Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: 8jjsV2etvM+Rq+NSh4GSyqmwlsR5wDJTymw0c/iimbM=
Subject key identifier: 55:C8:FD:A0:7E:3F:64:53:BF:5A:B1:96:24:F2:49:09:64:83:78:65
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 01A19FC83B43BEF8D6DF9FBE190F2CE2EB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1ADB
Signing time: Tue 03 Nov 2026 05:01:02 +0000
Manifest this update: Tue 03 Nov 2026 05:01:02 +0000
Manifest next update: Wed 04 Nov 2026 05:01:02 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: YlC+0WlhNW5fP/bJNLf/1ew0Anw2ddzg/yotELbx0O8=)
2: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
3: e8ndPG9CObZDTj-sbT27mV5jA-Y.asa (hash: BjxkMb2x4BWpZqw1S8ecX2TBOaHQJopVWEi2IJdALRM=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:c8:3b:43:be:f8:d6:df:9f:be:19:0f:2c:e2:eb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Nov 3 05:01:02 2026 GMT
Not After : Nov 4 05:01:02 2026 GMT
Subject: CN=55c8fda07e3f6453bf5ab19624f2490964837865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:28:32:bd:f5:a0:12:f7:97:c6:cb:f3:a8:
aa:d8:08:ad:6e:b4:9b:0a:79:6c:f8:3d:73:0e:8c:
a6:da:65:3c:b8:47:b0:d8:ca:ee:33:87:54:e9:3b:
83:33:e2:e8:df:c9:d3:1a:49:9a:f6:89:38:b7:8a:
6f:08:66:dc:bf:ee:50:a2:83:52:fa:67:59:cc:6a:
42:2d:26:e3:13:0d:ad:4d:47:cf:48:45:bb:bc:63:
ce:18:42:48:5b:e0:68:31:52:42:0f:2f:2b:a4:39:
52:71:e0:04:f9:e8:96:74:46:03:06:40:88:21:83:
98:4d:9d:37:6b:11:d4:7d:1c:04:03:3e:50:f5:b3:
d0:3f:08:10:f1:e4:d3:5d:29:d8:db:bb:50:02:68:
96:bf:5f:d5:b8:0a:23:68:a2:e5:f1:d3:92:69:e0:
9e:5c:77:9f:2a:1e:06:49:f9:90:ac:76:01:f7:60:
e5:ac:42:3e:c2:ba:5a:b7:06:9a:b4:bd:71:96:cb:
7d:da:f2:ed:e9:3a:97:a6:1a:93:87:9e:5d:71:16:
70:c2:3f:9e:99:09:4e:cf:cd:ec:85:c6:c7:95:75:
30:49:e9:5d:82:7f:0e:d1:3d:48:9b:b8:2d:95:de:
3b:3a:b5:43:6f:9a:d3:cf:25:4b:2f:8b:67:86:b5:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:FD:A0:7E:3F:64:53:BF:5A:B1:96:24:F2:49:09:64:83:78:65
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:a6:26:81:3e:3d:e5:20:1f:64:8b:33:2e:6b:c8:54:85:
46:46:49:bb:48:ed:32:6b:d5:53:32:8d:8d:72:1e:43:50:c0:
bd:d1:fb:9c:20:9a:64:40:8d:f1:f9:26:8f:5e:06:99:d3:04:
e2:61:04:c1:d1:52:72:af:33:11:5f:40:c0:be:4a:29:cf:2c:
fc:5d:70:ec:e2:61:68:08:da:10:09:f9:a7:84:01:bb:e9:30:
e7:67:17:d0:92:3a:e5:91:a7:89:27:fb:ae:7f:cc:67:70:72:
0e:8f:a1:3c:53:f6:14:91:47:d7:f8:50:f4:a5:67:72:d0:9c:
25:35:5a:9e:82:46:8c:ac:34:f4:f9:3c:7b:d7:38:a8:fe:d9:
17:31:f6:31:8e:1d:47:59:3b:b6:9d:9b:cc:ef:83:7f:2f:f1:
87:be:37:ab:f6:e9:7f:c8:2f:09:ec:79:05:b4:76:68:8a:03:
47:45:ff:e2:a8:d5:37:21:21:9b:4a:ab:93:bf:2d:85:b6:68:
4d:5d:d3:80:a6:db:89:cf:f1:2f:5e:8a:f2:d8:33:43:85:10:
a4:8b:55:58:cc:f8:52:4e:f2:80:18:61:7b:46:21:7a:9e:c3:
ab:86:51:12:11:60:d2:e5:19:f5:f1:a2:fd:3a:6a:50:ed:a9:
f1:79:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:11 2026 by rpki-client