Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: goo/xywJQnHJJldE0DkXP8vjGenk1g9y5ADTjae92WA=
Subject key identifier: A3:E1:56:66:50:3D:DD:BB:54:36:EA:F8:B7:4B:18:A0:FB:EA:D4:79
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 01A0DA5FD6B10D72E912332EE0777ACFD767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 14D2
Signing time: Fri 25 Sep 2026 21:01:48 +0000
Manifest this update: Fri 25 Sep 2026 21:01:48 +0000
Manifest next update: Sat 26 Sep 2026 21:01:48 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: kR1UDnD2RL8wMBrHvSiGpVivQ/BMrDZkG+p6LbpxuWU=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:d6:b1:0d:72:e9:12:33:2e:e0:77:7a:cf:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Sep 25 21:01:48 2026 GMT
Not After : Sep 26 21:01:48 2026 GMT
Subject: CN=a3e15666503dddbb5436eaf8b74b18a0fbead479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:a3:b8:2b:56:2b:a9:c2:4f:15:dc:dc:5b:
77:6c:ed:3d:c7:b5:13:c5:be:1f:d1:e0:10:c0:fe:
2a:10:22:4f:81:e4:97:55:c0:d0:a3:9a:d0:25:5f:
50:57:0f:12:56:b7:4f:be:c3:11:84:7e:62:90:47:
50:6d:91:18:f4:04:eb:96:70:79:23:c7:1a:dd:01:
f7:76:18:61:a8:aa:b6:e7:b2:f1:e3:d5:41:82:f4:
3a:90:b8:73:7d:a7:c7:86:25:1e:72:50:57:9e:7b:
47:bd:73:6e:c2:9b:70:60:3d:ba:d3:7c:fc:ed:12:
62:26:e1:05:55:50:bd:2e:2b:fb:1d:64:8f:a1:eb:
02:e7:20:ae:1d:8f:a6:24:ea:2d:56:af:7c:c7:61:
af:4e:3e:5e:df:d2:37:43:ec:8b:b3:5c:c8:8f:8a:
f7:d0:65:32:6a:79:97:99:71:9a:96:d7:39:98:11:
eb:07:4e:06:27:dd:a2:2b:ec:40:a9:01:26:02:c2:
7a:45:b2:ee:34:3f:14:0a:17:b4:26:59:de:d9:d9:
56:49:f2:f6:3b:ad:84:e1:0a:61:4b:88:8f:15:7f:
b0:10:70:d2:ca:63:69:b7:14:d7:02:6e:da:2a:ee:
82:4d:4a:46:e2:f3:6a:2b:e8:9f:af:ac:28:8a:f5:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:56:66:50:3D:DD:BB:54:36:EA:F8:B7:4B:18:A0:FB:EA:D4:79
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c2:f3:8d:9f:13:af:54:6a:20:6f:5e:dd:8f:99:3a:ad:9f:
05:24:2e:8b:ee:57:20:bc:38:63:9a:34:f3:ff:71:c9:1c:35:
62:08:af:b8:ba:76:e7:69:68:2e:f0:c8:63:13:17:32:e0:80:
b3:0e:11:e3:e4:45:02:6a:1e:0d:58:8c:6f:4c:9f:7e:87:c2:
c3:07:07:a7:19:ae:32:d9:f8:e6:3e:28:7b:0a:89:d7:96:0d:
a8:a6:e0:46:b3:3f:09:fe:7b:2b:87:6f:7f:0d:77:c8:4c:dc:
cf:96:0c:6b:6d:25:df:bd:0f:39:19:e3:54:10:00:f1:75:79:
ab:51:58:ff:b1:17:f0:48:6a:f7:78:da:5c:3a:3c:aa:72:7e:
21:a5:90:1c:75:b1:ef:1a:3f:d4:06:e3:cc:6d:59:0c:de:82:
29:2b:64:d7:10:98:9c:8c:b2:19:43:d4:2a:52:c8:b5:4c:44:
dd:5c:6b:dd:b0:c2:a3:cf:1c:61:82:09:95:7b:f7:05:46:b1:
f9:4b:0c:7c:d7:1f:c6:28:cf:ad:e4:c7:c5:44:b6:fb:7c:0a:
8b:06:cd:e6:59:e2:7c:91:a5:f3:8b:34:96:5c:7b:f9:60:6f:
03:cc:ea:c2:ca:f1:99:01:16:c7:f7:c8:dd:f8:1e:e5:67:02:
d5:79:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:23 2026 by rpki-client