Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: 9jn16pIsTE5Gy8573R+LBkvCkrI9Z5c0nb4T9VLzM8g=
Subject key identifier: C8:49:75:DC:FA:59:16:D2:30:DE:34:53:FD:BB:88:ED:1A:8C:DA:B5
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 01A0D314D8154C0EC1C6C829C421194D44DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 06C8
Signing time: Thu 24 Sep 2026 11:02:33 +0000
Manifest this update: Thu 24 Sep 2026 11:02:33 +0000
Manifest next update: Fri 25 Sep 2026 11:02:33 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: Ge/2JLglWybGzFbaaFfPae0+4dwpEo+3F2DRl5nECLo=)
2: UZ8q061lhr49y8UQ7iXkyIxsq6A.roa (hash: 80cHA2mR1v8ITCV1mpXv6NqG4jtnNEE6uxd13vN06FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:d8:15:4c:0e:c1:c6:c8:29:c4:21:19:4d:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Sep 24 11:02:33 2026 GMT
Not After : Sep 25 11:02:33 2026 GMT
Subject: CN=c84975dcfa5916d230de3453fdbb88ed1a8cdab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:43:f5:97:ad:a4:f2:90:61:1d:fd:0f:2f:
f3:78:10:3a:f9:93:d3:9c:b0:4d:f3:18:51:e5:f0:
78:fc:8e:59:e3:0c:87:0b:5c:e8:f8:40:01:7d:0a:
c4:37:80:25:27:26:48:e9:47:ea:ea:6c:e8:03:04:
44:54:79:67:bf:d9:69:34:9b:1a:d8:0d:52:b7:64:
f3:e8:41:7a:30:97:23:9f:a7:25:59:7b:1c:0b:3f:
57:cf:cf:74:eb:c5:ea:97:e1:91:0f:b7:61:8a:58:
40:3e:f4:03:5d:54:f2:64:1b:5f:15:9b:0c:a3:0b:
74:55:00:d1:35:47:94:aa:30:de:a7:6e:ce:00:f3:
25:f2:07:90:fd:63:f7:cf:94:dd:c4:59:d0:5e:76:
ad:5e:da:90:d9:24:d1:12:52:90:29:d7:06:6a:f0:
6a:bb:29:33:9d:cd:bc:2c:c6:6e:7c:6d:82:0a:76:
a4:09:7f:bc:8a:71:69:fe:71:ba:ba:95:87:14:0a:
51:30:36:6d:8f:29:58:71:d5:1d:36:21:c3:d5:8f:
08:bd:15:d3:5a:cc:cd:c6:ff:ec:b2:b2:41:03:60:
32:d5:b4:b7:f4:a0:63:e6:5e:64:33:c9:ed:54:d5:
d7:fe:cf:6e:65:a6:e4:c3:13:da:d4:ac:f9:fd:88:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:75:DC:FA:59:16:D2:30:DE:34:53:FD:BB:88:ED:1A:8C:DA:B5
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:11:67:9b:8d:32:3c:89:11:94:cb:b1:bc:2e:6c:cb:82:89:
2d:0a:de:b0:fd:8d:2a:7e:1b:ee:8f:91:37:37:9d:62:67:b7:
3c:ba:19:b0:3b:ae:30:f6:19:fd:ec:4b:9b:7b:93:b4:3f:3e:
2a:69:6f:d4:d6:e2:72:b4:60:48:9a:98:69:08:ec:05:82:d6:
51:d4:ca:2b:e9:06:79:36:a6:65:f0:a6:d7:19:b3:0a:86:cd:
fa:7f:7a:02:24:e8:d4:e3:5e:57:eb:bb:58:0e:69:38:9a:15:
c7:e5:de:c1:e8:e5:94:ab:7f:b7:8d:8c:46:1f:f4:d1:8e:9e:
4b:42:3b:bb:15:20:bc:81:fa:09:1b:e2:51:ea:03:1d:6a:ae:
5b:9a:55:27:b2:89:86:ac:46:96:8d:3d:12:97:ca:75:9e:d3:
69:05:9c:96:c2:c2:7d:f2:62:7f:ba:6c:3d:39:1a:73:d2:92:
fc:fa:d9:9f:c6:67:f7:fb:ab:78:40:2e:f2:23:90:f4:34:8d:
25:ef:fe:11:1f:14:07:cf:69:d0:64:07:1c:88:fb:cc:bf:f6:
ec:14:f0:dc:11:ed:3f:0e:27:a3:1d:42:44:47:7e:35:21:00:
de:c5:1c:e2:02:f5:5f:20:32:6d:35:ce:52:c9:77:6b:7c:1a:
2b:ac:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:09:16 2026 by rpki-client