Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
File: 2AOiwMslPPmzM18ONacI2a6fyYY.mft (raw, json)
Hash identifier: pLJEIn8kjLH1kgmaMN4mNrgZk1YnfQCUiqbOOzEFR8U=
Subject key identifier: E0:27:9E:9A:74:20:B5:B4:9F:20:33:4E:71:01:15:1D:A4:C9:4C:0E
Authority key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
Certificate issuer: /CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Certificate serial: 01A03FA916F051D67AC7FAB2A0D1E671FDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
Manifest number: 02FE
Signing time: Wed 26 Aug 2026 20:00:40 +0000
Manifest this update: Wed 26 Aug 2026 20:00:40 +0000
Manifest next update: Thu 27 Aug 2026 20:00:40 +0000
Files and hashes: 1: 0AzcAjUT9N1QB5cI07RUAHonZOs.roa (hash: g0trIEnIrBs+QaX8y9UPsVa9Dhsva7/upARrEo7U33o=)
2: 2AOiwMslPPmzM18ONacI2a6fyYY.crl (hash: DKVnk1h7oMDchpW6/h+hfG3hyrY6CXi1jEH5riwjZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:16:f0:51:d6:7a:c7:fa:b2:a0:d1:e6:71:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986
Validity
Not Before: Aug 26 20:00:40 2026 GMT
Not After : Aug 27 20:00:40 2026 GMT
Subject: CN=e0279e9a7420b5b49f20334e7101151da4c94c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1b:4d:d2:a6:a6:dd:cc:d9:41:3c:21:a0:72:
7f:f2:d2:a5:a2:78:3b:a6:6c:b8:4c:78:58:ca:09:
54:89:26:a1:c6:b1:db:c3:04:ba:f3:f9:9d:71:b9:
21:19:fd:b7:39:c4:3f:18:54:2b:d9:e7:58:09:4b:
46:25:9d:e4:51:b8:1e:14:67:63:bf:0f:80:8f:16:
b6:df:f0:02:e4:37:30:c4:4e:f3:86:1b:06:b5:60:
b6:6c:56:73:aa:b6:3c:36:90:b9:f0:f3:69:3d:40:
45:a7:3c:67:1e:b3:fa:08:3c:22:21:fd:dc:3f:5b:
5a:c0:46:74:6d:16:ae:b1:42:5a:1a:d5:8c:1d:cf:
91:76:43:60:97:47:d4:e2:ed:c2:43:4f:68:d1:4b:
03:90:95:24:cc:2e:bb:d4:d7:c0:42:f3:56:97:70:
be:ef:56:aa:9d:92:6c:0b:ff:11:69:a4:6c:b8:d7:
28:2e:5e:d0:67:3c:34:38:68:71:7f:7d:92:76:72:
0c:9d:98:0d:13:9a:54:55:a8:35:ee:69:bb:4d:c5:
83:e0:70:97:07:9d:54:28:8e:2f:4f:7f:30:d6:e0:
27:33:17:d3:e4:89:38:80:be:9b:40:08:0a:fc:b2:
47:a2:56:78:09:60:e3:8a:8b:31:e0:8c:55:88:ad:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:9E:9A:74:20:B5:B4:9F:20:33:4E:71:01:15:1D:A4:C9:4C:0E
X509v3 Authority Key Identifier:
keyid:D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:df:ab:fb:90:ad:0a:c1:27:51:5a:c7:d7:57:49:48:63:
4e:66:44:a3:da:1b:52:1c:cc:bd:66:5e:13:08:47:76:8b:4b:
1b:0a:aa:5c:92:36:d9:f2:fc:3f:e9:e4:44:5b:92:c7:b1:18:
73:0a:e7:6a:10:9b:7f:8d:4c:f4:4b:4f:51:ef:72:7b:07:4a:
50:69:81:e2:1a:c7:cd:f0:98:33:3f:9a:d0:a4:ad:ba:f3:27:
c0:19:77:46:01:68:89:bb:63:f7:4e:c7:72:f3:45:9d:d0:78:
a0:ad:f2:53:b5:3e:4a:1d:f2:26:5b:e4:9f:6f:21:87:4e:7e:
f1:99:87:7d:78:e5:ce:36:4d:08:66:18:ec:eb:62:4e:d6:5a:
1d:0e:0a:ca:c5:a7:60:53:5e:36:b8:84:6f:96:76:f7:36:7b:
83:af:d9:78:af:31:b1:3d:71:c2:36:9e:39:77:0b:18:b2:9c:
3f:0a:8d:1c:cc:03:4a:04:7d:01:71:79:57:1f:b2:2e:21:0e:
fb:a0:d3:2a:bd:01:36:43:4d:61:aa:81:51:54:0c:f6:3b:02:
20:ea:df:23:19:fa:6f:7a:8e:31:17:39:4f:98:c3:e5:28:9e:
91:81:57:92:56:36:c0:b5:b7:06:e0:a9:ee:91:67:84:dc:02:
80:e9:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:37 2026 by rpki-client