Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: mxBOQMjLaYpBAKDbFVQgHi30u2ja3Qz0rk0gjvUMvlU=
Subject key identifier: F0:85:8F:52:BA:11:5B:60:35:91:F6:81:56:E0:AE:AE:95:86:BB:3E
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01A0CB90AA23979D62A5EA5E714C133248DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1267
Signing time: Wed 23 Sep 2026 00:00:50 +0000
Manifest this update: Wed 23 Sep 2026 00:00:50 +0000
Manifest next update: Thu 24 Sep 2026 00:00:50 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: tWgBpyXS6DXV/HNJbYxpqpc6Sr4WRkrlORNQbaQ00XA=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:aa:23:97:9d:62:a5:ea:5e:71:4c:13:32:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Sep 23 00:00:50 2026 GMT
Not After : Sep 24 00:00:50 2026 GMT
Subject: CN=f0858f52ba115b603591f68156e0aeae9586bb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:52:ca:5c:da:8b:af:04:84:62:1c:53:44:
3a:c2:95:e3:ae:ed:40:3e:6a:fe:b3:13:bf:03:32:
97:df:e7:86:ff:2c:a6:fc:50:91:fd:d0:27:67:4b:
b8:57:42:8f:01:e6:15:95:01:3d:4f:5a:f3:26:b2:
05:c2:db:6c:e9:b9:ec:14:bd:5f:10:8f:6a:a6:82:
91:08:08:58:8b:9e:2e:c8:f2:f7:ef:7a:50:5f:00:
77:f6:e9:70:83:50:6d:28:dd:6e:10:91:ae:88:70:
30:6c:78:85:b2:7e:7b:66:d5:33:8d:70:d3:ce:5e:
75:92:10:ba:e3:b5:4f:14:2f:d0:a1:ac:79:df:01:
6c:fd:96:38:10:5b:46:13:47:e7:d9:90:f1:71:1c:
f3:c8:ef:a6:36:6f:3f:28:9a:1b:c6:62:08:69:f1:
87:12:8e:50:23:da:ab:df:36:47:25:91:80:6b:f2:
5d:8d:5c:2f:fe:59:3d:0c:fc:1d:b4:a8:0c:81:e1:
04:10:5a:57:8c:46:8a:78:6a:81:95:a1:38:e9:85:
b3:c1:3e:46:53:04:6c:3a:dd:61:e0:5b:4c:db:10:
11:af:1e:09:de:bd:aa:31:92:4a:09:d2:3d:da:f6:
8a:4f:09:c8:37:16:89:9a:4e:76:06:0d:0e:4f:b3:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:8F:52:BA:11:5B:60:35:91:F6:81:56:E0:AE:AE:95:86:BB:3E
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2d:4c:1e:4e:60:f0:4c:08:d2:2a:d9:9a:2c:e5:f0:16:8c:
49:4a:f3:dc:50:5d:04:f6:db:b2:64:2c:41:93:cb:dc:f8:c8:
20:e9:57:3c:ba:2b:4f:0d:65:5f:ed:35:eb:1d:81:2a:53:13:
a9:71:6d:9b:04:a9:60:28:3d:fd:a4:0d:93:d5:38:fe:fd:aa:
ce:7e:f6:e1:ab:1b:4c:bd:51:a5:3e:62:ea:51:8f:d7:b5:e5:
45:8b:24:fb:9c:6b:e0:59:4d:16:86:53:a9:3e:f3:de:fd:06:
ee:dd:dd:5e:0c:f4:b7:93:b0:02:80:f7:6e:df:5e:81:44:e7:
dc:f8:4c:0f:a7:a7:8a:72:43:86:97:eb:07:a8:b0:3a:62:ab:
7f:85:08:b1:97:ee:c6:bd:5d:f8:46:e6:e7:1a:e3:4b:71:c7:
ba:6f:f2:a8:7a:3f:50:54:86:da:3d:65:87:10:47:a7:0a:d4:
39:b7:1b:93:7e:fe:e5:81:e0:46:4e:63:96:f4:7a:1e:bb:c7:
7d:0a:e7:e6:56:0d:82:54:a0:e9:32:f8:60:92:ab:e8:50:08:
b3:d8:af:a8:b5:6c:92:63:64:06:c0:c3:9b:0a:57:bf:b0:26:
08:4c:ed:32:18:10:84:fd:0b:d4:20:08:5a:cd:60:06:a0:2a:
4f:8f:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:51:03 2026 by rpki-client