Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: /NjTqp+aSfvj9EvXEbko7VBjLI22db93f1dgi0LFTnE=
Subject key identifier: 63:58:BF:5C:7D:B3:75:28:67:CF:13:66:03:6C:A6:4A:21:DB:B7:5E
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019E1C7D915E48067914B2E518E11BD7620C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 09B2
Signing time: Tue 12 May 2026 14:00:51 +0000
Manifest this update: Tue 12 May 2026 14:00:51 +0000
Manifest next update: Wed 13 May 2026 14:00:51 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: ooYxY7USE/atgTRwQNYhYMXwp2Q6r1JeUDA26A6fs6A=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:91:5e:48:06:79:14:b2:e5:18:e1:1b:d7:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: May 12 14:00:51 2026 GMT
Not After : May 13 14:00:51 2026 GMT
Subject: CN=6358bf5c7db3752867cf1366036ca64a21dbb75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:53:27:75:66:7c:2d:65:3a:ad:29:8c:24:
6b:2f:cc:3f:54:b7:50:b7:8b:86:47:a6:0c:c1:6f:
26:53:00:bf:75:4b:c9:92:82:46:f1:6b:28:fe:e4:
da:9e:b3:10:83:12:ce:f9:a1:9e:f2:c9:0c:ae:42:
f6:80:aa:de:ae:8b:d4:e2:76:4a:73:ea:dd:4a:92:
e2:8d:6d:f1:5e:96:92:e3:10:ea:b2:77:ec:29:4f:
25:40:ea:41:3e:65:18:25:57:cd:06:73:3b:4f:c8:
6a:d3:7e:e3:ab:88:17:e6:20:21:e4:0e:32:e1:3e:
5f:af:a7:b5:de:1a:b2:77:6f:5c:a7:2e:bc:4d:c5:
1e:c2:17:c0:c3:03:99:0e:ae:47:46:4e:e7:37:63:
7c:3d:c3:89:91:c5:f5:c8:56:03:30:8d:5e:a3:c2:
06:28:41:18:72:a1:b2:4e:e3:20:8c:c5:6c:b6:64:
f3:79:7b:93:07:bc:41:eb:9d:da:d8:2a:96:13:19:
98:8b:20:d7:c2:3b:a7:db:fc:5b:ad:6b:20:12:cd:
78:cf:a3:cd:61:65:04:e0:4b:52:f6:a7:d9:cc:dd:
15:d3:c8:8b:22:f3:df:95:3d:c2:5e:62:e3:49:c7:
a0:3e:3e:be:90:65:9a:15:d3:a7:a6:4a:61:ff:4a:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:58:BF:5C:7D:B3:75:28:67:CF:13:66:03:6C:A6:4A:21:DB:B7:5E
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:21:ef:9e:cc:11:44:fe:fd:5b:f8:c2:54:f8:e2:ba:d8:e8:
84:7d:d7:7f:fc:37:f4:56:0e:60:3d:11:02:a4:13:ce:19:ad:
e1:09:5c:ff:88:11:85:6b:07:94:c1:16:3f:19:e9:7b:56:7f:
ef:21:28:b0:1b:e4:b7:12:88:5e:32:39:b0:88:5f:86:40:99:
42:df:32:5c:d4:ef:c8:dc:14:0f:9b:87:25:a6:30:c4:d1:1f:
9c:6b:f7:a4:f2:1f:24:48:43:a3:e1:79:63:b2:a5:dc:a8:09:
86:b2:ec:74:e4:0a:c8:13:62:6c:82:ba:cb:12:35:52:96:89:
44:6a:6f:a3:bf:9f:7b:5a:05:d6:a3:46:1b:6d:6f:c7:d2:69:
d8:e8:95:40:a3:35:0f:04:55:d6:4c:39:51:62:ae:89:7e:22:
df:29:d6:24:20:34:ad:d7:ff:22:c7:10:75:37:6c:55:59:8a:
9e:e6:0e:d2:40:95:b0:a2:ad:e1:db:b6:e9:45:51:d4:bd:e4:
54:c0:ba:c9:1b:14:27:6a:50:66:fb:ac:35:d0:57:66:09:91:
7b:dc:46:3e:7e:96:b8:f4:ea:d2:a4:f6:d3:50:81:56:9e:c4:
25:a1:5a:e6:d8:63:cc:ce:1a:92:3e:8b:97:0e:78:e9:a7:17:
18:07:3b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfZFeSAZ5FLLlGOEb12IMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjYwNTEyMTQwMDUxWhcNMjYwNTEzMTQwMDUxWjAzMTEwLwYDVQQD
Eyg2MzU4YmY1YzdkYjM3NTI4NjdjZjEzNjYwMzZjYTY0YTIxZGJiNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNtTJ3VmfC1lOq0pjCRrL8w/VLdQ
t4uGR6YMwW8mUwC/dUvJkoJG8Wso/uTanrMQgxLO+aGe8skMrkL2gKrerovU4nZK
c+rdSpLijW3xXpaS4xDqsnfsKU8lQOpBPmUYJVfNBnM7T8hq037jq4gX5iAh5A4y
4T5fr6e13hqyd29cpy68TcUewhfAwwOZDq5HRk7nN2N8PcOJkcX1yFYDMI1eo8IG
KEEYcqGyTuMgjMVstmTzeXuTB7xB653a2CqWExmYiyDXwjun2/xbrWsgEs14z6PN
YWUE4EtS9qfZzN0V08iLIvPflT3CXmLjScegPj6+kGWaFdOnpkph/0pzywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNYv1x9s3UoZ88TZgNspkoh27deMB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyHvnswR
RP79W/jCVPjiutjohH3Xf/w39FYOYD0RAqQTzhmt4Qlc/4gRhWsHlMEWPxnpe1Z/
7yEosBvktxKIXjI5sIhfhkCZQt8yXNTvyNwUD5uHJaYwxNEfnGv3pPIfJEhDo+F5
Y7Kl3KgJhrLsdOQKyBNibIK6yxI1UpaJRGpvo7+fe1oF1qNGG21vx9Jp2OiVQKM1
DwRV1kw5UWKuiX4i3ynWJCA0rdf/IscQdTdsVVmKnuYO0kCVsKKt4du26UVR1L3k
VMC6yRsUJ2pQZvusNdBXZgmRe9xGPn6WuPTq0qT201CBVp7EJaFa5thjzM4akj6L
lw546acXGAc7Mg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:46 2026 by rpki-client