Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: jACHc35/kFgZZ2pAq0hG3HHoRgRwoJSFGGwlzBVryJc=
Subject key identifier: E0:80:FD:93:4C:00:1B:2C:11:C6:66:6C:55:F5:B3:53:0D:3E:42:45
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 01A1401505CB584BAA328F4C2F2CC94B6E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0EFD
Signing time: Thu 15 Oct 2026 15:01:21 +0000
Manifest this update: Thu 15 Oct 2026 15:01:21 +0000
Manifest next update: Fri 16 Oct 2026 15:01:21 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: IKOQbsLpllNBIUqnauTqs1QrbZ+3QvNiRpltSlLP8bY=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:05:cb:58:4b:aa:32:8f:4c:2f:2c:c9:4b:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Oct 15 15:01:21 2026 GMT
Not After : Oct 16 15:01:21 2026 GMT
Subject: CN=e080fd934c001b2c11c6666c55f5b3530d3e4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:18:2a:1b:72:54:3d:3a:5b:ec:58:3e:37:
64:0e:7b:4f:3a:5a:a7:8a:ba:c9:e0:d2:45:d2:2e:
65:18:95:fb:54:ec:9a:bc:f9:82:83:14:e6:67:bc:
2e:58:f2:6a:f9:77:5d:2f:5a:e2:7b:b5:8c:36:b1:
d7:43:72:47:a5:4a:a9:d2:fa:89:1a:c7:40:6a:b4:
8b:44:c2:c8:77:78:e5:af:6e:88:de:ff:c6:6f:68:
fc:bb:b7:d9:a8:a4:4f:95:a7:12:55:a7:d5:21:50:
a5:da:b8:aa:16:13:98:aa:db:3f:71:b1:1a:64:7d:
61:58:f9:56:41:e1:27:b3:a5:bd:d3:7d:0b:dc:bf:
fb:cc:34:7d:e2:ba:0e:a8:7c:ff:77:c3:c2:84:d3:
03:ba:2e:2e:b4:50:19:aa:ac:90:5c:11:a0:7a:f7:
47:06:83:49:a2:5a:d5:f7:92:db:19:4f:16:2c:a2:
53:d4:b6:eb:45:b2:a6:09:33:ba:f1:4b:69:17:d8:
90:60:09:cf:45:60:54:1c:bc:03:7a:0d:4a:ad:39:
be:11:7f:93:3a:31:20:9d:14:94:bc:74:7e:91:37:
e4:50:db:85:00:10:ff:ce:1f:a9:ed:8a:a1:26:0f:
35:af:54:d6:de:bb:c1:6b:b8:91:32:ac:73:91:ec:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:FD:93:4C:00:1B:2C:11:C6:66:6C:55:F5:B3:53:0D:3E:42:45
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7f:f1:22:5c:e4:67:03:44:13:91:77:0b:b5:62:fb:5f:ed:
eb:7e:bd:11:1e:45:09:a3:46:41:e4:a9:c0:ee:d6:01:42:d7:
5a:cc:b8:e5:02:3d:cd:c3:55:ec:41:8c:82:48:e0:16:68:f1:
cf:19:95:69:bd:71:18:05:f0:a2:0e:5b:f2:6a:8a:bb:c7:86:
a1:39:00:55:41:b3:b0:4c:73:05:d9:5b:14:64:25:54:2f:50:
b5:c1:18:24:b1:4b:67:63:f0:5f:09:84:48:56:26:c3:39:a1:
7c:0e:47:60:d5:94:57:d1:0b:dd:4f:44:1a:db:9b:7e:eb:a3:
74:fe:04:09:cf:37:b0:06:86:b2:6e:c4:34:ab:22:72:6e:7c:
53:e9:e4:51:f9:81:83:a0:3c:23:05:68:e2:4a:27:cb:fe:a2:
a9:3c:35:df:6b:42:c1:a2:b6:54:7e:b9:e6:d1:4c:7a:dd:41:
e6:7c:05:97:a5:9f:72:bd:1d:c6:a2:97:c5:5c:8c:90:15:43:
29:a9:a6:a5:4c:ac:ab:a8:22:c6:80:74:43:a8:7f:98:cf:92:
2c:58:2b:b2:07:08:ac:c2:18:13:fa:6d:bf:00:3f:ad:9f:b1:
d7:59:d6:bb:45:14:14:eb:20:08:09:33:8b:96:ea:f9:fa:98:
28:65:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:28 2026 by rpki-client