Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: Qyhe0wsM1TZrL+CrKuCFvN3eBINoCaJSWKjh3CtWolk=
Subject key identifier: 30:63:A7:69:1F:C2:98:E3:74:4B:F7:D2:BA:CF:6D:4E:31:6F:71:A9
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 019E1BD8C125976ECC08D2DAE7198276BB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 11:00:50 +0000
Manifest this update: Tue 12 May 2026 11:00:50 +0000
Manifest next update: Wed 13 May 2026 11:00:50 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: NmWMzEy5a8w+VYRZBCbWO6YUrN/p/QtvqNEtrm8Ltk4=)
2: ffYBPHr80VYEZ9nh35N1GnYUaq0.roa (hash: eJAJO7UVqMGX5rHA6v1I/gJpbdqT70QsYP5GPkz+BRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c1:25:97:6e:cc:08:d2:da:e7:19:82:76:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: May 12 11:00:50 2026 GMT
Not After : May 13 11:00:50 2026 GMT
Subject: CN=3063a7691fc298e3744bf7d2bacf6d4e316f71a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:27:fb:fe:73:54:4c:54:5d:13:42:b9:42:
20:35:71:90:b2:e0:21:32:a5:07:ea:c4:ab:bb:e9:
12:d8:39:71:08:a0:e0:e8:5d:f1:dd:e5:b5:a6:2a:
52:a9:d1:df:9f:3a:00:12:22:c1:c2:7f:4d:3d:f5:
19:11:fe:75:cc:81:51:3c:7b:0f:e2:d9:1f:c0:cb:
e4:6f:bd:30:f4:f8:1d:74:20:da:65:17:b7:ac:fb:
2b:00:e3:4f:05:7d:9a:c8:77:6a:95:e7:20:b0:54:
aa:19:0b:97:c9:e4:e4:26:26:64:60:af:0f:f3:73:
0d:bd:f3:a3:f8:c9:8b:13:40:c1:91:62:d1:c0:6f:
2d:58:59:b1:87:93:16:f8:42:99:01:c8:98:ac:f9:
a4:98:53:df:8a:ae:e4:3a:f5:a3:16:49:cc:e6:8f:
78:bd:b4:34:2a:57:a9:47:b3:ea:c9:51:e6:1f:3e:
63:04:4d:55:52:5c:ac:11:6e:62:d2:03:28:27:96:
6e:e8:72:3e:2e:3a:3a:cb:27:21:cb:aa:0c:53:24:
95:16:1c:95:65:f8:a4:09:99:f5:47:47:0d:4c:d3:
35:4e:34:ad:a6:7d:d2:97:0b:ce:85:38:27:7f:b9:
63:08:1f:96:1b:de:b9:e7:45:5b:dc:8d:26:fb:9e:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:A7:69:1F:C2:98:E3:74:4B:F7:D2:BA:CF:6D:4E:31:6F:71:A9
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c5:b5:60:06:24:81:78:8b:07:f4:cf:88:dc:c6:e4:6a:36:
85:6f:f8:73:50:7f:0f:79:48:ce:02:49:dc:96:fd:ce:a5:cb:
93:d3:ce:05:f1:cf:15:c2:5b:ad:ee:1a:38:d1:5b:aa:db:ab:
eb:59:8b:89:a1:72:5d:3e:76:36:11:ed:89:f1:8e:e9:db:1d:
ad:ef:87:43:ca:b0:e8:da:46:7e:3a:78:42:3a:fa:ce:83:73:
d1:fa:9c:b3:75:4a:c2:75:a7:0f:56:d4:71:32:ff:10:90:02:
7a:3c:39:f9:78:fc:66:9f:17:ef:ca:f0:09:9d:4a:3e:b9:e8:
aa:c0:fa:4c:43:a8:0e:43:ec:24:f6:f3:b5:13:02:fa:21:71:
c4:10:4b:7a:39:84:e2:73:a0:29:bb:19:90:38:74:11:82:89:
01:15:ee:a7:63:83:ca:0d:74:7e:41:36:7b:53:78:48:d9:21:
fb:66:10:30:c2:5b:ac:2e:c6:ff:6d:52:f9:95:ba:52:1b:bb:
9d:f9:1b:87:04:3c:c6:39:cd:b2:7e:e4:22:cc:f3:f5:f6:7a:
dd:c8:c9:18:b7:2e:49:36:7d:d9:4f:29:e6:c5:32:21:aa:77:
c5:99:d7:a5:f6:84:d7:aa:a4:2a:f4:c4:24:2f:4a:0e:86:72:
70:ad:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:36 2026 by rpki-client