Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: kDlMX2nQFClg52Pcf5uJ2+ffMRKkQcuVXxc5m5IgfPk=
Subject key identifier: 2A:09:FB:01:7D:42:DA:9A:64:41:C8:38:A0:DF:D4:3C:9D:9C:E5:88
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019E4E0EEB60AA103B88D91CF4FFF024836D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1925
Signing time: Fri 22 May 2026 05:01:00 +0000
Manifest this update: Fri 22 May 2026 05:01:00 +0000
Manifest next update: Sat 23 May 2026 05:01:00 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: PBcjZv53tv7bpiSN0BuOAHBc7d4CLLLNmsX6hlGqrdQ=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:0e:eb:60:aa:10:3b:88:d9:1c:f4:ff:f0:24:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: May 22 05:01:00 2026 GMT
Not After : May 23 05:01:00 2026 GMT
Subject: CN=2a09fb017d42da9a6441c838a0dfd43c9d9ce588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:f7:cd:1f:0d:c9:9d:ae:14:0b:84:45:4f:
37:80:ad:de:68:11:df:c4:10:c8:7d:24:36:6b:02:
23:45:ce:22:8a:8b:29:21:21:91:6e:55:cd:f9:4f:
40:4e:b4:35:f9:18:f6:fe:cd:55:ed:93:e9:38:c4:
15:a9:21:82:eb:d4:6d:a7:73:54:e0:fd:b4:d3:70:
46:af:9e:7f:36:f6:07:f4:c8:5d:75:69:9d:fe:6e:
6e:d1:0e:0e:07:8f:7d:81:28:55:5f:2b:80:ce:a7:
be:7b:21:62:8d:85:97:d9:58:1e:24:fd:2e:08:34:
05:da:11:1f:20:7e:bb:6d:37:3d:a8:18:fe:ed:ef:
b6:02:33:ad:c8:c8:a5:58:7b:a6:b8:50:d1:43:01:
6e:86:3d:bc:3d:09:b1:ae:49:dd:d1:51:e1:e4:e0:
9f:1c:01:f0:eb:1b:d8:a4:64:9f:ec:41:3d:ce:0d:
66:0a:0b:85:ac:13:32:ae:97:05:75:d8:e9:00:3c:
84:44:16:bc:97:1b:6f:8a:fd:d7:55:7f:e1:3a:85:
12:6c:60:4c:9f:9c:64:ef:c8:90:b1:b3:56:87:e0:
9e:37:28:34:7b:66:42:22:b9:12:72:34:e4:ea:ab:
2a:ba:7d:72:17:c5:8b:03:9c:86:b3:02:3e:72:01:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:FB:01:7D:42:DA:9A:64:41:C8:38:A0:DF:D4:3C:9D:9C:E5:88
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:d1:b3:27:84:1e:d0:71:57:df:e0:0d:4a:fc:d9:cd:32:
fa:f2:ab:5a:a8:d0:12:13:84:22:9a:cd:ce:9d:33:18:cb:44:
cb:2e:bb:8d:b1:3e:a9:5b:2d:51:d9:d3:40:c9:27:56:87:48:
5d:d2:97:3a:ab:c4:4c:44:9a:36:ca:f1:f9:13:53:e5:81:8a:
4b:28:fb:38:39:ee:d5:1b:0b:f6:cb:f3:77:ab:21:07:e3:36:
0e:7b:3b:8f:9e:28:af:29:8e:b2:eb:8e:ad:a4:dc:52:8e:25:
3f:a0:9a:54:79:51:e1:b7:dc:b3:a8:86:fe:df:f7:c0:39:59:
eb:cc:65:d9:31:64:f9:a8:dc:95:ec:33:88:01:d9:ff:bb:89:
e5:d1:9c:a7:02:f7:53:88:68:5e:a8:c4:3a:58:59:a5:29:8a:
73:ab:e0:88:0f:02:69:9e:a4:44:f8:42:c9:83:61:87:b5:b5:
48:0e:7d:6e:cc:af:4f:3f:63:48:fc:5a:c9:77:f7:6a:82:bf:
e8:84:8b:cb:e6:1e:45:23:cc:41:55:06:0c:f5:f6:8c:a7:3e:
8e:bd:b3:b5:cf:ff:1a:62:20:60:78:69:9b:30:5c:f5:d5:32:
31:c3:90:33:79:dc:96:7d:2d:e9:58:29:5f:5a:fb:97:a2:b7:
b9:59:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:12:17 2026 by rpki-client