Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: U9yV2yqryoUcnQp2jQ7SwA2ULgOFhrEqO1WhbkobC2s=
Subject key identifier: EE:D4:76:26:7E:42:3A:77:FB:4E:27:B3:A9:66:17:A3:D3:7A:0B:73
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 01A0017018737CD88FA51B0002B463141CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 188D
Signing time: Fri 14 Aug 2026 18:01:58 +0000
Manifest this update: Fri 14 Aug 2026 18:01:58 +0000
Manifest next update: Sat 15 Aug 2026 18:01:58 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: vliI55MvbsD0NYrIzxesJCsCvWSnevMOLje4X7/kNAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:18:73:7c:d8:8f:a5:1b:00:02:b4:63:14:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Aug 14 18:01:58 2026 GMT
Not After : Aug 15 18:01:58 2026 GMT
Subject: CN=eed476267e423a77fb4e27b3a96617a3d37a0b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:37:c6:fc:44:02:00:13:f1:b4:a3:72:39:
c3:3f:02:43:a6:13:85:fb:ae:b5:4f:b8:c6:50:86:
ff:fe:94:63:a7:d0:96:d2:17:df:9f:e0:9b:91:02:
22:79:75:08:3f:1b:fc:3b:6c:e6:87:a3:06:99:41:
1e:a7:19:73:9b:f0:89:d3:a9:9a:d2:f2:9a:c3:bc:
61:27:45:07:38:e7:de:b8:97:60:ee:3f:da:54:0b:
18:26:01:9c:c2:b3:c1:76:33:cb:65:ff:18:05:67:
f0:01:1a:b7:74:a9:e6:ec:f2:d9:84:df:2f:e4:e8:
65:ef:42:65:88:0b:10:d1:05:21:d7:bc:60:00:31:
0c:9c:4b:f4:7c:3e:49:ca:c5:cc:9d:67:47:71:76:
8f:68:f3:6a:b5:3e:71:11:71:79:69:ba:92:bf:d1:
d6:8f:5d:74:e0:f8:9d:45:7f:bc:b6:f2:d0:a7:28:
ef:44:1a:55:6f:06:d7:a8:73:58:a1:f2:38:4b:90:
95:6d:5a:04:86:5a:08:93:bf:05:bc:91:d9:8b:be:
74:bb:db:f0:ef:a8:8c:30:f5:d9:04:70:fd:02:f6:
f0:65:ad:fc:97:db:e5:51:ce:4a:80:46:0f:e3:d0:
b7:62:4e:92:aa:67:45:cd:85:ef:cf:d4:b7:88:0b:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:76:26:7E:42:3A:77:FB:4E:27:B3:A9:66:17:A3:D3:7A:0B:73
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:83:9a:17:13:be:5a:0d:81:ae:da:ab:50:59:63:03:60:
7d:cf:31:61:14:03:d2:42:ab:75:4e:48:20:71:c5:b5:3e:b3:
4f:45:19:f6:61:a0:9e:ca:ed:1a:ef:eb:78:0d:3e:57:d4:d3:
31:03:05:fc:1b:a2:8d:15:0d:09:0d:04:14:86:82:53:e6:99:
bb:04:40:e8:d3:e5:87:81:aa:ee:5d:63:76:d9:bb:d1:ff:0c:
94:a3:c4:9f:5b:ba:11:0c:54:76:a1:9b:6a:22:86:98:73:5d:
dd:b2:64:2f:47:ee:87:af:59:3d:cd:37:73:48:dd:ad:58:a5:
a0:fe:76:ce:d0:57:d4:04:e4:16:e7:2b:df:df:a1:82:12:29:
4d:ab:db:bd:e4:ca:67:11:dc:b9:e4:b1:ee:5d:c7:92:18:81:
5e:90:f9:65:36:9e:c1:ab:48:95:d0:77:00:58:6b:00:21:ed:
48:53:61:6e:a6:43:fd:6f:e7:60:4a:ab:64:f8:e8:9a:e2:cc:
22:6c:6b:af:19:a3:4a:87:e1:e4:5b:c6:0c:4f:09:7c:0c:52:
9a:e7:97:fc:d8:f9:94:8a:40:a3:81:62:01:0b:89:e4:26:10:
ab:b9:4e:82:cb:5c:74:f6:ec:f3:7e:b1:b8:70:a7:3e:67:8e:
a7:2e:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:09 2026 by rpki-client