Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: 5x6gaxTfAUat8uA7fzPZfRNvk4oIlFLbIgRs4KRzYw4=
Subject key identifier: 96:D3:0D:C1:C2:6F:0B:BC:95:21:59:3F:9E:F7:68:23:54:A1:CC:CD
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 01A0005D2334CCEAA6FCE289BB090654A219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 16E8
Signing time: Fri 14 Aug 2026 13:01:38 +0000
Manifest this update: Fri 14 Aug 2026 13:01:38 +0000
Manifest next update: Sat 15 Aug 2026 13:01:38 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: akb83LbmxCSB86N2X42Z3ht/8UzD87bGay1LSIvqEfg=)
2: jZ_PcWcN6a-O2Z-3tx9t6lTT23M.roa (hash: EYrD0BtGRs4bNIFPrVTFK250phWOgkEv3oi3twZMLNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:23:34:cc:ea:a6:fc:e2:89:bb:09:06:54:a2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Aug 14 13:01:38 2026 GMT
Not After : Aug 15 13:01:38 2026 GMT
Subject: CN=96d30dc1c26f0bbc9521593f9ef7682354a1cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:22:e0:3f:3d:36:a3:ff:3b:11:3b:bb:cd:
c6:e5:7a:fc:10:60:c7:6d:e7:9a:a4:8d:df:24:57:
1d:44:a6:a2:85:dd:ba:20:94:7a:85:99:8d:f1:a4:
a7:28:f8:b2:c6:82:d0:78:01:ea:dc:e4:1f:4e:1f:
02:0b:8b:a2:6b:8b:a8:31:a7:29:4b:79:66:d0:f9:
88:d1:84:6a:af:56:83:04:cb:52:68:6a:47:6e:8f:
1e:18:95:51:95:af:37:d8:41:33:fe:b6:26:7b:28:
21:cc:75:a5:e6:32:e7:e4:41:a4:39:76:43:31:36:
74:38:33:d9:0f:94:51:62:8b:55:db:da:a8:f1:2e:
9e:3b:74:2a:58:f9:b5:79:be:55:f9:e0:e1:dc:65:
20:c7:96:63:43:92:8a:99:9f:cd:98:95:a1:17:4d:
f0:68:f7:74:42:c1:b2:18:41:df:75:e0:81:8d:a4:
8c:39:02:47:b7:64:33:bd:60:b3:50:1c:2a:21:6b:
c4:ef:11:65:af:28:cf:52:72:9b:74:29:cb:a3:2a:
05:93:33:1a:37:73:1d:6b:24:d9:db:79:82:23:51:
56:7f:9b:ce:40:10:db:65:e0:c3:33:9b:bd:6b:f3:
36:1b:e1:f4:63:dc:6a:44:b4:23:4a:93:1c:52:de:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D3:0D:C1:C2:6F:0B:BC:95:21:59:3F:9E:F7:68:23:54:A1:CC:CD
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:92:95:79:36:81:33:ff:4b:a1:bc:d5:22:77:e2:61:1b:d7:
2e:37:82:a8:7a:d7:9f:30:7c:f1:23:5f:ee:9a:7f:20:24:d1:
3a:a9:10:1b:60:6a:e3:41:a9:9e:ef:26:37:cb:9d:04:77:ef:
74:23:dd:f7:5d:1d:8a:ab:36:5e:76:c3:07:d2:f6:8f:3d:a1:
61:95:7f:d4:b0:12:cf:45:78:3f:55:b1:4d:e7:12:db:b8:f6:
48:c8:98:ef:44:45:76:ac:cd:80:b7:00:aa:36:6a:57:c7:a4:
9b:04:cf:f3:5e:e0:5f:ff:71:4a:23:a1:88:cf:20:69:2f:49:
d4:f9:d0:c1:ff:4d:af:49:be:67:f2:6a:4c:d7:a8:89:bf:55:
0a:75:dd:8a:f5:ee:d1:d7:a9:bf:38:de:c5:e0:5d:b0:ed:9d:
99:49:fa:db:c5:80:74:a6:b1:66:09:cd:ce:ea:31:9b:dc:01:
9e:51:ab:2d:12:d9:e6:2f:50:cf:64:ca:65:3c:86:75:a7:d7:
19:ce:e1:ba:5b:1b:07:f9:6d:f6:27:07:b0:00:c8:07:da:ee:
c3:3e:12:dd:53:98:97:29:14:9a:80:83:f2:4a:95:17:9d:62:
b0:91:93:c3:7b:5b:57:96:f8:22:c3:cc:2d:9c:72:5d:81:82:
bf:06:66:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:22 2026 by rpki-client