Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: ZAObCKQE+zDq6ZtJd/zH+uyJjQX1NxaE42wcwSaPE8c=
Subject key identifier: E2:12:F6:80:56:CC:63:A8:2F:30:1E:A4:E7:80:7F:83:99:B0:4C:D0
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 01A0CB59A5C97240314C32FA76B0BF6FC492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 23:00:44 +0000
Manifest this update: Tue 22 Sep 2026 23:00:44 +0000
Manifest next update: Wed 23 Sep 2026 23:00:44 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: vEGWLO86BWxwFnES6bHWK+b+zYM36ELLWN/clBMK9Vo=)
2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:a5:c9:72:40:31:4c:32:fa:76:b0:bf:6f:c4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Sep 22 23:00:44 2026 GMT
Not After : Sep 23 23:00:44 2026 GMT
Subject: CN=e212f68056cc63a82f301ea4e7807f8399b04cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:97:9e:de:c8:98:a2:31:ba:58:b0:fb:e9:
1e:40:2a:bb:07:d1:c8:7f:21:30:62:69:8f:68:72:
2f:ab:49:48:48:e3:56:8b:5a:9c:41:8e:e3:22:d4:
af:5e:ea:78:b1:5a:26:c6:d8:f4:ce:72:49:02:f6:
77:d5:71:53:8e:ae:a3:50:45:c6:47:9a:6f:b6:0d:
43:d5:3e:2f:84:9d:ce:4f:b9:ad:56:2d:b7:e2:2e:
40:74:88:f1:e2:fc:f5:ec:90:d4:a4:4b:05:06:6c:
72:0b:2e:58:81:88:14:e5:45:43:6a:41:69:11:62:
de:03:7d:f2:0b:60:2a:82:45:e8:e9:15:1e:6a:04:
0e:9a:9f:f8:81:93:7f:92:0d:6d:65:c0:d3:f7:e4:
f1:09:53:d9:e3:65:28:ce:51:9a:6e:b1:c0:3b:6a:
68:fc:3e:30:35:9f:9b:46:04:d9:37:7d:47:97:7f:
ad:ea:3e:3f:14:0a:05:e7:c1:03:c5:1e:5a:18:9f:
aa:1e:80:d6:aa:e3:42:c9:2b:9a:3e:a3:9c:db:f2:
f1:ff:b6:af:dd:3d:c5:4c:8b:9e:55:cf:46:5a:f9:
b4:4d:31:c3:f7:88:e1:5a:c7:7e:25:79:3b:93:d0:
9e:78:5d:20:e2:7c:95:5c:75:62:67:af:2d:59:a4:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:F6:80:56:CC:63:A8:2F:30:1E:A4:E7:80:7F:83:99:B0:4C:D0
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2b:f6:99:67:90:62:2e:ad:33:2e:3c:fb:f0:0f:8c:22:d9:
75:e0:62:dd:8e:f1:8d:ae:d4:51:bb:04:e3:5d:0e:7c:e6:c9:
74:ad:46:af:8d:0d:7f:17:57:2e:b6:29:87:4f:a1:64:b1:8c:
cc:4b:98:50:7c:61:28:c2:ea:4b:35:60:54:13:47:ff:a2:8f:
a3:3c:6a:b8:98:b2:a8:8d:12:80:3b:a7:76:6e:71:69:b4:60:
66:9e:93:2f:34:16:33:98:83:99:eb:8e:cc:e2:67:93:35:4a:
b5:82:53:4e:35:c9:da:66:c3:5d:82:b1:b9:dd:47:91:45:b3:
57:b2:ea:f0:74:6a:eb:21:0e:27:26:40:08:1c:8b:42:49:bb:
98:aa:4e:aa:7d:f4:f7:b6:3d:4d:ba:81:ad:6e:76:f7:c9:b2:
f2:f6:fe:1b:7c:92:d3:b7:40:f5:73:0b:c1:e1:82:bf:67:af:
52:2e:99:99:d5:29:ac:93:f1:0d:fd:3a:e2:e4:0d:36:b5:93:
e9:13:2c:99:ad:70:d1:c8:7d:91:64:d9:3f:39:54:42:7f:9e:
47:28:b5:c9:ab:3c:e8:83:a0:5e:93:cd:00:29:46:cf:71:11:
40:8e:99:65:65:d9:94:1a:b3:86:c9:50:80:9f:7a:83:51:61:
bc:8d:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:49:41 2026 by rpki-client