Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: YxukHtKEout7PeFVN9q6ljc0kVCIHFJ8pmNrmk7qZZM=
Subject key identifier: 08:F7:F3:94:A5:7E:C4:88:6C:C8:3C:AB:A9:26:C1:EE:C5:36:4E:3A
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01A0CA102CE531A326671426F35032124267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0672
Signing time: Tue 22 Sep 2026 17:00:52 +0000
Manifest this update: Tue 22 Sep 2026 17:00:52 +0000
Manifest next update: Wed 23 Sep 2026 17:00:52 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: wip11htSlSdrqRbIfMlgmTM+VoGHm69jX8WMphGg+FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:2c:e5:31:a3:26:67:14:26:f3:50:32:12:42:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Sep 22 17:00:52 2026 GMT
Not After : Sep 23 17:00:52 2026 GMT
Subject: CN=08f7f394a57ec4886cc83caba926c1eec5364e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:fa:a9:db:a9:df:f9:b8:4b:2d:31:0b:83:
c1:cb:e4:06:4c:3c:4a:23:79:3e:b0:8e:dc:ac:db:
4f:6d:3a:4d:69:78:fa:2d:a1:7c:e4:8d:0f:e9:9d:
0a:55:ba:25:39:ab:d9:4f:ad:79:63:c0:19:e1:af:
24:df:aa:52:fd:74:b8:c5:d1:3a:13:1b:18:58:a0:
ea:fc:f2:77:98:54:16:e6:ba:39:02:e9:1c:d2:d2:
16:eb:99:39:33:96:db:fe:5f:15:41:5f:e4:af:e4:
59:ca:87:4c:24:66:30:4b:be:e7:42:5c:57:48:32:
6c:28:8e:20:f6:13:0b:9a:20:8f:26:78:45:d7:77:
b7:fb:35:40:d0:b3:75:17:5a:6f:d8:3f:df:b4:64:
1b:0c:33:e1:0f:1a:5a:74:c9:4c:b4:ff:6e:ff:29:
c7:e3:3e:8b:54:39:4b:92:1d:ba:2e:9b:84:1e:b8:
3a:26:7e:33:3f:01:16:98:ad:ea:ec:69:7f:3d:85:
e1:f3:bf:c3:34:8e:61:9c:85:82:53:b1:28:b7:18:
d2:3c:56:6b:1e:05:5f:26:a1:66:12:94:2c:f2:a1:
7c:ef:0e:e1:c2:48:2c:bb:b6:a5:56:66:d1:47:28:
69:20:28:45:f7:f8:51:b1:87:c4:86:a0:c9:76:5b:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:F3:94:A5:7E:C4:88:6C:C8:3C:AB:A9:26:C1:EE:C5:36:4E:3A
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c9:0b:83:a0:79:a3:66:1f:c1:05:2d:b9:2a:cb:97:86:81:
45:e6:b4:be:1b:66:31:bd:47:86:d8:0d:e1:bf:d7:ae:54:59:
21:96:b7:e8:78:53:1f:96:ad:09:00:c5:71:f2:7f:91:d3:57:
44:e2:d3:ce:c9:c2:f8:0b:8e:48:a1:f3:4b:65:da:8e:38:40:
74:c1:89:17:09:ec:58:9e:52:8c:ab:4f:81:14:1e:0d:47:94:
e4:02:e9:c7:54:94:f0:43:12:5b:77:72:5a:2d:c6:22:ab:7e:
bf:0c:c8:f3:48:06:42:9c:9e:99:b4:e2:e9:37:d5:55:a2:a1:
24:2d:89:74:bd:02:d5:31:7b:3c:e5:15:9a:e2:ff:c1:a3:64:
06:7a:00:17:a0:f7:f6:fa:28:0f:fb:0e:9d:59:38:12:d7:7c:
0e:fd:89:50:c0:b0:c0:f0:16:10:ac:76:c2:90:ce:10:52:66:
38:48:ed:3e:30:bd:ca:c9:b0:4f:74:9d:bf:22:2b:5c:0f:ca:
9a:c2:32:90:0b:06:ac:d4:13:65:61:e3:1b:e3:42:18:94:e8:
2c:8a:b0:7d:dc:40:f6:eb:ca:d5:91:46:e6:fb:39:33:3d:03:
07:24:0e:b2:a5:e4:18:ab:19:72:d5:8f:a0:0b:28:48:27:32:
73:07:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:54:32 2026 by rpki-client