Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: aHlS0AiEHNiuf6qana3B7n7Zv9dZJphXzr+szHX6ExM=
Subject key identifier: E6:1B:9D:8C:87:16:7F:02:1A:54:C0:3E:CC:23:40:93:34:CD:2C:42
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 01A0E32BD597035B7B2E6244F15BCEFB7582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0B22
Signing time: Sun 27 Sep 2026 14:01:35 +0000
Manifest this update: Sun 27 Sep 2026 14:01:35 +0000
Manifest next update: Mon 28 Sep 2026 14:01:35 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: PfcKlYVTFyago8kOFdUESFjagfQ/ldTP+PsXcDihYSY=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:d5:97:03:5b:7b:2e:62:44:f1:5b:ce:fb:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Sep 27 14:01:35 2026 GMT
Not After : Sep 28 14:01:35 2026 GMT
Subject: CN=e61b9d8c87167f021a54c03ecc23409334cd2c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5b:1a:85:31:05:bc:0a:e9:b5:31:4f:24:86:
15:c2:3c:39:81:a3:d4:40:74:ef:b4:2b:1e:18:15:
ae:4e:0b:44:8e:e4:22:5d:7d:d1:75:20:af:50:96:
0d:d3:eb:84:94:c7:d7:5c:65:c7:61:43:5e:73:f8:
55:50:1e:c4:3c:cc:14:78:0b:ce:ce:5e:49:e9:1c:
56:f0:5d:41:94:b2:07:32:41:73:7c:14:43:52:23:
b3:4a:43:7d:6a:c1:aa:c1:53:7a:52:35:16:51:62:
b8:16:52:84:2f:ef:82:34:d9:74:4a:d6:69:f3:aa:
64:ce:d5:32:a5:de:a6:95:eb:bf:2e:62:e9:77:bd:
57:b4:01:6e:03:38:9c:14:a7:24:7c:b0:2a:5b:a8:
dd:ef:35:9c:c1:c2:89:87:be:a6:cc:03:2e:cc:c0:
8b:74:13:c2:4b:da:7d:c9:ae:b5:09:58:2e:71:ff:
77:89:26:78:8f:df:e1:b2:26:b7:0f:e1:0b:f2:6b:
4a:1d:3e:ce:e6:74:6e:b4:21:9e:4f:be:75:b7:f5:
0a:1b:13:74:8a:de:01:9a:4c:e1:5b:1a:f6:71:f9:
d4:81:9c:a8:a6:ae:b7:3f:c6:ba:2a:3f:ef:2d:ce:
02:44:8e:6f:02:1d:f8:d2:02:f9:8f:97:24:66:40:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:9D:8C:87:16:7F:02:1A:54:C0:3E:CC:23:40:93:34:CD:2C:42
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:77:3d:91:22:61:8c:8b:ee:0a:d9:3c:4d:d0:5f:63:8e:3f:
92:db:0d:39:df:c2:03:52:9b:f6:34:d2:c7:65:82:2e:40:d5:
1e:fd:03:54:f8:8a:ba:a6:e4:5f:c5:5f:0c:df:aa:3e:c3:a3:
2e:4c:1d:6d:e9:a5:01:d4:bf:c5:89:90:7e:83:2c:91:1c:9e:
24:6b:98:c5:6a:86:ee:e2:a7:08:d1:3b:cc:91:97:a3:e9:98:
9d:d5:2e:9e:59:30:6c:66:7b:24:21:0a:ba:84:17:57:e5:bf:
d6:d1:48:03:e0:9a:56:0e:f9:13:89:4f:25:02:a0:d5:50:e8:
d0:1b:4d:c4:c1:0c:c6:68:b1:be:96:47:c3:bf:60:3b:ff:f3:
d4:44:cc:7e:45:1d:73:cd:d1:52:7e:4f:b1:8c:b3:6e:2b:da:
2c:93:eb:5a:d4:3b:0f:b6:4b:ad:4b:47:c6:98:32:87:cc:fb:
d9:ee:fb:8b:db:99:4f:f9:dc:c2:d1:4e:8b:75:00:1e:13:7c:
c7:7f:c8:cf:45:ed:f0:c3:ff:b6:9a:0a:ab:6c:f7:0b:28:25:
a4:90:d0:0e:73:a4:93:7a:1b:40:17:ec:5b:11:eb:f5:7d:3d:
d3:c9:fd:a9:5c:6d:36:63:55:89:87:bb:b0:dc:0c:bf:b4:1e:
93:88:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:21:58 2026 by rpki-client