Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: QxEAdujlYfRsucQdmBvXA5+6ViH0rFkJdxwHivLmsjg=
Subject key identifier: 31:E6:3B:86:A0:48:CE:07:67:4D:30:F7:93:88:F0:69:87:B2:98:2E
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 01A0D45D2ED8C301E13474661FF13A21D030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0DC3
Signing time: Thu 24 Sep 2026 17:01:11 +0000
Manifest this update: Thu 24 Sep 2026 17:01:11 +0000
Manifest next update: Fri 25 Sep 2026 17:01:11 +0000
Files and hashes: 1: 1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa (hash: AMT4fhj0NQTYFJqA1ljnLjH+q0LAKk7Eo+Nf4uYT4Lg=)
2: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: UQ3i7fd2r5QtBmlUGU59QtuEISj4VtwE9GXzI84tAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:2e:d8:c3:01:e1:34:74:66:1f:f1:3a:21:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Sep 24 17:01:11 2026 GMT
Not After : Sep 25 17:01:11 2026 GMT
Subject: CN=31e63b86a048ce07674d30f79388f06987b2982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:d1:03:2b:15:38:67:d3:42:c1:54:72:e4:
d2:4e:41:02:40:ab:fb:ae:9b:d7:a1:3a:c2:ff:ba:
72:43:69:c2:73:38:b0:f5:cf:86:fe:e6:55:52:fe:
1e:64:f1:00:cd:1e:f4:3b:e0:18:1a:ef:79:96:7c:
69:c5:62:42:67:79:43:9e:ac:4a:6c:02:86:db:79:
8a:96:26:cd:c3:ac:19:2b:ba:f1:ce:72:b2:b6:96:
c7:9a:f0:0e:a4:0c:2a:92:c5:d3:f2:12:d4:54:39:
ab:e0:32:0b:6a:92:4d:64:1d:37:d4:d0:40:ed:b9:
70:e2:f4:49:e6:3d:f1:69:e8:6f:b6:d1:5c:ef:03:
e3:35:26:24:3c:0a:7a:72:3d:53:e4:c4:58:7a:bb:
bf:44:8f:0c:e0:32:84:4d:4d:03:a5:ee:c2:b2:6c:
20:4b:9c:7c:58:a4:c5:45:9f:13:a0:53:ca:81:86:
a9:3e:37:8e:d9:48:dc:d6:50:97:21:00:00:b4:2d:
c1:90:c4:d5:ab:55:fc:72:d2:0d:70:a7:76:3d:0d:
e9:d1:5f:45:d9:f1:44:a3:28:32:20:98:df:27:35:
71:d0:3a:94:26:11:0b:22:98:43:7e:81:4e:d4:b6:
97:c7:b9:7c:86:44:6f:39:e6:cd:a1:94:4b:b3:ea:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:3B:86:A0:48:CE:07:67:4D:30:F7:93:88:F0:69:87:B2:98:2E
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:cd:bf:8d:96:fa:dc:99:d6:1c:f0:25:75:77:3e:52:20:
a9:4c:f1:51:cd:70:98:b9:21:23:aa:d0:dc:06:8d:23:32:dd:
fc:48:2c:7c:a3:60:d1:b0:65:01:c0:0d:38:dc:cf:f8:87:09:
22:6e:20:f3:7d:40:50:68:24:30:f0:e3:aa:ba:a2:b2:5b:63:
a8:33:13:d7:f4:dc:6a:1a:e8:2c:36:48:af:5f:e8:da:f4:e9:
74:10:ae:5f:b2:9d:c1:a8:e9:ef:c5:28:e5:35:9a:3d:67:31:
a4:8a:37:98:fe:66:cf:09:13:a7:ed:90:9b:e4:36:4e:59:3f:
b9:14:f1:7b:69:d3:88:ab:6c:d1:e8:1e:01:25:ad:59:18:c0:
a8:90:be:c5:1b:6b:c5:95:ba:55:00:1b:f7:5c:5b:ad:e5:0d:
50:ad:22:f2:40:9e:3d:70:e0:e9:ae:2e:b4:ef:2d:fd:04:8b:
1a:b4:60:0b:29:8c:d3:aa:0c:d8:e4:a5:b1:b8:41:c1:5a:9f:
5f:6a:fb:ef:b6:51:09:f8:ae:c0:b9:8d:9e:91:fb:9b:0d:9e:
d2:2e:1c:b9:4b:ef:55:24:96:9d:0e:b4:84:9e:3e:65:43:bc:
ba:fb:54:6c:fe:4f:3e:dd:78:fd:cc:5b:f9:c0:e7:01:b2:35:
f6:04:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:31 2026 by rpki-client