Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: UeUo8huXaTtjB2gWtuRTcjuumyDApw7FQdDUZghf75Q=
Subject key identifier: EA:7A:7D:C4:EC:18:79:57:51:7B:1F:54:DF:A1:11:0C:03:31:F0:DB
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019D2AA9705D6954C0C757A548326FDCD49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1086
Signing time: Thu 26 Mar 2026 15:00:40 +0000
Manifest this update: Thu 26 Mar 2026 15:00:40 +0000
Manifest next update: Fri 27 Mar 2026 15:00:40 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: L6w1u1Ja2VoCzp8AkQQxIalfY7ZIHSU+0twDfeTZ7Hw=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:70:5d:69:54:c0:c7:57:a5:48:32:6f:dc:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Mar 26 15:00:40 2026 GMT
Not After : Mar 27 15:00:40 2026 GMT
Subject: CN=ea7a7dc4ec187957517b1f54dfa1110c0331f0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:4f:d2:7b:cd:6f:6b:71:a5:bb:23:0b:6b:
cc:ca:01:53:1c:d7:b7:94:06:94:50:8b:cc:b5:05:
2d:b5:8d:c6:86:d9:2a:e7:e4:58:f4:fa:ed:1c:20:
b6:50:be:0f:77:7a:2b:67:79:7b:85:67:cd:35:77:
63:02:bb:bf:a1:26:80:fc:36:37:44:91:e1:77:8a:
df:a8:b6:e4:05:67:e4:b4:af:36:33:f7:84:0d:67:
21:d8:6c:0e:84:f6:b4:ee:39:ae:23:29:50:ff:74:
24:1a:cc:6e:64:38:cc:53:b8:aa:4f:3e:55:a5:3a:
09:2f:8d:1a:ac:5e:54:28:f2:23:19:05:44:fa:02:
2f:d5:83:38:f6:c7:d3:69:a8:5b:f8:04:bb:bc:ac:
0f:7e:79:53:a8:81:c1:f0:4a:fc:ec:f1:20:39:7c:
f7:bb:38:a3:e8:c5:b5:16:81:89:c6:bc:ed:7c:90:
2f:96:be:89:3d:f8:d6:a7:21:e0:60:fa:53:8b:9c:
1b:41:83:3f:ec:57:f3:e5:34:bc:d5:64:70:bc:e8:
38:76:12:bb:0c:0d:3a:27:dc:2c:70:dd:eb:23:ad:
13:b7:8a:c4:52:44:59:de:aa:e3:64:40:6b:81:07:
67:cd:e2:2f:75:df:fb:b3:31:bb:3f:0b:01:8f:46:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:7D:C4:EC:18:79:57:51:7B:1F:54:DF:A1:11:0C:03:31:F0:DB
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7a:b5:9c:7c:4d:ae:e0:b6:ab:2b:47:1f:4b:c4:e4:66:55:
04:23:ce:ab:af:76:76:de:37:d7:b8:e0:50:01:31:d7:33:a8:
2b:5b:d7:58:1c:73:2d:d5:7f:82:02:f8:e5:82:40:f7:52:6e:
bc:38:6c:bb:d6:3d:93:cb:df:2c:86:f1:d9:bc:a0:e2:e4:b3:
91:66:e5:f8:0f:fc:d0:9d:2f:39:ca:3b:0a:c8:90:c7:4f:3e:
88:35:f6:ae:78:c8:23:16:a6:4b:dd:5f:f6:fe:84:de:e4:5d:
ce:9a:22:ae:e3:00:3a:0b:78:5a:99:5f:02:68:b2:d8:48:51:
3c:63:f5:d2:2b:68:24:32:2d:9b:3c:3e:1e:a1:51:d7:fa:40:
86:d6:9d:65:36:a3:1a:c5:92:d7:e3:1f:2b:12:d1:a6:33:f6:
4e:11:60:ae:0d:3c:69:33:86:15:1d:76:8b:77:8b:bb:4d:c0:
bd:4c:ce:6e:6e:c8:92:1d:2f:a4:be:75:09:3b:3a:00:28:e4:
77:d4:8d:e7:93:a7:75:92:d7:bd:d6:0f:f9:23:3e:2b:51:a9:
9e:69:c7:ae:8e:99:4b:c8:c0:30:8f:cf:42:ec:46:6c:72:82:
d8:8b:88:df:59:59:2c:d3:8a:b2:6b:52:81:3d:86:cd:f9:7a:
b5:e9:6a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqXBdaVTAx1elSDJv3NSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjYwMzI2MTUwMDQwWhcNMjYwMzI3MTUwMDQwWjAzMTEwLwYDVQQD
EyhlYTdhN2RjNGVjMTg3OTU3NTE3YjFmNTRkZmExMTEwYzAzMzFmMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrZP0nvNb2txpbsjC2vMygFTHNe3
lAaUUIvMtQUttY3Ghtkq5+RY9PrtHCC2UL4Pd3orZ3l7hWfNNXdjAru/oSaA/DY3
RJHhd4rfqLbkBWfktK82M/eEDWch2GwOhPa07jmuIylQ/3QkGsxuZDjMU7iqTz5V
pToJL40arF5UKPIjGQVE+gIv1YM49sfTaahb+AS7vKwPfnlTqIHB8Er87PEgOXz3
uzij6MW1FoGJxrztfJAvlr6JPfjWpyHgYPpTi5wbQYM/7Ffz5TS81WRwvOg4dhK7
DA06J9wscN3rI60Tt4rEUkRZ3qrjZEBrgQdnzeIvdd/7szG7PwsBj0bYswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOp6fcTsGHlXUXsfVN+hEQwDMfDbMB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknq1nHxN
ruC2qytHH0vE5GZVBCPOq692dt4317jgUAEx1zOoK1vXWBxzLdV/ggL45YJA91Ju
vDhsu9Y9k8vfLIbx2byg4uSzkWbl+A/80J0vOco7CsiQx08+iDX2rnjIIxamS91f
9v6E3uRdzpoiruMAOgt4WplfAmiy2EhRPGP10itoJDItmzw+HqFR1/pAhtadZTaj
GsWS1+MfKxLRpjP2ThFgrg08aTOGFR12i3eLu03AvUzObm7Ikh0vpL51CTs6ACjk
d9SN55OndZLXvdYP+SM+K1GpnmnHro6ZS8jAMI/PQuxGbHKC2IuI31lZLNOKsmtS
gT2Gzfl6telqgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:19 2026 by rpki-client