Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: y4yiUbff2oG4DpX9lmRa91OTxg9PfRkoj2pvy0xHCn4=
Subject key identifier: A2:74:A2:7D:77:B1:54:8D:3A:1C:89:FA:6A:6B:41:41:C1:6F:60:D4
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 019F8F473C19399AB9EA4ED81FEF14E46533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0A72
Signing time: Thu 23 Jul 2026 14:00:37 +0000
Manifest this update: Thu 23 Jul 2026 14:00:37 +0000
Manifest next update: Fri 24 Jul 2026 14:00:37 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: lohyhGKFJZEeb/VkaAtLnYtK6kqGPgAZEHKpIY/0vBs=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:3c:19:39:9a:b9:ea:4e:d8:1f:ef:14:e4:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Jul 23 14:00:37 2026 GMT
Not After : Jul 24 14:00:37 2026 GMT
Subject: CN=a274a27d77b1548d3a1c89fa6a6b4141c16f60d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:a8:e2:60:66:28:bf:93:ac:3a:41:9a:3c:
2c:b0:b4:f2:5a:70:49:19:54:0a:e9:11:07:f1:84:
26:16:df:68:bb:f6:15:f1:f5:5d:20:d4:a6:5e:d2:
dc:e6:d4:d6:a4:26:f6:1f:68:10:8b:7e:4a:c7:12:
65:e0:fc:f5:cc:a1:e5:72:2d:b6:ab:2a:6c:4c:61:
6b:2d:c2:55:8b:02:6f:e3:3d:83:39:40:8b:e5:83:
55:5d:2b:fd:c5:78:55:98:f8:a5:04:04:6c:f7:7e:
82:b2:94:78:a3:d9:2d:be:05:53:e2:72:ff:1f:0a:
27:7c:38:da:24:84:8a:94:02:fc:1c:8c:e2:ad:6c:
c7:5d:72:3c:24:f4:6e:82:7f:f1:7c:6d:83:21:8d:
02:cd:b6:dd:31:81:64:b5:b3:5e:8b:ce:4c:24:da:
5d:2c:96:84:39:5d:a4:30:21:43:d7:5b:f0:a8:9d:
ff:89:40:0e:ad:ff:56:85:e6:1f:53:33:3d:29:07:
8b:2b:79:39:15:85:e2:01:fb:9c:3f:94:32:04:3a:
4c:04:18:cd:99:fd:27:79:b6:90:71:ab:d1:11:d2:
af:ec:77:26:c8:b0:84:88:76:37:96:2d:cc:75:e4:
ec:ee:9d:41:b4:ce:23:83:f5:a1:c7:44:47:f5:02:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:A2:7D:77:B1:54:8D:3A:1C:89:FA:6A:6B:41:41:C1:6F:60:D4
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:52:0c:19:69:d3:20:c0:87:fe:25:aa:b5:ab:b6:78:c7:
b6:f7:1e:fe:c4:12:65:8f:7c:f5:3c:2a:b5:e2:b6:1d:b0:fc:
f3:47:1b:55:72:84:19:c6:61:46:16:21:32:f1:2e:cb:21:41:
69:6c:23:b8:09:09:e7:05:1d:a3:e0:b5:d8:a5:38:4c:02:2e:
e4:25:43:5b:ef:83:13:0e:9a:5c:69:a1:1b:48:0b:ac:a9:47:
7d:58:c6:67:8a:26:48:09:74:29:c8:c2:b7:be:80:75:09:8e:
e8:38:bb:ed:79:f9:48:10:5a:47:32:19:ae:1f:3a:6f:5f:67:
93:f7:41:d6:57:8d:68:25:c7:96:a4:c2:54:28:eb:7a:e8:9a:
c9:32:c3:67:3e:29:97:db:3a:16:ae:f7:91:6a:5f:48:91:d8:
e1:73:6e:40:94:fc:81:56:19:22:32:6d:5a:40:06:80:84:f9:
95:2b:d7:26:9b:d5:c0:35:87:fe:69:74:5f:e8:7e:2e:e3:1d:
f2:87:76:92:e6:a7:42:cf:98:b0:1b:c4:a4:4b:40:c5:ad:fa:
34:70:24:42:92:33:48:b7:69:f7:80:f8:ee:72:94:b9:43:aa:
b5:ae:d0:87:42:b4:af:02:1b:1f:f2:85:01:5f:68:fe:84:4e:
0b:1c:33:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRzwZOZq56k7YH+8U5GUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGEzZWMwN2I5Nzg1OGU2ODM0YTVhMWY4OGViOGZlMzFi
ZjdiMjAwHhcNMjYwNzIzMTQwMDM3WhcNMjYwNzI0MTQwMDM3WjAzMTEwLwYDVQQD
EyhhMjc0YTI3ZDc3YjE1NDhkM2ExYzg5ZmE2YTZiNDE0MWMxNmY2MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKCo4mBmKL+TrDpBmjwssLTyWnBJ
GVQK6REH8YQmFt9ou/YV8fVdINSmXtLc5tTWpCb2H2gQi35KxxJl4Pz1zKHlci22
qypsTGFrLcJViwJv4z2DOUCL5YNVXSv9xXhVmPilBARs936CspR4o9ktvgVT4nL/
HwonfDjaJISKlAL8HIzirWzHXXI8JPRugn/xfG2DIY0CzbbdMYFktbNei85MJNpd
LJaEOV2kMCFD11vwqJ3/iUAOrf9WheYfUzM9KQeLK3k5FYXiAfucP5QyBDpMBBjN
mf0nebaQcavREdKv7HcmyLCEiHY3li3MdeTs7p1BtM4jg/Whx0RH9QLbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ0on13sVSNOhyJ+mprQUHBb2DUMB8GA1UdIwQY
MBaAFNpKPsB7l4WOaDSlofiOuP4xv3sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUt
Yjg0YTk4MTllYWQ2LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mZTAzMDYtYWY4NC00ZThlLTg4ODUtYjg0YTk4MTllYWQ2
LzEvMmtvLXdIdVhoWTVvTktXaC1JNjRfakdfZXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwpSDBlp
0yDAh/4lqrWrtnjHtvce/sQSZY989TwqteK2HbD880cbVXKEGcZhRhYhMvEuyyFB
aWwjuAkJ5wUdo+C12KU4TAIu5CVDW++DEw6aXGmhG0gLrKlHfVjGZ4omSAl0KcjC
t76AdQmO6Di77Xn5SBBaRzIZrh86b19nk/dB1leNaCXHlqTCVCjreuiayTLDZz4p
l9s6Fq73kWpfSJHY4XNuQJT8gVYZIjJtWkAGgIT5lSvXJpvVwDWH/ml0X+h+LuMd
8od2kuanQs+YsBvEpEtAxa36NHAkQpIzSLdp94D47nKUuUOqta7Qh0K0rwIbH/KF
AV9o/oROCxwzaA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:40 2026 by rpki-client