Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: t0RjGNcTkvCN4lIK8kH3xfQ92S20P8u5Q6gdtDFe4rc=
Subject key identifier: 1D:1B:45:31:7A:F5:C8:62:CD:99:40:36:42:CB:A8:F9:89:51:FD:C7
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019C7CA42D04181347015ADB49CE233044EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 1834
Signing time: Fri 20 Feb 2026 20:01:00 +0000
Manifest this update: Fri 20 Feb 2026 20:01:00 +0000
Manifest next update: Sat 21 Feb 2026 20:01:00 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: jffQ1ikEqRVpaiCrP6Bzjo+cr18g8EcCercj2Nu8F8M=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:a4:2d:04:18:13:47:01:5a:db:49:ce:23:30:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Feb 20 20:01:00 2026 GMT
Not After : Feb 21 20:01:00 2026 GMT
Subject: CN=1d1b45317af5c862cd99403642cba8f98951fdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:8f:59:fc:01:0c:94:5a:bf:5e:8e:48:d6:
a4:7a:76:e4:ef:b6:b3:7a:aa:e0:d7:58:0e:04:7c:
27:1a:ef:cd:2e:e3:09:f6:e4:78:01:73:1f:a3:3c:
d5:ec:76:d4:fa:c6:00:54:7e:e4:99:eb:ed:9a:a1:
a1:e1:30:0a:15:94:a3:be:34:5a:c6:36:81:73:31:
8c:b7:93:ef:0f:70:b1:0f:58:f6:51:d4:6f:74:cf:
11:e4:53:97:f2:e3:95:d1:0e:38:9a:9c:c3:c8:29:
e4:71:52:06:c1:99:54:a2:8c:93:f3:ad:37:74:87:
64:c6:bf:23:12:d5:16:1f:46:39:1b:77:78:e1:1a:
de:2f:90:35:ed:44:16:49:d7:51:57:23:f6:b3:3d:
22:48:4d:cf:e7:83:7e:5b:ee:10:c7:95:1a:12:6c:
60:c7:4f:84:d8:2f:fa:3b:3d:cc:58:6c:3c:d7:d7:
c1:68:6a:c6:b6:b6:4f:2e:d5:8a:80:d4:a9:d3:00:
12:49:8a:d6:e6:3f:ff:50:b7:f3:6f:a8:e1:68:6b:
23:20:ca:0b:c5:d8:eb:8d:54:a0:36:d3:3f:15:76:
e3:52:6e:91:14:96:47:3c:73:5c:39:13:ef:f4:0f:
4c:51:26:f7:b8:b5:85:a8:79:f4:70:cf:e7:87:7e:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:45:31:7A:F5:C8:62:CD:99:40:36:42:CB:A8:F9:89:51:FD:C7
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:be:b6:3d:16:38:02:a6:2a:de:9b:d1:dc:7c:14:e1:8a:3f:
e0:b9:f2:dd:2a:08:b0:12:e6:ad:86:ba:a8:80:25:6c:15:6e:
e9:09:65:f0:4c:5e:e1:da:72:0b:30:25:5d:cd:f8:e3:2b:0d:
06:09:67:7e:09:6f:63:2f:65:b6:e1:9f:bb:ab:4c:5a:1f:c2:
78:55:d5:1b:23:d9:ff:99:dc:d1:f8:ef:bb:d0:b5:ea:34:a7:
b0:38:79:88:d3:6d:95:f9:af:4f:f4:b4:4b:ef:be:6e:86:32:
c4:65:2f:09:7e:8e:a4:5d:f3:8e:e4:09:cc:92:66:f6:f3:71:
eb:06:9c:99:85:c6:76:9c:2b:4f:ae:47:e4:5a:86:ec:e2:e0:
be:62:d3:24:9f:dd:58:ac:d3:01:0d:05:9e:10:57:9f:6b:fc:
19:74:84:08:1e:48:b0:96:1a:d0:d1:1b:f8:61:fa:a1:4d:08:
51:d9:d5:5d:21:ea:5a:11:65:dc:f3:cb:06:56:62:99:d7:06:
7c:56:66:15:50:f5:91:e5:f8:cd:72:56:7e:41:0a:91:87:78:
e0:76:9e:4d:fa:f8:cd:52:da:ea:58:65:b7:9c:73:90:2d:cc:
b9:11:8c:94:cd:0d:96:b5:8f:c9:f2:c6:a1:9d:48:d3:d6:68:
70:e9:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:08:52 2026 by rpki-client