Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: Ct1Q7Wje7byMWpXB1FrcQaJ9Qv3LstACZwwU1O2y7eg=
Subject key identifier: 08:7F:7A:62:86:D3:98:A7:4F:80:0A:F9:9D:4B:38:97:D2:FF:2B:56
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 01A13FDE73C9892467A4F1BCF4FD3F58F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0B52
Signing time: Thu 15 Oct 2026 14:01:45 +0000
Manifest this update: Thu 15 Oct 2026 14:01:45 +0000
Manifest next update: Fri 16 Oct 2026 14:01:45 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: Cv+tdI2tfRrFw1YdiQimCL/x0e5WOlT2sR0RkZy+v98=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:73:c9:89:24:67:a4:f1:bc:f4:fd:3f:58:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Oct 15 14:01:45 2026 GMT
Not After : Oct 16 14:01:45 2026 GMT
Subject: CN=087f7a6286d398a74f800af99d4b3897d2ff2b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:ad:67:15:b9:d5:89:b6:ba:7e:d4:b3:0a:
65:06:fa:11:25:4a:48:cd:b3:41:04:5b:7c:78:17:
68:cd:7f:cf:99:6f:f7:3c:19:d8:81:b6:72:84:f0:
e2:2b:63:27:da:5d:eb:87:4d:18:66:56:29:89:27:
26:e0:74:e9:1f:61:cd:0e:7c:2c:ca:94:3a:e0:c4:
a9:9c:18:af:a3:53:65:cc:d0:0f:a0:83:b7:c2:ee:
6f:47:12:5a:97:b8:d7:e6:7d:06:e2:34:f5:5a:34:
35:01:cb:5c:01:2b:f3:9d:05:7c:30:95:00:ab:9f:
87:64:2c:99:e7:7f:e8:7b:90:0c:5f:6c:a4:66:e6:
d3:18:ac:6d:43:13:26:c7:1c:f0:1a:3b:d9:c1:d2:
f0:53:01:1a:e5:48:52:b4:6d:db:3b:48:5b:e3:12:
bc:8a:10:33:59:8a:61:4b:0e:a7:61:93:6d:7a:50:
b4:a1:d5:b4:9c:1c:35:35:7e:d3:1c:8d:fe:7a:e7:
e6:d0:75:14:87:28:c5:7f:70:c6:22:cb:6d:dc:7b:
44:fd:0a:85:01:bf:a0:ce:7a:88:9d:ce:a1:d5:ef:
f9:39:d2:54:5b:93:c6:00:f2:55:8a:ea:99:23:e6:
b4:68:ea:25:e0:f4:9f:b7:70:fe:70:86:9c:42:cc:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:7A:62:86:D3:98:A7:4F:80:0A:F9:9D:4B:38:97:D2:FF:2B:56
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:6c:1b:19:9d:ff:1c:08:d4:6a:9f:bb:2a:11:db:df:53:
9c:c3:68:1c:26:4c:b9:0d:ec:33:02:3e:53:8a:a5:b1:3f:73:
3a:eb:5b:2d:7a:e2:93:89:10:f0:ea:3c:ab:2b:56:dd:44:ef:
c8:cc:5d:8a:75:fb:6b:45:ec:bd:ae:f6:af:a9:43:74:e9:d8:
23:8d:46:ba:d3:eb:59:d4:7d:08:8e:7b:b0:81:6d:f9:24:d5:
51:b0:d2:a4:7e:4c:24:c2:1c:b7:0d:b1:9f:85:3e:2d:18:13:
4d:e0:4c:22:b4:67:3b:9b:1e:6a:ba:e6:ff:b2:bc:32:d2:4a:
be:f3:9a:9a:bf:97:1c:57:42:4b:18:5a:c8:24:dc:61:48:97:
4e:0f:b4:67:65:19:1e:a0:d5:3c:d7:b3:3a:8f:c8:18:90:77:
27:1c:fb:48:b2:ef:80:fd:ed:3a:10:f4:f6:1b:f7:39:fa:8c:
c5:90:ea:c4:b8:a6:6e:a9:37:b5:55:26:f3:90:e0:60:f1:3e:
e7:a4:c1:e9:c2:65:2e:6a:e7:59:61:89:23:0e:50:ad:21:c6:
22:e1:94:47:74:db:dd:69:a0:a8:b3:d8:8c:cb:fe:7e:5d:ca:
21:df:17:1f:c8:e7:ca:3b:2a:c2:6d:5b:d8:76:16:9b:d3:6d:
fa:58:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:08:13 2026 by rpki-client