Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: l5LzK42mndlg5ZROXEf0Q47S9vxRNxNvcmljz39AAZo=
Subject key identifier: D0:C1:5B:BB:02:6C:CF:1C:00:54:22:C5:58:61:B6:3B:B6:20:01:17
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019E1DFDFF72B71504ED301C9E68E81B68B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1104
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: ofqRi14kFDzErr3EhfZHsNPDdMhRzCc7NcXX1OLUKGU=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ff:72:b7:15:04:ed:30:1c:9e:68:e8:1b:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=d0c15bbb026ccf1c005422c55861b63bb6200117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:b8:9b:9f:12:98:6e:05:1d:8b:81:76:1a:
47:00:9e:8c:22:dc:5d:43:78:d3:86:f8:7f:1e:46:
68:e0:8e:e5:b6:94:a8:d3:4a:0d:cd:e3:8b:3e:74:
b8:4d:35:c7:d1:82:06:4c:74:b7:11:a3:32:b6:a3:
a2:8b:7c:13:94:3f:2c:39:7f:3d:47:c4:6f:94:60:
e0:51:e8:da:d0:fa:b6:ff:09:75:0a:a0:d5:9e:d7:
66:36:4c:96:49:86:da:3d:79:cc:78:b2:bf:d7:d0:
84:e4:e6:69:04:7c:3c:b4:c0:37:7b:64:f2:6b:5e:
cc:0d:8b:c9:a9:57:89:9b:0e:50:70:da:e5:2a:7a:
ce:90:73:0b:55:d1:65:62:30:42:76:c9:e6:b9:6e:
87:bf:48:7f:94:54:3b:be:cf:bc:4e:0d:e5:a4:25:
47:b7:58:f9:0b:ed:6b:72:eb:02:bb:00:29:b7:82:
de:99:ad:d3:6a:b7:e7:8a:e4:06:f9:48:45:1e:46:
34:20:4e:50:1f:b8:98:d9:1d:43:03:8b:b1:bc:93:
eb:29:21:59:1f:ed:4b:7f:3b:bb:fc:16:c1:5e:80:
fd:3c:43:d5:1b:0f:03:a3:f3:d8:92:b8:c8:c8:3e:
23:7b:49:59:03:ab:70:eb:dc:37:a2:75:36:c8:6b:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C1:5B:BB:02:6C:CF:1C:00:54:22:C5:58:61:B6:3B:B6:20:01:17
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:f8:b7:51:4f:fd:df:f3:35:ae:23:0c:02:ad:68:c1:d1:
86:16:1a:c9:3b:b9:9a:0f:56:b1:ee:84:b2:7a:df:7f:2d:8e:
df:2f:28:49:6e:32:c4:f3:4e:d5:24:8a:2d:b2:fc:47:48:1d:
89:62:9a:19:ba:82:77:fd:f9:35:2d:91:8c:cc:5c:91:4c:19:
88:47:4f:17:5d:36:7d:25:b4:c8:cf:9c:d6:5b:ea:e3:ae:24:
65:45:a1:ea:9f:bd:b3:98:f7:e0:96:f5:76:3d:a3:fb:10:6a:
97:d4:88:ca:97:be:f6:fb:68:77:90:b1:de:39:83:78:1e:e0:
48:f2:99:9a:89:2a:e9:29:d9:14:68:bc:0b:bd:2b:a7:98:12:
fd:3b:45:bc:6c:03:4b:ef:0b:87:c7:1b:90:13:bc:b2:99:4b:
76:6b:66:b2:52:8f:54:bb:bb:c7:b3:46:d7:cb:5c:c7:e7:a9:
67:71:f9:07:ec:1c:f9:59:fa:73:25:53:c5:43:20:b2:9a:92:
3f:4c:45:6f:71:a9:81:ee:f0:e6:36:af:e9:57:ac:6e:9d:cc:
e2:a7:77:80:4a:97:95:9f:3f:18:8b:72:8b:30:96:a4:9e:65:
17:5e:b7:dc:81:79:7a:44:b2:60:54:3d:87:d8:f3:d1:b2:73:
17:09:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:27 2026 by rpki-client