Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: YvLIGiWAw/mj9TiK9eISIl4lXyaGNqixQii8YlyVwNk=
Subject key identifier: E1:B6:D5:5F:1D:52:9E:89:D7:BE:E2:A8:5E:F2:BF:3F:AB:E8:99:1F
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 01A0D796D7C81B6D9B97F7BF31D713BDE4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 18F9
Signing time: Fri 25 Sep 2026 08:03:01 +0000
Manifest this update: Fri 25 Sep 2026 08:03:01 +0000
Manifest next update: Sat 26 Sep 2026 08:03:01 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: /sOFP2tQHg2txoB6CmMKCGmHr1PNEiUEcojn6ur+/dU=)
2: LbDAcjZRmfBvnYit-qN-3rlzTKY.roa (hash: +vYoAsDEQG/i2Ib8tFZBcU6HYqtLxdIh9g5RpOOfFc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:d7:c8:1b:6d:9b:97:f7:bf:31:d7:13:bd:e4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Sep 25 08:03:01 2026 GMT
Not After : Sep 26 08:03:01 2026 GMT
Subject: CN=e1b6d55f1d529e89d7bee2a85ef2bf3fabe8991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:ed:4c:34:31:8d:1f:14:9b:b9:c6:13:85:
d2:1d:37:a7:e0:06:3d:92:72:95:88:f7:0b:7d:33:
a3:67:b3:32:a4:e3:3c:10:46:c5:ef:d8:c5:7f:44:
b4:85:8a:f7:35:65:fa:87:14:d9:29:8e:d1:65:f3:
a7:6d:89:eb:53:3a:e0:a1:44:50:92:0a:ac:3d:7e:
a8:8b:65:8e:66:0e:85:d8:5f:51:02:fe:cc:fe:37:
56:c6:76:a7:8a:5d:c3:e3:96:e5:8c:98:ea:d6:c1:
0c:90:e7:23:b4:15:87:8f:f8:32:8a:d7:4b:8c:ae:
0e:39:6a:20:02:40:67:cd:b7:8a:18:da:64:d0:b4:
14:cd:87:b3:94:c1:02:b5:9f:33:62:8c:9a:5b:c5:
f3:37:a7:68:e9:ec:7d:3c:7b:05:99:b1:80:11:37:
ae:05:3d:52:8e:64:6b:ba:a5:e5:ed:2d:8a:78:12:
21:a9:3a:e1:72:20:bc:9f:09:ad:99:df:f8:11:59:
08:f0:5a:0b:1f:2d:9e:10:c9:33:de:ff:70:3b:b2:
7f:17:19:c4:69:73:43:75:9c:9c:44:ad:a8:54:c9:
58:7c:e2:73:af:ac:24:34:17:54:1f:28:6b:05:7f:
64:97:e0:62:99:71:17:22:2d:82:04:60:a4:fd:f1:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B6:D5:5F:1D:52:9E:89:D7:BE:E2:A8:5E:F2:BF:3F:AB:E8:99:1F
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:f6:41:2e:14:2f:bb:b7:5e:dd:02:48:76:1a:bf:d2:63:
8f:b0:6d:30:e5:25:e6:ad:ef:67:93:57:00:7d:4c:c4:9a:66:
7c:86:19:76:b3:18:3b:d7:40:e5:b1:d9:69:b2:cf:0f:29:89:
77:e0:02:ed:8d:51:45:fd:3b:b4:f8:94:67:18:51:da:c2:40:
1f:29:10:e5:84:31:05:b2:7c:2d:29:53:9d:8c:61:dc:77:0d:
4b:a9:b4:b4:ba:87:54:8a:1d:86:94:77:d7:f7:63:94:d9:00:
27:6f:71:99:9c:56:c8:db:dc:9f:69:be:6e:7e:37:1a:5a:6e:
bb:b9:03:73:85:67:fb:33:b1:0b:02:69:3f:ce:7a:91:34:be:
3b:1b:42:08:4f:64:e9:b4:85:41:e5:4d:98:62:fa:03:71:0c:
5c:7d:e5:1f:cf:ce:09:ba:6b:22:87:4a:8b:8d:de:db:36:33:
50:7d:43:60:ae:86:d4:bd:a9:0b:8c:1d:54:63:d9:16:af:b9:
35:e8:56:2f:7d:91:f4:84:6c:24:5a:cf:fd:ee:e6:a8:5f:ea:
fb:79:7a:a3:eb:de:55:3b:b9:0d:42:14:a6:ad:30:7a:db:e5:
99:ec:f4:d5:27:86:37:3e:8f:4a:81:4b:5f:6f:1f:16:c1:68:
d9:9c:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:59 2026 by rpki-client