Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
File: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft (raw, json)
Hash identifier: 8q7XMBUh7PvctfxefOtbaScNlVbGupucXGfv34jM/ao=
Subject key identifier: C5:8B:50:21:2D:C6:D9:CA:BB:82:76:28:70:8A:74:05:D3:D0:8A:00
Authority key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Certificate issuer: /CN=db11520db30e58560013baee6106ca245f194a4a
Certificate serial: 01A0035DEBC1BB5AA410ECF45C34A9E8B07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
Manifest number: 7B
Signing time: Sat 15 Aug 2026 03:01:21 +0000
Manifest this update: Sat 15 Aug 2026 03:01:21 +0000
Manifest next update: Sun 16 Aug 2026 03:01:21 +0000
Files and hashes: 1: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl (hash: O2sbuu6WryQa3rTc9sIYCJZ/uljjYyATQjFmAcQT5yc=)
2: dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa (hash: n7M2DLVhupTXknxIXP5S/bJ1i2MjgUBbOoeKbEgGiQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:eb:c1:bb:5a:a4:10:ec:f4:5c:34:a9:e8:b0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db11520db30e58560013baee6106ca245f194a4a
Validity
Not Before: Aug 15 03:01:21 2026 GMT
Not After : Aug 16 03:01:21 2026 GMT
Subject: CN=c58b50212dc6d9cabb827628708a7405d3d08a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:af:ef:b4:29:99:06:ca:95:5f:20:d9:b9:
0b:c3:a3:7d:71:79:c9:26:e1:31:64:56:ca:1e:60:
c6:fa:dc:46:72:c9:9d:4f:9a:3a:3a:ab:dc:38:24:
19:4c:14:f6:fb:88:77:d6:02:24:73:60:16:63:5a:
2b:90:47:b5:92:81:6b:f5:1a:70:37:cc:14:d0:dc:
f8:89:2a:71:ca:60:01:74:e4:7a:d8:22:7e:4c:95:
6c:11:e8:04:26:ef:15:f1:e9:ad:1f:bb:21:40:24:
61:22:9f:93:3b:48:c4:7d:79:93:ce:38:ff:49:d5:
24:ec:24:b6:72:d9:d6:f3:ce:ce:af:64:4c:b1:1c:
8f:22:59:8f:9f:fb:b4:78:30:a0:82:e7:bc:cd:a2:
9c:63:62:ce:ab:2d:9f:66:a5:8a:36:e6:24:ae:19:
3e:5b:00:bb:7e:c1:11:dc:82:35:1a:29:3f:65:c2:
f2:a3:1a:7e:69:13:6e:d5:5e:df:26:21:d2:b4:4b:
85:84:c0:89:4c:6a:d9:9e:28:8d:1c:24:7a:7c:93:
b8:1c:08:54:a3:a8:c5:63:eb:c7:16:3f:32:04:63:
4a:d2:49:c6:84:20:c3:de:ae:1b:b1:f8:ad:0e:e4:
fc:e1:b4:04:65:fe:5e:81:c0:4c:70:70:89:1a:61:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:50:21:2D:C6:D9:CA:BB:82:76:28:70:8A:74:05:D3:D0:8A:00
X509v3 Authority Key Identifier:
keyid:DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:40:2e:9d:52:9b:27:c4:21:b2:91:97:4a:f1:0e:aa:51:a8:
3a:3d:88:0d:04:2b:a3:90:c0:df:08:8d:83:ef:f8:e6:4b:ed:
ff:b7:f0:e9:a3:66:0a:26:df:7b:5d:56:ad:0f:7c:87:e5:71:
af:30:60:00:20:5d:75:58:a6:79:ec:03:4b:e5:67:55:11:b5:
10:cb:38:63:47:b1:9a:9e:33:ec:9b:0a:65:ce:49:52:1d:1c:
33:4f:29:98:72:a1:68:26:39:e6:06:1c:3c:e6:e1:c3:b2:4f:
d5:68:1d:87:ba:e7:00:de:3e:1d:ef:16:1f:92:7d:73:22:3b:
eb:b9:07:95:67:2c:ae:67:ed:84:8a:4e:01:5a:d8:3b:d6:22:
af:bc:d7:81:cb:3b:b3:02:4f:aa:62:9f:1f:f3:bb:4a:8d:53:
34:4c:95:69:58:ee:3e:83:b9:b0:f6:42:f7:9f:78:ea:c1:17:
6b:41:d8:6d:4c:55:29:13:4d:14:78:40:1a:67:39:b6:7f:70:
4c:49:2c:6e:c1:9f:e0:10:88:05:82:93:1c:b0:45:1f:d3:d9:
c7:18:13:84:9a:4c:69:f2:0f:8c:e5:0e:1f:29:07:1a:ef:0c:
d0:29:c3:a1:12:34:23:9e:cc:a8:4f:bb:3f:17:e0:78:62:d4:
c3:d3:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:06 2026 by rpki-client