Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: kVp/M5JKhc3HpDT8bJmo1bfMJWiRLI5KD50xhlhChPE=
Subject key identifier: CB:5F:9E:47:C6:46:28:C1:42:15:E6:68:5E:99:93:D4:89:51:A6:60
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01A0CBC7BF1077CB13B7BB64A34C97ECBE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 01:01:00 +0000
Manifest this update: Wed 23 Sep 2026 01:01:00 +0000
Manifest next update: Thu 24 Sep 2026 01:01:00 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: 8EL9pY5D8lL4Wvo09s++sbsYTtgospfv1GIp2ywOBB8=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:bf:10:77:cb:13:b7:bb:64:a3:4c:97:ec:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Sep 23 01:01:00 2026 GMT
Not After : Sep 24 01:01:00 2026 GMT
Subject: CN=cb5f9e47c64628c14215e6685e9993d48951a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:72:47:45:2d:62:18:57:12:79:7c:cd:44:
bc:dc:2f:8a:39:e8:be:ac:18:4f:5f:ff:25:70:7a:
16:74:7a:54:10:2d:13:31:7a:88:3a:8b:e6:f6:1b:
4c:41:41:e0:37:16:cd:f2:db:7e:cb:62:d7:70:11:
f3:85:fa:93:71:0c:ee:1f:8b:fd:31:ba:8b:61:07:
b2:6c:d0:9d:68:82:8c:53:48:e2:6f:85:54:45:fd:
65:69:5c:ab:46:bb:d6:e1:dd:0c:c7:a9:1f:cd:78:
f0:24:88:0b:56:76:25:f3:85:81:8a:11:7f:91:c2:
fa:90:9c:ad:b9:f0:6e:b4:19:06:03:ca:c0:8d:31:
85:0e:5d:31:db:19:ac:75:eb:0e:80:bb:26:fa:a8:
bc:3b:5f:6c:05:c1:11:4c:3f:5b:d3:8a:19:a4:a0:
93:f7:5b:42:ff:4d:c0:12:00:96:af:dc:8a:f0:3b:
e2:f2:5d:56:d4:aa:41:0e:3f:e6:a7:c3:7c:a1:31:
22:e7:0d:1e:89:de:ac:7f:d4:a5:e1:06:9f:af:30:
fe:09:e8:49:74:50:19:6c:2e:3a:7a:71:68:2d:87:
ac:6c:98:97:5c:26:28:da:c9:1f:d2:07:44:04:40:
60:1b:7a:35:26:ec:53:6c:22:df:b3:15:40:71:6c:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:9E:47:C6:46:28:C1:42:15:E6:68:5E:99:93:D4:89:51:A6:60
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:ff:5a:be:ba:be:98:25:80:d4:d3:44:2a:3b:80:20:ec:
75:dd:16:71:6e:87:72:79:b6:9b:be:3f:c5:65:e9:28:25:01:
dd:cd:ee:9c:cd:d2:29:f9:8d:16:5a:3f:07:e7:90:ed:69:37:
01:c1:e1:ec:45:ad:2b:5d:95:65:13:f9:42:3b:85:a8:17:9f:
e9:f3:dc:88:74:42:25:73:b3:70:4e:8d:08:2d:c1:5a:99:d2:
94:38:40:a4:a5:03:1d:c2:7a:63:1a:95:10:76:ba:5d:fa:16:
72:65:06:da:6d:9f:8c:55:1f:c7:1a:44:dd:48:df:75:d7:b9:
f2:39:14:0e:5b:23:55:10:28:13:20:af:95:11:97:b5:2a:db:
ab:8a:2d:c7:2d:a9:b5:1d:8f:08:04:a2:6d:e2:cd:e8:de:c3:
8c:5f:4e:76:33:2c:54:f2:46:51:5f:c7:8b:a2:06:6a:c7:c5:
20:fc:04:fe:56:a7:bd:60:44:a8:70:26:f6:0c:ca:77:48:54:
c8:66:80:eb:65:af:3e:50:c2:76:91:74:b0:44:cc:9e:f2:b4:
27:04:a1:bd:af:34:e6:0a:07:64:57:bc:1e:ce:63:b8:b4:d0:
15:c3:11:95:76:35:7f:65:99:93:80:81:6b:f3:1e:cd:6a:d1:
8d:1e:98:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:13:52 2026 by rpki-client