Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
File: s2dOgi84dtJ96u1fZtvpwaQi6xY.mft (raw, json)
Hash identifier: ZKNj4e1PvD4saH6m5ZaxjP7he+ZqDyc0s8JlZWzYHPw=
Subject key identifier: 5E:F4:C6:EA:68:E8:64:1A:A8:FC:1A:DF:9E:05:27:C3:FA:90:FB:7B
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 01A11AF56ABF6A6DEBD44C3D70C594AAC116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
Manifest number: 0A6D
Signing time: Thu 08 Oct 2026 10:00:53 +0000
Manifest this update: Thu 08 Oct 2026 10:00:53 +0000
Manifest next update: Fri 09 Oct 2026 10:00:53 +0000
Files and hashes: 1: BO8ADzpo83mqg2wtWcdlFGRy8es.roa (hash: uPfVJC1lpWKzSiI9ihp2xNXSPIFIpPCsXMwwGJ0GDNM=)
2: s2dOgi84dtJ96u1fZtvpwaQi6xY.crl (hash: t5BKwly/O4imIkp15FABt1MxrEHd9fT12ocozgl2/6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:6a:bf:6a:6d:eb:d4:4c:3d:70:c5:94:aa:c1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Oct 8 10:00:53 2026 GMT
Not After : Oct 9 10:00:53 2026 GMT
Subject: CN=5ef4c6ea68e8641aa8fc1adf9e0527c3fa90fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:06:dc:85:13:28:73:26:86:4a:c4:7f:80:
8b:1b:41:dd:d5:82:fa:0e:f9:74:81:67:94:06:9e:
0e:92:b6:ab:67:8b:43:11:f8:75:6e:02:72:64:20:
6f:ee:c6:00:65:21:34:43:4b:54:e1:78:8c:c5:f7:
98:d3:a3:fb:38:20:d8:64:ba:de:b9:9b:52:d4:72:
3d:b0:19:22:aa:b3:0a:22:ea:15:9c:9d:2c:3b:43:
af:80:4f:91:fb:7c:82:0c:ed:d1:0d:91:e6:3c:24:
88:15:01:51:07:f2:58:28:fa:50:6d:ab:6e:e8:b3:
f0:11:42:50:83:58:d0:6d:b1:96:d4:32:8f:76:97:
fd:0f:50:25:a2:82:9b:45:d5:56:be:99:d0:e9:24:
31:6b:74:d1:50:1e:f9:89:2b:a4:71:8f:c4:7c:1f:
36:73:1e:b6:40:72:05:f1:67:f7:15:4d:27:df:a8:
37:02:8b:42:61:57:a5:f4:71:11:e2:1d:7b:0b:4f:
fe:17:1d:a8:41:e6:7a:0d:d6:aa:5e:ab:78:e9:10:
26:d6:f7:ea:98:c9:5c:d5:d2:5b:f6:79:aa:d1:18:
e3:fd:1a:e9:53:30:f7:2b:82:97:04:72:94:9d:13:
4b:9c:9c:d1:db:88:4c:80:16:9c:5a:88:e7:eb:e9:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:C6:EA:68:E8:64:1A:A8:FC:1A:DF:9E:05:27:C3:FA:90:FB:7B
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9e:a0:ab:2e:11:af:64:1d:74:9d:82:5d:89:d2:bc:e5:f2:
05:a1:a0:29:b2:28:c2:9c:6a:fa:27:23:aa:cb:17:7e:6a:66:
27:c8:13:15:b0:d6:a8:b1:07:5d:a3:a7:fe:89:7b:b4:72:4b:
6e:1c:b5:24:2b:17:2b:7b:06:57:77:18:99:84:cc:b6:38:fd:
a6:c6:5e:14:79:92:b3:ad:46:ef:f5:32:2c:16:55:1f:7d:e8:
e0:01:53:11:9a:12:20:1e:62:27:b0:cc:ea:31:92:fa:66:d9:
89:c8:13:72:75:47:23:41:29:bc:ba:bb:37:41:91:31:9d:e6:
4f:08:72:92:b9:93:5e:23:40:e3:6a:08:c7:25:44:ab:80:5a:
e3:ee:63:33:f9:7b:02:5a:08:e4:41:55:2f:d0:83:8f:d3:f5:
32:6f:dd:33:42:f6:f3:ce:25:32:94:fe:d8:21:84:bc:af:21:
3b:02:5d:80:fe:7f:90:25:e2:5f:91:eb:56:da:86:6a:bc:db:
3b:ba:3a:68:e5:4c:35:cd:6a:aa:00:a3:99:92:b3:7a:a0:0f:
97:e8:c8:cf:38:c4:80:46:14:59:5d:29:e8:fb:34:75:a4:f5:
fe:4c:1b:f2:31:69:71:72:2b:94:cb:34:6a:d6:c9:e0:ba:0a:
1d:ae:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:21:53 2026 by rpki-client