Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
File: 2o2nRADHVVq6J8Eon7-5CzO3miI.mft (raw, json)
Hash identifier: hQ9Y4GTgPwlxGr0J6/4i51KGqsPycgaDbDPH7YJoDv4=
Subject key identifier: A7:8C:67:E7:A8:CD:CE:06:C6:93:C4:5A:62:7E:36:4D:60:52:28:6E
Authority key identifier: DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
Certificate issuer: /CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Certificate serial: 01A149BC4003C0BEAB693979227D20AD5EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
Manifest number: 1937
Signing time: Sat 17 Oct 2026 12:00:36 +0000
Manifest this update: Sat 17 Oct 2026 12:00:36 +0000
Manifest next update: Sun 18 Oct 2026 12:00:36 +0000
Files and hashes: 1: 2o2nRADHVVq6J8Eon7-5CzO3miI.crl (hash: Oj70HkEPtvKMEBk9CWFY+/9g+yVG3qdK2dADkvlZ9IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:40:03:c0:be:ab:69:39:79:22:7d:20:ad:5e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8da74400c7555aba27c1289fbfb90b33b79a22
Validity
Not Before: Oct 17 12:00:36 2026 GMT
Not After : Oct 18 12:00:36 2026 GMT
Subject: CN=a78c67e7a8cdce06c693c45a627e364d6052286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:ea:70:99:df:b1:e6:b4:4e:ff:01:f2:f8:
bf:de:3f:72:52:26:d4:d6:84:c7:56:8e:ad:7a:3e:
63:ac:81:09:98:f0:96:71:b8:18:5b:af:4f:b6:f1:
82:35:08:9d:d2:7e:20:ec:96:23:52:30:1d:bd:a8:
29:d3:45:fd:75:4b:4e:f9:6b:7c:05:47:78:29:73:
e5:1e:f0:bf:dd:59:18:74:51:02:09:4a:21:48:b4:
90:54:f2:97:e7:52:2e:d0:5c:08:6c:7b:40:7e:73:
c4:9f:fb:02:78:ac:7f:17:5c:ff:a6:2f:67:2a:9b:
bd:37:6b:69:5f:a4:43:bf:13:4b:6e:81:bb:23:5b:
16:60:bd:cd:ae:6d:4a:72:89:d6:0b:ea:b7:4c:5b:
4d:d4:b6:14:d5:29:c3:da:04:8e:8a:06:8f:85:e4:
cc:30:49:ab:f6:18:6c:9a:cd:ce:41:e7:4c:7c:34:
e2:5e:47:b3:98:c1:e5:a6:67:cf:a6:e9:ce:5e:63:
c2:23:bb:f7:a9:47:14:5c:d6:aa:42:96:a9:e2:f5:
fd:5c:d6:34:da:ae:34:20:13:a3:cb:72:90:9d:dc:
fb:bf:8e:8a:4d:2d:e1:4e:ae:b2:99:12:0e:08:4a:
99:40:a2:e5:90:cb:6c:31:35:d9:89:f2:ec:3e:2b:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:67:E7:A8:CD:CE:06:C6:93:C4:5A:62:7E:36:4D:60:52:28:6E
X509v3 Authority Key Identifier:
keyid:DA:8D:A7:44:00:C7:55:5A:BA:27:C1:28:9F:BF:B9:0B:33:B7:9A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o2nRADHVVq6J8Eon7-5CzO3miI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/759ab4-eb40-418c-8f11-25a6824e3157/1/2o2nRADHVVq6J8Eon7-5CzO3miI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7c:1e:05:ef:58:6e:10:d6:0b:f2:be:8b:d3:d8:7d:63:c0:
65:5c:d3:ba:8d:a3:d2:84:e2:0d:c3:a2:10:00:38:06:64:30:
c1:f9:0c:d6:81:76:21:71:46:a1:ed:a2:e5:9f:5f:c0:7a:80:
38:2c:33:6e:d4:63:e6:c0:71:6d:75:5d:a6:ba:51:75:31:a7:
67:2e:8e:78:56:5c:6d:e6:e7:f8:d6:ee:15:46:d4:33:87:2c:
4b:42:47:0e:0d:5c:57:fe:29:56:ba:7a:3a:0a:81:e4:6a:ab:
9a:2b:04:c0:a0:56:eb:eb:31:05:20:25:49:d7:02:7c:ee:de:
e0:f9:83:a9:99:92:af:91:34:58:dc:54:0e:e7:f4:86:cb:ff:
8e:f5:17:fc:45:f0:a5:60:e6:06:8e:4d:db:9e:9c:01:3a:b9:
7e:5e:34:83:82:7f:16:22:6a:f4:dd:4b:c6:fa:9f:f3:74:7c:
08:5a:3a:70:14:8c:9e:dc:7e:94:cc:5a:5c:df:a2:7b:e9:06:
8a:51:0a:16:aa:df:f8:a5:4a:bf:0c:21:88:c7:92:96:63:c7:
51:ea:c9:32:2c:30:57:0f:e9:56:6e:22:6d:ae:91:4a:46:f7:
be:32:de:bf:94:39:a2:30:f0:f5:68:22:25:7b:fd:0a:5d:cf:
04:93:2a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:57:06 2026 by rpki-client