Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: fWl+iBg44g91j3OoVtHIwNxfexQNB25gUaA5cPg+E04=
Subject key identifier: 3C:FD:43:29:83:8B:FE:83:93:58:CC:14:4C:6D:07:36:8F:DC:EB:5C
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 019F9324005C34616D8C8DD4CE06D8B7EB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 05D1
Signing time: Fri 24 Jul 2026 08:00:37 +0000
Manifest this update: Fri 24 Jul 2026 08:00:37 +0000
Manifest next update: Sat 25 Jul 2026 08:00:37 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: yRV6aWnyE+WiYEl9bP78iN/jbbPLSxT5Pl1HrsQexbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:00:5c:34:61:6d:8c:8d:d4:ce:06:d8:b7:eb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Jul 24 08:00:37 2026 GMT
Not After : Jul 25 08:00:37 2026 GMT
Subject: CN=3cfd4329838bfe839358cc144c6d07368fdceb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:ac:ff:07:85:66:38:d4:62:45:56:db:fd:
a2:5e:40:7a:62:6f:c2:7e:ed:b6:96:48:14:4e:1a:
1a:10:6c:4e:7f:84:62:de:f5:6b:73:d8:19:33:d7:
06:c0:7a:d4:41:d0:a4:19:2f:37:b5:ae:1e:fc:f3:
df:f7:3c:86:ea:1a:85:64:84:86:4b:92:ec:27:4f:
47:31:67:2e:ef:6e:af:68:9c:f8:d2:1d:e0:e1:7c:
5d:be:d2:fc:d0:f8:61:d9:d0:4a:c8:b5:91:56:7d:
0d:18:bb:82:aa:54:9e:74:04:23:32:cd:82:8e:7f:
05:74:87:06:1a:34:f3:c7:7d:ef:c5:74:56:34:78:
c9:dc:21:fa:05:59:bf:fb:a5:0e:0a:21:60:18:ac:
7a:b5:87:45:b2:c3:9d:b2:81:8b:8c:20:cc:ed:05:
56:29:72:45:40:fc:59:66:55:f5:77:70:f9:f6:dc:
2c:e2:7e:3e:68:bc:e6:8e:ab:3d:31:7a:23:58:ea:
eb:0c:f8:df:f6:f7:25:d8:a3:80:ff:b5:4e:75:5f:
fd:94:86:70:4f:46:7f:11:b4:80:b0:0f:90:f6:9f:
13:d5:3e:ce:a0:4d:9f:b8:e1:c1:94:5e:60:0f:04:
56:bb:33:b2:50:3d:77:df:35:83:c5:bb:7e:fe:4b:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FD:43:29:83:8B:FE:83:93:58:CC:14:4C:6D:07:36:8F:DC:EB:5C
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:22:19:36:b5:d6:46:d7:dc:cf:9a:3e:62:6a:f1:92:ac:ed:
86:35:17:0d:e3:4b:5d:b7:ca:c9:a5:bf:aa:98:99:ea:72:18:
f7:ee:36:36:c5:c3:d8:f5:31:9e:cb:55:26:85:c0:a7:44:45:
f8:c6:06:10:66:74:9d:0c:91:b3:34:bc:1e:bb:a0:63:be:4e:
b7:a6:85:3e:e3:0d:5c:93:50:ba:bb:d8:59:e5:f9:24:37:b7:
bf:29:ce:41:46:23:0a:ee:6e:19:20:ed:7a:d0:ca:d8:9a:94:
77:b3:1d:dd:37:a9:2f:fe:36:4a:b8:65:ed:84:79:5f:e4:e8:
f1:0e:12:9e:2e:f2:4b:7d:16:8e:d6:36:cd:8c:93:4f:b1:24:
e7:ed:5d:32:ed:dc:69:3e:8c:a7:27:e6:ee:fe:ee:1f:e3:72:
2f:a4:7a:56:f1:9f:d1:9b:3f:95:45:99:6c:c6:28:56:38:99:
f4:9c:e8:49:6e:a4:85:cb:db:e8:56:2f:2c:c8:a9:13:47:43:
dd:ec:79:50:31:a7:ae:01:b0:09:da:ac:f9:95:b4:aa:e8:24:
ce:82:06:42:c5:58:f6:3e:1a:b8:c3:74:70:75:b1:1b:3f:ed:
19:cc:71:40:56:a9:29:63:b3:ee:78:66:d6:7a:b3:57:e4:91:
2d:e2:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:44 2026 by rpki-client