Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: ud7UYZWHuusAXRRsuIpdlazr/qoNECCwK5cqz/cb0aU=
Subject key identifier: 59:5E:31:33:05:B5:CC:23:E7:F5:C4:09:10:59:AB:7D:D5:31:60:4B
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 01A08D8DAB069B57ED4DADF1876F3192F844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 23:01:06 +0000
Manifest this update: Thu 10 Sep 2026 23:01:06 +0000
Manifest next update: Fri 11 Sep 2026 23:01:06 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: G2zIRqphRbww4vmc06qrCCKLbUCclSwzCwjRDwcjQZY=)
2: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
3: e8ndPG9CObZDTj-sbT27mV5jA-Y.asa (hash: BjxkMb2x4BWpZqw1S8ecX2TBOaHQJopVWEi2IJdALRM=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:ab:06:9b:57:ed:4d:ad:f1:87:6f:31:92:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Sep 10 23:01:06 2026 GMT
Not After : Sep 11 23:01:06 2026 GMT
Subject: CN=595e313305b5cc23e7f5c4091059ab7dd531604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:12:41:15:6b:61:36:0f:0d:a9:3b:98:bd:
b5:93:f6:cd:ed:c1:1a:65:75:d0:b9:28:8d:bb:1d:
96:9d:41:f9:50:ae:de:98:02:2d:7b:e5:3e:42:65:
e3:ef:35:7e:4f:a8:7e:de:cd:27:fc:4e:f2:29:30:
2c:5b:08:68:f4:75:30:e3:84:06:60:ed:dc:01:90:
b2:d1:c9:f9:c3:46:45:70:81:a5:9d:f1:fa:90:e0:
70:7c:96:86:96:6d:0f:44:04:43:6e:64:e2:ec:25:
2c:ce:54:8b:74:d4:a3:e4:fc:c6:28:a0:5c:76:b8:
9c:19:c3:6a:54:d1:91:5b:07:e0:ec:16:65:9c:8f:
60:48:ce:2c:74:0b:9e:8a:14:c5:38:c8:83:e6:8d:
4d:34:98:54:d4:8f:4b:b7:f1:40:83:79:d4:f8:3f:
56:3a:24:4a:3f:52:ba:41:54:96:3c:d0:e4:c6:6b:
77:0d:a5:63:07:e4:86:16:4b:fc:b7:12:b0:07:94:
f8:db:a1:9a:ef:2d:93:c8:b3:d9:bf:a4:7b:dd:e6:
18:95:1b:f9:91:09:20:41:cd:b4:b6:fa:00:e7:42:
75:47:96:b5:7d:27:0b:15:e9:d6:8c:93:dd:1b:f5:
5d:d7:29:54:59:dc:3c:c0:07:c6:81:01:c0:d2:0b:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:31:33:05:B5:CC:23:E7:F5:C4:09:10:59:AB:7D:D5:31:60:4B
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:00:25:4c:54:bf:cc:5b:67:3d:18:28:f6:df:b3:c2:b5:81:
f5:9a:4d:1f:07:15:71:e2:45:ee:09:fb:51:64:63:15:f0:18:
db:9f:7e:7f:c9:e9:cf:51:a9:42:9b:48:e6:fb:6c:85:1a:0f:
f4:a1:12:dd:9e:a9:d9:07:83:34:67:25:37:e8:d1:36:19:2e:
ac:1f:f5:39:22:c1:1b:12:fa:c5:30:89:1f:f2:c4:4a:1e:76:
5b:9e:75:30:dd:29:91:d5:a5:9c:e9:79:98:84:28:42:bf:ef:
1a:1d:d1:6a:12:03:2e:1c:66:05:f8:f6:28:7d:0f:2f:a9:a3:
7f:1e:05:30:0c:3e:f0:c8:05:6b:bd:e5:71:f8:f2:f6:de:38:
04:57:61:c9:b5:8f:f2:1d:32:39:34:2a:7c:a1:c3:8a:65:4a:
b9:ee:cd:55:c5:4f:f3:1d:61:19:1b:f7:d5:fc:38:02:f2:6a:
02:1c:3e:43:b0:3c:d5:54:04:4a:e4:ff:ff:3c:09:db:f8:a8:
f6:ba:fd:9b:15:d5:22:5e:88:5c:4c:89:39:35:43:2e:a4:bd:
c3:41:da:f3:88:11:11:54:d8:6a:41:69:e3:a7:e7:46:9f:20:
4d:5f:fd:ca:dd:74:59:ac:91:67:4b:e5:fa:57:ef:32:3d:fd:
f9:16:35:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjasGm1ftTa3xh28xkvhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh
MGFmZjIwHhcNMjYwOTEwMjMwMTA2WhcNMjYwOTExMjMwMTA2WjAzMTEwLwYDVQQD
Eyg1OTVlMzEzMzA1YjVjYzIzZTdmNWM0MDkxMDU5YWI3ZGQ1MzE2MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviYSQRVrYTYPDak7mL21k/bN7cEa
ZXXQuSiNux2WnUH5UK7emAIte+U+QmXj7zV+T6h+3s0n/E7yKTAsWwho9HUw44QG
YO3cAZCy0cn5w0ZFcIGlnfH6kOBwfJaGlm0PRARDbmTi7CUszlSLdNSj5PzGKKBc
dricGcNqVNGRWwfg7BZlnI9gSM4sdAueihTFOMiD5o1NNJhU1I9Lt/FAg3nU+D9W
OiRKP1K6QVSWPNDkxmt3DaVjB+SGFkv8txKwB5T426Ga7y2TyLPZv6R73eYYlRv5
kQkgQc20tvoA50J1R5a1fScLFenWjJPdG/Vd1ylUWdw8wAfGgQHA0gt84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFleMTMFtcwj5/XECRBZq33VMWBLMB8GA1UdIwQY
MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt
NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz
LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAAlTFS/
zFtnPRgo9t+zwrWB9ZpNHwcVceJF7gn7UWRjFfAY259+f8npz1GpQptI5vtshRoP
9KES3Z6p2QeDNGclN+jRNhkurB/1OSLBGxL6xTCJH/LESh52W551MN0pkdWlnOl5
mIQoQr/vGh3RahIDLhxmBfj2KH0PL6mjfx4FMAw+8MgFa73lcfjy9t44BFdhybWP
8h0yOTQqfKHDimVKue7NVcVP8x1hGRv31fw4AvJqAhw+Q7A81VQESuT//zwJ2/io
9rr9mxXVIl6IXEyJOTVDLqS9w0Ha84gREVTYakFp46fnRp8gTV/9yt10WayRZ0vl
+lfvMj39+RY1vA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:46 2026 by rpki-client