Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: qIRByk9ih/Y8xwZIdZ/itLV/5pgzoio+bElwovT9XVc=
Subject key identifier: 3A:D9:96:5C:04:03:40:26:DE:D7:8D:9D:5F:87:98:12:3F:9E:86:51
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 01A11AF4B695CA8A55BE379A8F66B43B6CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 10:00:07 +0000
Manifest this update: Thu 08 Oct 2026 10:00:07 +0000
Manifest next update: Fri 09 Oct 2026 10:00:07 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: sg+0uGiJVJUYBtVSU4Gn2WLxIiOwSnWlSDxbw+yluVU=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f4:b6:95:ca:8a:55:be:37:9a:8f:66:b4:3b:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Oct 8 10:00:07 2026 GMT
Not After : Oct 9 10:00:07 2026 GMT
Subject: CN=3ad9965c04034026ded78d9d5f8798123f9e8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:d3:21:b3:74:5a:14:09:7b:69:c7:07:3e:
71:6b:ab:e0:7d:61:f3:44:ff:9d:39:20:d3:d5:08:
a3:c8:1b:88:c3:d0:73:a5:6b:8b:58:c5:5e:37:51:
2d:a0:e8:ed:56:80:51:97:c6:dd:de:b5:d5:a6:1a:
3d:33:3a:c5:3c:df:70:2e:0d:43:65:68:b3:b9:0c:
76:a2:ad:9a:c8:37:89:5e:fb:f9:80:7d:21:1f:28:
40:fa:fb:38:93:95:0a:c0:7f:85:02:de:c6:65:97:
23:af:43:df:15:fc:c3:93:a5:2c:45:d7:46:f5:6f:
d5:71:ec:06:9b:df:e8:0f:75:fc:62:88:19:0e:93:
42:3b:af:c4:35:ef:58:5b:40:e1:df:cb:b1:bd:e5:
6b:9c:ff:e2:e7:9a:7c:87:39:79:9e:96:d2:de:3c:
d8:2b:a9:34:9c:81:b9:4d:f6:ae:c8:c1:10:49:71:
1c:ff:fa:83:34:3d:d3:54:f3:9a:ab:7b:dc:27:28:
5b:24:ca:38:49:11:32:10:c8:2d:d6:ed:95:28:7d:
be:29:86:db:02:62:b9:63:79:79:ee:7d:79:c6:7e:
e7:2a:65:26:3a:32:cf:16:f3:f8:25:1a:70:d5:00:
b2:78:23:d6:b2:96:7c:90:88:ea:86:1a:4d:db:f2:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:96:5C:04:03:40:26:DE:D7:8D:9D:5F:87:98:12:3F:9E:86:51
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:f2:cd:1e:95:ff:9d:b8:56:b5:16:6f:44:be:e5:db:bd:
c9:ac:8a:96:e2:f3:f5:08:1b:4c:38:af:2f:35:31:c3:bd:6b:
4e:33:52:f3:10:8e:35:b2:62:9e:78:28:29:93:40:0e:55:b0:
e8:b4:6c:4f:ce:01:38:e3:f1:9b:cd:66:a7:32:3e:2d:1e:5e:
fb:bc:9d:3d:74:1d:48:63:ba:94:cc:3b:55:9b:16:70:50:2f:
4d:6d:7d:04:2b:41:1f:fe:42:71:20:1c:ea:3a:2d:ea:d8:4a:
cc:68:2d:f7:8f:23:11:99:7f:6a:fc:55:3e:2e:e9:e6:ed:d4:
aa:6e:94:76:4b:5c:58:d8:b0:b9:1d:65:ba:55:c6:1a:22:b0:
b3:8f:d1:fb:4a:20:19:c8:31:36:2b:f7:aa:0f:4b:1c:90:6d:
66:22:a7:f5:80:1d:e9:b1:d2:c6:d8:55:99:4c:ef:7d:17:1a:
a0:92:52:7c:46:cb:39:9d:d7:f1:5c:c7:57:54:4f:19:80:96:
03:14:5f:60:92:ca:67:98:9c:f9:d1:d3:68:2b:bf:0c:26:d0:
53:cb:ba:d4:1e:a3:58:10:3b:ff:f2:ab:d9:9a:a8:e5:fd:10:
22:b8:61:e2:ce:09:bf:a6:bd:38:d6:f4:8a:ca:cb:df:e6:35:
70:77:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:03:27 2026 by rpki-client