Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: vSw+F+AolSsmIceHob3JhWltLv6mLjNQntjk0fNcN9g=
Subject key identifier: 4E:03:98:30:17:91:B5:E9:F1:FB:F3:28:9E:DC:A6:5F:88:52:2D:11
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01A0D6F036F78025FBDB63AB74F84E8CFEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0945
Signing time: Fri 25 Sep 2026 05:01:01 +0000
Manifest this update: Fri 25 Sep 2026 05:01:01 +0000
Manifest next update: Sat 26 Sep 2026 05:01:01 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: s/pScTth83EzMBWVSvnxlVLRwBRqI+n6Z8pKufQ3dDU=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:36:f7:80:25:fb:db:63:ab:74:f8:4e:8c:fe:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Sep 25 05:01:01 2026 GMT
Not After : Sep 26 05:01:01 2026 GMT
Subject: CN=4e0398301791b5e9f1fbf3289edca65f88522d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:f3:64:67:f9:e6:eb:1e:03:2d:97:a0:fd:
d6:fd:45:d2:d3:4a:50:19:11:be:88:e5:ab:b8:47:
99:d3:a7:d3:fb:2b:52:26:dc:21:ee:cf:dc:8c:be:
ed:f3:e3:ee:7c:1f:78:76:aa:12:3b:f1:93:2c:ce:
7f:af:0b:d8:62:f3:ef:c2:92:f9:90:06:c0:1c:07:
7b:c2:af:19:70:e0:0c:c8:86:54:d7:35:9b:eb:64:
aa:49:60:b7:32:ba:18:bc:c0:f1:b8:e7:a5:56:06:
70:ee:6a:0b:53:5a:c2:df:0d:a0:23:2f:c2:64:5c:
22:b1:eb:3e:eb:f8:e4:80:b3:98:34:09:1e:4f:6f:
88:3f:7b:65:51:ff:33:ab:8b:01:8a:94:22:88:7c:
47:46:c5:fb:4a:94:6a:fe:37:a6:6e:b2:17:01:13:
29:cc:58:f3:46:0b:f8:c5:f0:e7:a9:e7:70:ad:cb:
86:74:29:bc:25:af:c2:73:a4:b2:9f:90:1e:2f:ac:
df:f7:89:dc:d2:be:87:d2:09:da:b6:ef:16:38:e0:
54:35:17:cc:0d:1e:c2:3b:d5:25:94:41:84:df:ae:
c7:37:26:08:cf:15:8b:59:4d:18:ad:b6:ac:fb:a4:
e6:a1:2d:84:b1:80:9e:f2:ee:6e:0c:e4:fb:f1:ed:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:03:98:30:17:91:B5:E9:F1:FB:F3:28:9E:DC:A6:5F:88:52:2D:11
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:55:65:93:4e:64:62:c2:8c:29:50:d0:3b:5c:e3:81:50:
5f:ae:74:e1:30:6e:f5:4d:68:a1:13:c3:6b:cf:29:57:49:8a:
10:2d:19:f2:13:86:40:07:fd:48:fa:a3:ef:a0:59:a8:ab:25:
89:db:b3:64:b4:45:57:58:c6:54:da:a3:13:2e:a4:f5:1f:9d:
21:15:00:c5:8b:9c:d2:c9:64:3b:a7:50:b5:c9:77:d4:e1:a9:
ff:1c:66:82:15:18:1f:5b:8e:79:33:2d:76:1a:10:fb:68:e6:
39:30:3e:44:9d:57:95:49:ae:89:2a:23:ba:e8:b6:f9:e7:aa:
31:bf:35:25:15:1e:40:a8:c0:31:52:d0:7f:2a:9e:f8:0b:75:
39:c4:8b:fc:cc:61:bc:0f:c5:02:1d:5a:d1:67:d4:f1:a3:6e:
1f:8b:b1:01:06:b6:59:2b:b3:15:90:ad:e7:75:e2:1f:9e:2f:
2a:dd:73:43:32:69:67:ad:40:cb:29:9f:19:d4:d5:6d:29:b3:
d5:45:e4:74:ac:62:dc:59:48:95:70:35:4e:5d:6a:97:0e:4b:
b5:7c:a0:04:cf:23:85:5b:0b:64:98:03:5c:ea:7f:4d:72:f7:
21:7b:bf:34:63:7f:68:3d:ae:65:ac:1a:b4:a9:ea:fd:4c:1e:
12:6b:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:08:17 2026 by rpki-client