Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier: UFfEE+HYCRY4nAjP9BTyTNR1rB+nFdn8bDxt2OgZeYQ=
Subject key identifier: 46:98:FC:C2:43:74:B8:10:6B:7E:15:FF:CD:C0:34:75:6C:AF:43:96
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 01A000C9F7623367662AAF00216E5FEBED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:00:31 +0000
Manifest this update: Fri 14 Aug 2026 15:00:31 +0000
Manifest next update: Sat 15 Aug 2026 15:00:31 +0000
Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: ij+ZizWABwnvEBgRjqvz2ASjGu6tCRhHSGYSL/zYXYM=)
2: wYyrUYGcpMjgcLS-qU7uWqXMxZA.roa (hash: AXtKns2L29E7O2LJbqOlS/TDRuIr5Nqsln0B0SyiTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:f7:62:33:67:66:2a:af:00:21:6e:5f:eb:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Aug 14 15:00:31 2026 GMT
Not After : Aug 15 15:00:31 2026 GMT
Subject: CN=4698fcc24374b8106b7e15ffcdc034756caf4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:12:4f:11:7c:2a:cb:8e:85:eb:79:9d:5c:
91:7c:f9:b0:21:91:e9:2d:8e:e5:e8:a0:be:5b:d7:
31:08:2a:83:a5:81:26:6d:31:c0:88:f1:a7:18:dc:
55:62:bf:44:c3:8a:d1:d4:6f:d8:6c:37:31:ea:b9:
f8:91:80:61:3a:5e:d9:50:43:7b:04:f3:42:c2:0a:
48:cb:eb:7b:1a:fa:6e:0b:70:55:1c:7f:9e:6f:39:
14:d5:3c:54:17:df:75:9d:f7:a4:0f:ff:54:33:b0:
02:25:af:47:23:25:bf:e0:7d:56:7b:ee:e0:6d:42:
a6:0b:1a:a3:02:25:ea:5e:4d:3e:9d:06:d8:82:a4:
4a:59:d0:ae:46:08:99:7c:3f:d1:e2:84:6e:ff:4e:
59:cf:b4:46:8a:2b:81:aa:03:62:9f:b2:65:32:94:
49:9b:c8:df:ee:77:f4:b1:55:c1:59:bd:07:37:64:
16:91:fc:b4:84:59:0d:0b:0a:79:bf:6d:a4:b1:f3:
d4:6f:a9:65:a1:4e:97:1b:bd:50:c5:66:7f:9c:5d:
9b:58:9f:5e:6c:1a:b2:07:74:8f:9f:9c:a0:98:a9:
5e:e5:33:69:80:27:9d:05:da:88:1e:83:d9:05:b9:
db:25:67:05:b5:ab:7a:dd:f1:94:62:76:a1:1b:3f:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:FC:C2:43:74:B8:10:6B:7E:15:FF:CD:C0:34:75:6C:AF:43:96
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a1:8c:c5:83:1b:1a:96:de:f9:17:9c:ac:57:66:25:04:b8:
5f:ed:f5:ca:d8:cb:55:69:cb:5b:df:5c:d8:ed:6d:d3:ba:58:
1b:3e:48:fd:2e:de:25:d7:65:ea:39:92:bd:53:3f:ce:4d:51:
2b:cb:73:c8:cc:0d:2c:be:d0:9e:f7:6e:e4:42:af:bf:5f:18:
18:53:e9:02:e3:a1:e2:6b:15:e4:a2:0e:a4:6a:30:46:4f:a5:
57:c1:92:c4:97:d2:50:89:65:a7:36:32:52:d1:93:09:9c:b7:
1d:e8:83:be:99:c4:7d:05:91:b1:8e:4f:56:e5:ff:4d:7b:e1:
fa:8a:55:83:8b:04:ba:ca:36:de:ba:1f:3f:96:74:1b:09:ed:
df:ba:04:b3:c8:20:e8:c6:1f:77:5c:61:c9:d1:92:f6:8d:cc:
a7:2e:a1:67:c2:9f:b0:6c:18:98:19:19:ef:60:af:a4:2d:a3:
38:9c:fd:3e:ad:f8:59:df:25:66:bf:a7:a2:67:0c:59:b6:e5:
5d:fd:9c:c0:16:c2:6d:72:5e:23:37:6b:13:cc:c4:8a:ab:e2:
18:86:ed:80:f1:e4:45:e8:c0:52:61:f5:d2:87:92:26:19:66:
bc:f1:db:5c:53:2d:fd:be:aa:91:94:b9:1b:37:a5:48:cc:ad:
0a:6c:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:20 2026 by rpki-client