Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: PLhamZxUtFtJs/8Y/nQdTIo8ONPy18iYBkSSpTxwjsQ=
Subject key identifier: 70:24:87:75:A8:2C:C3:9A:63:65:71:B4:3F:B2:2E:5B:BD:40:55:18
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 01A13D139275E516960713D8AB84C1DFE553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 178C
Signing time: Thu 15 Oct 2026 01:00:55 +0000
Manifest this update: Thu 15 Oct 2026 01:00:55 +0000
Manifest next update: Fri 16 Oct 2026 01:00:55 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: UgxmxPAWofdJUj5gEoxZRePa/otpIBzugSgjLolWTH4=)
2: jZ_PcWcN6a-O2Z-3tx9t6lTT23M.roa (hash: EYrD0BtGRs4bNIFPrVTFK250phWOgkEv3oi3twZMLNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:92:75:e5:16:96:07:13:d8:ab:84:c1:df:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Oct 15 01:00:55 2026 GMT
Not After : Oct 16 01:00:55 2026 GMT
Subject: CN=70248775a82cc39a636571b43fb22e5bbd405518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:34:d9:2c:4d:b7:b8:32:38:ec:a1:cc:9e:
66:2f:24:57:78:8f:4b:bd:55:02:d1:c6:91:ca:53:
78:13:f8:b1:07:10:0f:ba:e3:c9:d2:18:64:9d:75:
7b:c6:a2:3b:a3:9e:c6:69:24:28:8f:0a:34:ee:bb:
f5:4e:a6:00:73:1b:90:51:c0:d8:3d:f1:e9:55:4b:
6e:1e:90:4f:bc:5a:29:20:69:7b:01:aa:db:45:39:
29:05:15:57:91:43:21:e2:fa:67:fa:8d:04:cc:0a:
2c:d6:63:e5:ec:4c:73:19:f3:5d:dc:b6:16:f3:30:
a7:04:52:5f:55:66:8a:24:74:14:0a:33:b6:b4:21:
05:4d:d2:c0:d4:e1:38:e0:21:ee:a2:2d:80:fe:c9:
fc:e2:7b:5e:91:82:a8:4a:71:e0:9a:f6:b8:19:6c:
fb:5a:83:5b:59:70:66:6f:e2:f0:fe:4b:f8:44:b8:
3a:8a:39:45:d4:2a:91:45:ac:6c:0d:48:5b:d5:e4:
44:c6:fb:ea:10:4f:fa:06:99:f0:47:43:91:7a:77:
de:46:e6:98:f0:09:ec:be:c9:8e:8d:c9:29:ed:41:
ad:30:68:62:8b:9d:cf:db:d2:ff:a5:91:e6:9e:a2:
5e:7d:e2:76:43:56:f9:81:92:73:13:dc:7b:74:1f:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:87:75:A8:2C:C3:9A:63:65:71:B4:3F:B2:2E:5B:BD:40:55:18
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:45:b5:ed:f1:f1:56:6c:b7:f1:77:82:e0:0d:e3:d0:a1:fa:
d5:55:bb:12:11:38:1f:09:45:27:40:d5:1d:76:d9:ba:81:0a:
96:f9:64:71:dd:94:46:16:30:21:1e:f8:36:05:0a:07:e2:e1:
4b:48:83:b1:0d:1f:ed:a2:76:d2:2d:60:82:c5:10:a8:d4:c7:
c2:88:53:ca:c7:f0:44:b1:79:5c:32:d1:b9:09:b7:70:bd:d0:
68:48:e1:06:27:55:87:97:86:42:68:c8:7b:37:a7:84:e8:6d:
d4:d8:81:59:6a:ac:16:38:9f:2b:79:6c:b8:36:04:cd:3b:98:
2b:6d:79:4f:e7:b6:70:9f:d1:fe:59:48:bb:ee:17:2c:7f:dc:
6b:06:fb:e9:2a:e4:73:33:e8:73:aa:59:26:ca:4b:98:09:4d:
8f:7a:64:d6:49:c4:7b:74:40:77:af:b4:a1:b5:09:ee:36:99:
83:37:ab:70:bb:9f:cf:44:24:aa:06:c6:b8:44:6a:55:f8:dc:
d2:48:f3:ea:b7:09:97:1c:b5:e7:38:42:6f:cb:8b:5a:41:df:
8f:ad:bd:ec:d7:c3:30:fd:46:d9:21:d7:79:6e:dc:19:d7:30:
3e:0a:74:a4:1b:48:b2:08:73:aa:6e:04:35:68:37:b3:57:8b:
40:d5:9f:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E5J15RaWBxPYq4TB3+VTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZTllNDBmZjlmYmI2MjgwZGEzNmU5NzJmMjBkMzEyNTAw
YzE4NWMwHhcNMjYxMDE1MDEwMDU1WhcNMjYxMDE2MDEwMDU1WjAzMTEwLwYDVQQD
Eyg3MDI0ODc3NWE4MmNjMzlhNjM2NTcxYjQzZmIyMmU1YmJkNDA1NTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymA02SxNt7gyOOyhzJ5mLyRXeI9L
vVUC0caRylN4E/ixBxAPuuPJ0hhknXV7xqI7o57GaSQojwo07rv1TqYAcxuQUcDY
PfHpVUtuHpBPvFopIGl7AarbRTkpBRVXkUMh4vpn+o0EzAos1mPl7ExzGfNd3LYW
8zCnBFJfVWaKJHQUCjO2tCEFTdLA1OE44CHuoi2A/sn84ntekYKoSnHgmva4GWz7
WoNbWXBmb+Lw/kv4RLg6ijlF1CqRRaxsDUhb1eRExvvqEE/6BpnwR0ORenfeRuaY
8AnsvsmOjckp7UGtMGhii53P29L/pZHmnqJefeJ2Q1b5gZJzE9x7dB9piwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAkh3WoLMOaY2VxtD+yLlu9QFUYMB8GA1UdIwQY
MBaAFNjp5A/5+7YoDaNuly8g0xJQDBhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84NzM4YjktMmQwYS00ZWY2LWFmYWQt
MWFlNTA2ZWExNzYwLzEvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84NzM4YjktMmQwYS00ZWY2LWFmYWQtMWFlNTA2ZWExNzYw
LzEvMk9ua0Rfbjd0aWdObzI2WEx5RFRFbEFNR0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0W17fHx
Vmy38XeC4A3j0KH61VW7EhE4HwlFJ0DVHXbZuoEKlvlkcd2URhYwIR74NgUKB+Lh
S0iDsQ0f7aJ20i1ggsUQqNTHwohTysfwRLF5XDLRuQm3cL3QaEjhBidVh5eGQmjI
ezenhOht1NiBWWqsFjifK3lsuDYEzTuYK215T+e2cJ/R/llIu+4XLH/cawb76Srk
czPoc6pZJspLmAlNj3pk1knEe3RAd6+0obUJ7jaZgzercLufz0QkqgbGuERqVfjc
0kjz6rcJlxy15zhCb8uLWkHfj6297NfDMP1G2SHXeW7cGdcwPgp0pBtIsghzqm4E
NWg3s1eLQNWfKQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:54 2026 by rpki-client