Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
File: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft (raw, json)
Hash identifier: /ZtfWYehgd7d4JHu0uN8+c4G9QzwRUXRmpB/jEXEdlk=
Subject key identifier: 28:97:CA:94:DD:49:BF:54:A1:1B:B9:E7:7A:B2:F6:C5:EE:25:4E:D0
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Certificate issuer: /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial: 01A000CA0C245506771B16BF526B5BBCD63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
Manifest number: 1190
Signing time: Fri 14 Aug 2026 15:00:36 +0000
Manifest this update: Fri 14 Aug 2026 15:00:36 +0000
Manifest next update: Sat 15 Aug 2026 15:00:36 +0000
Files and hashes: 1: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl (hash: Z/mywytD+anl330cHxU9La7Yubp4Knmd0glED7qBOq4=)
2: XGXdZuWArU8DUaMKbDMpc7L7WG4.roa (hash: b1uv3hiq3QuqB6rWvknFaAIJIJ6UZQWlgoHNYzcvoDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:0c:24:55:06:77:1b:16:bf:52:6b:5b:bc:d6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Validity
Not Before: Aug 14 15:00:36 2026 GMT
Not After : Aug 15 15:00:36 2026 GMT
Subject: CN=2897ca94dd49bf54a11bb9e77ab2f6c5ee254ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:8b:fa:15:7c:0a:3f:60:64:90:62:5a:c8:
b9:7c:34:20:1f:ce:56:85:9b:b8:59:24:1c:d7:9a:
26:b2:b0:a7:52:92:48:52:80:84:f0:cf:2e:20:80:
04:18:e0:38:51:75:02:83:1d:50:36:cd:1c:33:4b:
44:3c:05:0f:45:21:bb:65:84:61:c3:3a:b5:f1:7f:
7d:ba:c2:2f:3e:ce:9f:f4:81:fb:26:c5:50:97:fc:
2c:62:8e:4b:61:28:57:05:44:68:f0:12:55:9a:bb:
b1:01:58:b5:2e:0c:c3:ed:9a:cb:b2:c9:40:35:0b:
77:6f:e7:8d:e0:b3:5b:ef:b5:8d:aa:e4:bb:2f:77:
94:ec:e3:63:11:85:4a:bf:cb:4f:9b:26:97:23:cc:
e0:07:14:e6:6c:6b:a8:1c:0d:e2:d4:d4:cf:62:b4:
5b:0f:68:ca:a8:76:06:c7:c1:a7:51:89:c7:e4:31:
5a:4d:a5:25:db:e3:70:ef:35:cd:59:a9:bc:a9:31:
55:9d:76:c8:28:02:ab:ab:58:36:64:d6:76:2f:7c:
11:5f:0d:b0:c2:2a:95:35:7d:6f:5d:43:fc:87:1d:
57:05:e8:f4:c0:6d:ac:a0:27:68:0d:6b:9c:db:b3:
77:23:e2:0d:2b:21:1f:f0:b2:60:e4:6f:ca:b3:d7:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:CA:94:DD:49:BF:54:A1:1B:B9:E7:7A:B2:F6:C5:EE:25:4E:D0
X509v3 Authority Key Identifier:
keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:91:38:dc:cd:0a:b1:c1:bd:32:32:72:b2:56:88:bf:61:
91:db:e8:07:53:f1:47:bb:93:7d:db:52:24:34:5c:7d:2c:a2:
11:2e:e4:a2:c0:58:84:71:c5:cd:2b:f0:f8:d0:43:65:ab:a6:
6e:cb:29:8a:6d:de:ec:8d:b5:87:29:fc:4c:6a:a0:45:f2:86:
1c:cd:2b:a1:4f:7b:95:4c:1f:79:40:a4:8e:06:18:c5:66:69:
34:fa:e2:7b:2d:83:52:c7:83:05:36:aa:b9:7f:8f:31:7a:07:
96:bf:d2:ff:54:23:3f:9f:af:9d:16:74:4e:84:4a:ca:c2:51:
4c:85:f9:b4:ce:62:23:ef:61:26:25:94:06:7e:ab:a5:15:4a:
3c:eb:e8:a7:63:77:c1:48:98:23:bf:fd:77:92:35:af:ef:a8:
ce:91:7e:88:fe:34:74:d1:43:93:44:19:f1:99:c8:88:71:82:
4d:30:f0:3c:d6:35:85:90:d7:a2:1b:10:68:61:62:4b:96:2c:
f7:8c:e4:63:b0:97:84:5d:c8:0f:97:15:a0:26:3d:e4:13:59:
4e:e0:ba:db:d9:8f:41:1b:8f:2b:68:e3:5e:1c:d0:88:ff:07:
6f:bf:8e:25:de:a2:d0:8b:c3:b9:fb:67:20:fe:8b:04:09:41:
18:8a:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:05 2026 by rpki-client