Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: da5w/Eez8iB2i6s6+GdQoEgCZMs73vhVAOalh59oHAQ=
Subject key identifier: F8:7B:8D:A7:54:D0:1C:A7:9F:47:A9:FA:6D:E8:CF:FB:43:0A:B6:79
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 019EB98FE75F7363B3E8CF6E2A615CC9A0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 02:01:16 +0000
Manifest this update: Fri 12 Jun 2026 02:01:16 +0000
Manifest next update: Sat 13 Jun 2026 02:01:16 +0000
Files and hashes: 1: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: +S7PyPcTUFIly6vSlwrfGZCuPMvIaURfAnFI9Y0bQ/E=)
2: 7Vc6GyFzlJHyTewvOkdwJkLS-9s.asa (hash: HPQdXwyp3J2HnbICqRn22xILcDG/y13SiXtWcNiXZ2k=)
3: QctoD9ranLBEP2UiaUJlWbkv5bc.roa (hash: x+yFAg7UwJjgCBv8Ws9qAi3y7N30iaQWEU6rOz2fDDg=)
4: srIV1AuGFcZV-KVIqPeVy-EHaLM.roa (hash: qPVoRvMwu0PTo3ZkogwOofWVPVdFkz/LzD3EZBXJUOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:e7:5f:73:63:b3:e8:cf:6e:2a:61:5c:c9:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jun 12 02:01:16 2026 GMT
Not After : Jun 13 02:01:16 2026 GMT
Subject: CN=f87b8da754d01ca79f47a9fa6de8cffb430ab679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:9d:d6:18:9a:c5:34:b6:b3:9d:54:aa:0c:
f6:dc:1a:8b:56:10:cc:27:66:bb:15:bc:93:76:0f:
59:05:c8:b5:f3:ac:b1:45:40:5d:a6:80:38:d1:78:
e1:f4:bc:36:17:b5:fc:82:4c:d7:b8:d1:16:91:53:
0f:7d:64:63:79:9a:6a:99:16:4d:ed:52:8e:52:6a:
5d:39:53:9c:f2:04:44:4c:61:6d:6c:ed:dd:28:26:
a6:04:66:7f:49:49:61:60:44:b2:ca:99:44:1f:df:
fb:e6:bd:19:57:b6:5e:79:c0:7d:41:b0:3f:e6:e8:
47:f5:1e:de:dd:5e:12:93:38:67:3b:42:fc:d4:1c:
cc:d4:05:82:7c:45:b3:da:d3:f8:fc:d7:43:d7:37:
3f:4f:13:ee:67:dc:fe:4c:24:f2:96:00:f2:6b:44:
e0:17:dc:d2:b3:29:ed:3e:6a:49:6b:9a:ea:22:92:
23:57:66:50:7b:9d:77:a0:36:35:c1:aa:68:b0:dd:
d3:35:fe:02:c7:24:1b:01:6d:e6:f9:98:06:e0:c2:
fb:78:8e:49:05:b5:30:ab:0e:db:61:b0:5e:56:e7:
6b:75:5b:86:9b:84:cf:3f:ea:21:3a:5d:e6:1f:06:
36:24:6c:8b:58:4b:7b:bc:e8:63:11:c7:03:7b:97:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:8D:A7:54:D0:1C:A7:9F:47:A9:FA:6D:E8:CF:FB:43:0A:B6:79
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:2e:5a:95:9b:dd:e2:4a:63:27:b4:56:3e:94:a2:82:fa:
d5:be:41:84:e8:21:5a:6f:4c:6a:cf:5a:37:b5:ad:ab:1a:d2:
59:49:db:12:c8:ba:4d:fe:07:d0:ff:49:bf:e8:ea:3a:8f:db:
97:80:54:62:06:b2:c1:16:65:5e:40:6f:a1:3e:0c:ff:d1:c5:
94:f7:22:dd:16:94:d6:87:4f:80:5b:a1:42:6a:c4:79:38:df:
93:3e:01:56:e8:25:5e:ef:79:dc:40:14:ca:8f:97:25:e9:37:
ab:91:eb:fe:38:e4:af:5b:4e:46:48:80:94:80:5b:9f:a4:d9:
e5:3c:5b:8b:11:75:07:0f:6b:f0:2f:05:2d:94:f5:35:6a:27:
a8:79:99:e5:99:21:e6:62:f7:da:89:a0:e6:90:ab:c6:b9:ac:
b7:18:57:e8:ec:3f:76:c1:0d:ed:4c:f9:05:f9:af:e0:83:99:
f5:bf:e7:ca:26:b9:b3:b7:bf:4e:fb:c2:bc:47:9b:76:98:8d:
5e:f6:8b:2a:a1:13:9e:51:15:f8:b0:b7:3a:27:9f:56:54:a9:
7b:5f:36:7d:ec:bb:ac:f8:86:19:86:7b:a1:69:fb:74:cb:22:
7b:3f:1c:74:ca:c0:a7:86:84:98:fd:c1:3e:60:91:4c:b1:32:
dc:b6:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:58:52 2026 by rpki-client