Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: LTywZTECw7uh68ckvVHKmO7dVR3CAX5J3IusoUvAQcQ=
Subject key identifier: C2:4C:0F:17:BF:58:A4:07:D3:E7:9B:17:A4:8E:13:C1:0E:75:35:71
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 019F9248F5F5463064704A084BC17E92B1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 15D6
Signing time: Fri 24 Jul 2026 04:01:22 +0000
Manifest this update: Fri 24 Jul 2026 04:01:22 +0000
Manifest next update: Sat 25 Jul 2026 04:01:22 +0000
Files and hashes: 1: 3UgaGbZGGFfjB7sq8z7R6V-NiDY.roa (hash: e/q2ZKMuya72WNv5B5kUE91L0olkeZByYdU0k2qDJHo=)
2: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: z3ZsOLuzjrwEKSVVfbEGmUASrwZmXj+KcE8+mFdBfpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f5:f5:46:30:64:70:4a:08:4b:c1:7e:92:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Jul 24 04:01:22 2026 GMT
Not After : Jul 25 04:01:22 2026 GMT
Subject: CN=c24c0f17bf58a407d3e79b17a48e13c10e753571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:02:ea:4c:0c:c6:1c:ab:ac:f5:34:e2:0c:
33:0a:d8:c1:3b:b3:e9:23:c4:55:13:02:8c:f5:af:
d1:e7:4f:c8:4a:88:43:e8:3d:30:41:ab:6a:77:32:
e8:2c:e8:61:ea:6e:a9:e4:48:12:42:c3:7a:e8:36:
fd:07:5f:41:60:11:08:b9:4f:6f:ac:7d:5a:0a:48:
0a:ce:26:3a:a7:d6:92:1d:89:14:a2:62:50:92:3b:
39:dd:7f:00:cb:85:c3:85:a6:7b:ca:b3:3e:21:6a:
c5:f0:b3:d0:e9:7a:c2:ca:45:a6:da:9a:0c:8d:a2:
87:18:19:c1:51:c8:6d:db:4c:13:bf:8a:87:93:d5:
a7:1e:d1:2e:3b:33:b8:94:6d:43:59:c2:2c:29:eb:
94:2e:4c:2b:75:67:ef:d0:c8:a2:ea:af:8d:c7:63:
a8:dd:e4:75:f2:57:75:9c:d0:e5:55:67:94:d2:ee:
04:6e:0e:fd:55:19:76:42:c0:c3:b9:39:2b:c5:dd:
b7:5d:03:20:7b:f7:95:ba:60:0d:e0:97:bb:6a:9f:
81:c4:39:62:dd:12:8e:83:c7:34:f4:b5:80:53:e9:
24:84:b1:99:dd:04:bf:89:aa:ae:3d:c5:f0:0d:41:
e5:a4:d9:68:7a:e7:a7:6b:e2:a9:23:c3:53:bf:f2:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:0F:17:BF:58:A4:07:D3:E7:9B:17:A4:8E:13:C1:0E:75:35:71
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:31:22:dd:1f:6c:12:1c:f5:7f:cc:31:a8:cf:ea:c2:f9:5e:
49:be:c1:e1:1d:e9:b0:9d:8d:ce:57:bf:b5:7b:91:3e:3b:b5:
0b:34:c3:46:6f:31:38:53:f1:98:fa:5d:af:40:c6:c7:95:64:
f0:6f:6e:87:3d:8c:c6:d8:31:a4:68:5b:43:73:bb:69:21:86:
15:29:71:5f:e9:7a:a4:6b:8a:27:30:cb:cf:4a:d8:9d:8b:9a:
e7:eb:17:c9:0a:e4:37:cd:62:41:5d:55:91:3a:19:28:ac:ec:
bc:7f:7e:ec:ae:9f:3f:68:8c:8f:cb:cb:24:66:2e:48:37:39:
83:f6:2c:bc:60:e6:0b:8b:0f:06:1e:c3:2e:94:3f:e6:5c:e5:
39:9d:40:73:e9:c1:57:2b:3c:aa:68:1f:7e:89:b2:4d:95:ae:
c4:92:5f:07:2f:66:4f:57:43:a5:e2:40:71:a3:5d:79:86:63:
e7:c6:43:da:b5:15:78:2f:37:30:79:59:38:5d:c0:a5:fd:05:
08:e1:ab:c4:db:d7:42:37:62:bb:50:6d:c0:f4:83:14:f0:29:
01:07:8d:b4:35:00:53:b1:bc:91:2c:1d:1f:ba:91:84:20:44:
ac:2b:62:be:84:1e:39:ec:14:49:5a:97:87:70:6c:9c:a5:07:
07:51:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:26 2026 by rpki-client