Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
File: 2ko-wHuXhY5oNKWh-I64_jG_eyA.mft (raw, json)
Hash identifier: BLObMfdCTsJKmsqxUF8U3eCaUO0VnmTaWAsDHBzhQzc=
Subject key identifier: E5:E2:FA:9B:57:1B:A9:CC:8C:B1:81:8B:E6:13:E2:ED:DD:1C:09:F8
Authority key identifier: DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
Certificate issuer: /CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Certificate serial: 01A00138041776B6BFDE7EC95C1835DA4AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
Manifest number: 0AAD
Signing time: Fri 14 Aug 2026 17:00:43 +0000
Manifest this update: Fri 14 Aug 2026 17:00:43 +0000
Manifest next update: Sat 15 Aug 2026 17:00:43 +0000
Files and hashes: 1: 2ko-wHuXhY5oNKWh-I64_jG_eyA.crl (hash: 2YrveGWTCJl1KfT8kPc4sCBNV5LyNGFZE5c+hzaspD4=)
2: W2opD1nzA1Qy1dphbskdPw_zQDA.roa (hash: BuoBawIPnpe+VBGwQ7nX1QTlwHW5Gq29DxhylXzCD38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:04:17:76:b6:bf:de:7e:c9:5c:18:35:da:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4a3ec07b97858e6834a5a1f88eb8fe31bf7b20
Validity
Not Before: Aug 14 17:00:43 2026 GMT
Not After : Aug 15 17:00:43 2026 GMT
Subject: CN=e5e2fa9b571ba9cc8cb1818be613e2eddd1c09f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:5e:4c:30:1b:fd:42:69:18:69:98:b8:4a:
d6:6d:02:6a:28:31:de:2f:26:e8:e3:dc:1b:6d:89:
e6:fe:31:09:36:38:1b:e1:69:07:e5:50:56:48:44:
2c:53:04:a2:32:fe:f5:31:5b:40:1c:18:3f:e7:2d:
dd:2c:ec:35:e1:b2:21:69:bb:d4:ea:b4:a3:a7:49:
f8:5f:a8:71:1d:4d:d0:17:76:fd:68:2c:d9:0a:18:
c4:ec:a0:47:15:86:8f:ea:0e:2d:32:33:6a:ed:ce:
2d:86:78:18:79:cd:d6:67:7a:0e:cd:d7:89:0b:db:
47:71:51:29:7b:af:9b:b8:05:cc:d5:51:be:1e:3b:
43:11:75:b4:c1:32:0d:9d:48:b3:e8:e2:d4:28:cb:
94:5e:1e:b9:f8:4c:ab:6b:16:73:2c:38:11:0e:4e:
5e:00:9f:cb:1d:14:09:8a:61:92:b0:ff:db:f5:9a:
d2:39:dd:36:33:a2:96:52:15:56:5b:d3:f6:2a:4f:
f2:35:f3:c4:72:fc:27:4d:a3:4d:f5:8e:aa:da:45:
ab:d8:19:37:91:f3:34:5c:eb:5f:89:ca:2d:68:02:
08:25:05:7d:ce:fc:ac:ee:69:d3:26:ba:e6:7b:4d:
11:28:b8:1b:a3:ee:81:b9:bd:e6:3b:c1:f3:09:fa:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:FA:9B:57:1B:A9:CC:8C:B1:81:8B:E6:13:E2:ED:DD:1C:09:F8
X509v3 Authority Key Identifier:
keyid:DA:4A:3E:C0:7B:97:85:8E:68:34:A5:A1:F8:8E:B8:FE:31:BF:7B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ko-wHuXhY5oNKWh-I64_jG_eyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fe0306-af84-4e8e-8885-b84a9819ead6/1/2ko-wHuXhY5oNKWh-I64_jG_eyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e8:9b:f9:f2:3f:67:38:46:7f:31:6c:c5:5c:83:00:06:ff:
a3:eb:d2:c8:e9:e5:d4:3c:86:14:b8:90:ab:64:ee:5e:e6:2d:
ce:5b:43:5b:78:f1:65:47:e1:85:69:78:83:ba:11:e8:38:01:
26:93:e3:d3:3a:78:ff:d3:d9:f8:4b:3f:27:9e:2a:e9:30:30:
96:23:cf:51:b9:a2:f4:39:80:38:06:8c:0b:ba:00:90:75:b9:
44:02:72:ee:93:67:16:93:23:3a:48:c6:6a:76:27:6c:f2:fd:
d3:67:de:ad:48:3e:3c:50:cf:d6:38:0f:d4:cb:c5:fa:b5:89:
ce:2d:c8:94:1d:4b:52:7d:62:9a:fd:9a:56:9e:9c:dd:a0:ac:
7c:57:59:19:0a:53:92:a0:db:dd:3f:8d:f7:6f:a7:d9:77:84:
b7:5e:bf:07:e7:bf:96:60:a9:1f:87:1b:3f:56:ad:1c:3a:00:
32:8c:f1:b2:6b:95:d0:e3:f3:be:3f:68:36:16:90:1b:2b:8c:
ec:f2:a1:47:36:41:a4:6f:53:f8:1c:ca:bc:9e:1f:76:0d:8c:
1b:6d:14:97:27:5d:4d:22:1b:b3:cf:d1:65:68:a3:ad:fe:d0:
55:68:37:a6:8d:7e:e1:85:eb:35:e0:ac:87:d3:44:9f:a1:3f:
70:a2:29:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:03 2026 by rpki-client