Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: QSndzmPrh1DVg9rPSiEC4NtqurR71NFrQ+mSSRJ+b2Y=
Subject key identifier: C9:C2:4A:9A:6B:A8:70:9C:5C:BF:2C:E8:FE:C1:17:67:86:79:01:8E
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019F190D5ED00A13075C3EED559564BC7D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 02F8
Signing time: Tue 30 Jun 2026 15:02:14 +0000
Manifest this update: Tue 30 Jun 2026 15:02:14 +0000
Manifest next update: Wed 01 Jul 2026 15:02:14 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: XRNs2yhjESCPBiRavBi3pzgVb0TXs5rutzzb6uiiymE=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:5e:d0:0a:13:07:5c:3e:ed:55:95:64:bc:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Jun 30 15:02:14 2026 GMT
Not After : Jul 1 15:02:14 2026 GMT
Subject: CN=c9c24a9a6ba8709c5cbf2ce8fec117678679018e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:ea:86:0a:ed:76:36:e2:bf:ac:64:aa:2f:
d4:9c:a3:c3:3d:96:2d:58:33:00:16:74:57:a0:58:
ea:27:fe:80:a5:b8:1d:34:d3:af:62:18:d1:84:26:
82:c9:db:8d:23:b7:35:4f:8b:8b:ef:b6:53:2e:d6:
f4:e1:e9:22:9a:af:e1:9c:9f:af:28:ff:9a:2b:b6:
cd:95:ed:74:c3:8d:0f:c2:2c:e3:10:e4:6c:0e:1f:
30:a6:fe:0a:0f:e0:82:f0:d8:8c:42:08:9a:10:1c:
63:8d:a8:5c:3f:f8:19:27:57:ec:78:eb:66:68:70:
85:ac:e9:a8:6d:f8:5c:56:f7:ec:3a:4c:e9:66:91:
ce:00:6a:e0:87:b7:5a:2b:e2:35:ca:8b:4a:89:62:
e6:c8:96:6d:8a:a6:cf:81:48:52:52:b4:90:33:2d:
46:c4:d9:55:83:8f:b0:bb:d0:6a:aa:72:ed:90:e5:
97:de:6f:5e:03:c8:7a:c8:14:8d:7d:4e:80:d6:0b:
30:d1:ad:47:d6:10:8a:94:dd:13:fd:63:16:b1:75:
77:4a:c4:54:4e:b4:a8:62:ac:19:b9:3c:84:39:d2:
92:8a:33:6f:14:b7:3c:2d:13:54:1e:5a:30:72:ec:
a4:f2:ad:4f:bb:8f:54:f9:ea:da:fa:07:ac:5d:02:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:4A:9A:6B:A8:70:9C:5C:BF:2C:E8:FE:C1:17:67:86:79:01:8E
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:19:c0:b9:01:52:dd:66:98:09:c3:4a:0e:0d:60:ac:86:d3:
51:e4:cd:64:38:22:b3:84:44:0d:c6:45:8c:ca:6b:7d:b3:1b:
9a:d4:da:f8:81:19:2f:d6:48:f6:1f:1e:e9:e3:3f:32:d9:2e:
4b:01:3f:25:c8:60:2f:8c:1c:f5:e6:0c:9b:53:fc:2e:86:e4:
2b:9f:72:65:7e:92:64:53:c5:db:71:4c:2e:22:2f:92:93:e9:
6e:bb:d9:d4:83:01:ec:78:4e:89:d5:4a:fd:0e:49:28:f2:f2:
52:aa:71:9f:86:26:5b:cc:79:b5:be:d3:86:3b:c5:f3:e5:1f:
e6:a4:80:ce:1c:bf:5d:08:45:dc:fd:92:54:42:74:32:84:0d:
86:6a:d6:08:6e:5f:81:1a:90:00:26:f7:69:ef:ec:64:3d:56:
58:3e:df:6c:fa:22:bf:87:a7:6d:cb:cc:b0:de:9c:40:d8:b3:
2a:e9:eb:f3:d4:ca:4b:e8:7d:26:56:95:89:a8:67:1a:ba:3a:
c6:2e:47:e3:ad:e5:51:6f:25:1c:6a:98:a8:a2:f0:ad:ca:3e:
52:c5:5c:93:5a:74:4b:16:2d:f2:86:63:0a:0e:6b:76:0f:44:
03:27:71:0f:b9:d1:82:95:71:b9:88:a7:ea:ee:00:63:ad:f2:
d8:36:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:39 2026 by rpki-client