:80:c8:c2:57:74:34:76:58:f2:13:b8:5c:b9:b2:3d:a0:0b:
02:08:a7:3e:b5:59:2a:c7:26:56:11:1c:6c:b5:81:ba:43:3f:
94:c5:70:b6:a4:8a:da:e2:c9:bb:77:d0:cc:9a:99:94:bc:ed:
10:85:28:d9:2b:f6:1d:82:9d:d6:04:84:78:1a:5e:ef:a1:06:
ac:2a:4e:92:a1:e6:ee:d6:7f:06:49:43:c6:e3:8b:c2:00:18:
66:80:32:1c:78:20:63:a5:ac:07:99:e5:ef:f5:49:09:da:21:
df:7d:0e:b7:1f:1d:72:f0:7b:4b:11:68:11:6a:df:3c:77:80:
72:3a:cd:7a:9a:83:5e:fe:93:a1:e8:d0:c4:45:f9:c5:84:ef:
e5:10:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:06 2026 by rpki-client