Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: JWFwzg8cmCRjV+QbHdd7uhHdU06m3pnDCewj7u0iOJo=
Subject key identifier: 53:E4:A1:F8:31:18:B7:54:67:29:74:F8:96:D8:16:D7:25:79:64:14
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019DD1D21B4B07B26DB352D786E61FE58F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 18E2
Signing time: Tue 28 Apr 2026 02:01:40 +0000
Manifest this update: Tue 28 Apr 2026 02:01:40 +0000
Manifest next update: Wed 29 Apr 2026 02:01:40 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: VKKfGb/75ja1uGkEwyhgdJLznmhjus8+YtYQZRWJ4Q8=)
2: 7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa (hash: HPQdXwyp3J2HnbICqRn22xILcDG/y13SiXtWcNiXZ2k=)
3: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d2:1b:4b:07:b2:6d:b3:52:d7:86:e6:1f:e5:8f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Apr 28 02:01:40 2026 GMT
Not After : Apr 29 02:01:40 2026 GMT
Subject: CN=53e4a1f83118b754672974f896d816d725796414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:da:57:2d:26:85:d6:7c:df:01:3d:27:11:
d9:74:3d:02:6d:13:8d:c6:ac:9d:75:f7:a7:80:3f:
b1:c3:f9:8f:ad:8e:53:76:89:b9:0e:a6:35:a0:79:
e7:b1:88:a0:df:6b:ed:cb:6c:e1:c3:51:d4:c9:82:
b9:50:43:1a:c5:4d:a4:4c:6b:fc:ec:09:0a:35:23:
70:fb:75:e8:36:99:7a:59:7d:26:3f:c6:22:ec:b2:
24:96:1f:4d:ec:d6:e6:69:fd:02:07:1f:d4:5e:e0:
d1:50:52:94:7f:3a:a2:69:36:4f:ce:c4:64:fa:bd:
a5:14:98:5c:82:20:13:d0:60:eb:13:47:55:17:40:
e8:78:b0:bf:5c:37:04:16:2b:4a:42:de:60:4d:23:
01:5b:81:e0:21:79:76:f0:f0:eb:6c:32:ae:0b:75:
ad:72:2e:c0:b7:75:20:54:ab:7d:79:ea:0f:72:75:
c0:42:47:15:0a:e7:86:71:b7:f2:39:86:8b:1d:9b:
f2:a7:3b:e3:f2:e8:cc:13:27:5c:53:5e:e8:7c:c6:
d3:58:e7:7b:50:14:44:65:b0:3c:d9:77:14:76:54:
7a:35:f9:c8:a4:14:dd:30:77:79:fb:95:c9:fe:ee:
8a:f5:0a:9d:58:db:8c:4d:35:43:48:57:7c:69:16:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:A1:F8:31:18:B7:54:67:29:74:F8:96:D8:16:D7:25:79:64:14
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:aa:b9:d8:12:d9:a8:e7:32:99:1d:68:57:2e:e7:b0:9b:c6:
10:1c:bd:71:d0:1d:5f:53:40:a1:76:fa:b6:20:2f:ea:c1:fe:
ec:84:24:cd:47:b4:80:55:17:6a:9f:61:c4:0e:8b:65:a2:fe:
e6:d0:b3:52:3d:4e:a0:0a:7e:74:88:41:fc:94:fa:2d:a9:ae:
bb:92:11:46:ee:ee:25:d2:94:04:ec:7c:cc:ba:b3:96:88:a5:
c7:ab:4d:a5:da:cd:8d:bd:0f:01:97:63:8b:fc:17:cf:0a:cd:
c5:98:b3:b4:83:44:e5:46:9e:f9:f1:17:02:8b:b0:b4:c4:a1:
b7:f0:04:dc:3c:93:83:a8:5f:44:d0:41:16:71:fa:8d:c4:67:
99:1a:4a:10:59:11:ea:0d:cd:c1:e0:19:85:66:ed:a0:7e:8b:
b8:cf:47:f2:56:11:bd:7c:c0:cc:87:59:6a:6f:c8:34:db:76:
0b:b8:f4:8a:52:c8:30:eb:1a:8d:e2:67:7f:b6:2e:6c:a6:5f:
3f:30:a0:06:cb:69:f7:e6:98:5b:68:c5:07:88:61:29:e7:49:
2a:aa:1f:72:ad:40:80:a8:81:5b:e7:da:05:5e:f9:c9:21:10:
48:87:f5:80:26:fc:3a:a5:18:9c:0e:c9:48:10:96:43:42:ed:
52:3e:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:25:26 2026 by rpki-client