Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: q0FqlpsdZ8eua8Tx2BkMljC3OXdmZgL25A8psLQq5Rw=
Subject key identifier: E1:55:E1:BF:C8:FB:F8:FE:97:9C:D0:9C:E8:54:C7:5C:95:0C:25:32
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 01A0016F3E5E40847E70E99B5D26EF058296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0E58
Signing time: Fri 14 Aug 2026 18:01:02 +0000
Manifest this update: Fri 14 Aug 2026 18:01:02 +0000
Manifest next update: Sat 15 Aug 2026 18:01:02 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: SEOKYotKfvHnCX3+8HSVWOCezV75j96bY9EUwdq6Szs=)
2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:3e:5e:40:84:7e:70:e9:9b:5d:26:ef:05:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Aug 14 18:01:02 2026 GMT
Not After : Aug 15 18:01:02 2026 GMT
Subject: CN=e155e1bfc8fbf8fe979cd09ce854c75c950c2532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:3d:2f:e4:2d:22:dd:d7:a6:6f:b5:b6:4c:
87:c0:82:5e:80:7c:3f:b5:0a:1e:83:3d:dd:4a:1e:
44:67:fa:4e:08:00:d6:4b:29:6c:a5:5e:32:ff:a7:
a9:63:e3:fd:05:39:f5:6d:6d:0b:88:d3:09:ce:a8:
4b:d9:74:7e:bb:6b:5e:32:14:3b:87:1d:ad:9c:7c:
c1:44:63:b4:c8:1d:4b:d4:73:ea:a1:de:d0:d6:ba:
9e:26:93:dd:5b:b3:77:e7:03:a3:13:3c:88:02:f4:
60:d7:31:22:1c:64:45:24:18:a4:b0:06:fc:f4:98:
a9:cb:30:4b:e7:8c:7e:74:cc:fb:08:c6:99:f4:f3:
8e:fe:17:20:aa:82:fb:e2:be:e8:66:9f:13:79:ef:
9b:53:e6:a8:58:18:a6:0d:c5:36:7e:ac:30:69:db:
91:61:4b:42:f8:02:97:98:38:d7:a1:b9:73:eb:7e:
b1:63:0f:44:6e:bf:35:49:00:91:ae:09:72:ee:e9:
c6:61:88:0e:00:79:2e:47:0e:af:8c:0e:71:3e:35:
37:67:1e:e8:53:79:dc:ce:ab:29:89:44:ac:a1:9a:
45:fd:b0:c0:5b:a0:cd:cd:0f:a7:70:04:f0:6f:ef:
36:58:22:7a:87:3f:de:1d:cb:e9:6a:c2:8f:d9:0b:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:E1:BF:C8:FB:F8:FE:97:9C:D0:9C:E8:54:C7:5C:95:0C:25:32
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:27:83:59:94:3e:b5:78:1d:f6:45:ce:84:9e:57:d3:94:2b:
7e:99:cc:5d:d9:fb:d7:a4:1d:82:84:e5:0b:f0:8c:61:34:98:
f7:4e:a4:a5:b8:d0:5d:4c:9a:14:47:7a:bc:49:4d:51:a9:cb:
23:96:a5:64:01:69:33:26:81:37:af:73:76:f4:fc:18:f6:fa:
d7:12:88:3f:8a:c7:ec:d3:fb:36:1b:a6:dc:5d:d8:b5:63:b4:
a0:66:e8:53:03:17:cc:67:dc:f1:8b:c1:ea:de:3d:34:b4:56:
87:6e:66:0d:3c:aa:ab:4d:11:1a:29:66:e4:58:11:bf:98:c9:
6c:64:70:a0:f7:65:de:6a:59:97:09:a5:0c:07:ab:dd:eb:75:
26:24:12:d1:51:35:ce:28:9b:c5:bc:3e:e2:4c:ed:15:7d:5d:
99:5e:c1:82:8f:f2:5e:be:02:e7:26:c4:af:97:bb:4c:f0:79:
fe:d2:6b:ff:1f:4e:4a:f7:f7:f8:d4:8d:ff:c6:ca:49:df:73:
1b:d6:5b:7d:df:62:21:e1:6a:e6:27:70:7c:5d:99:0c:ad:18:
07:cb:b7:c5:81:51:f9:7b:69:f7:11:da:ec:3d:d4:37:42:92:
35:56:e6:4b:6a:4f:84:64:47:27:bd:ed:36:06:58:03:f4:14:
35:62:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:53 2026 by rpki-client