Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: HTzPEZGZ690hbjC8OtojfTgmVibBCSEfDhEFIM7f0OU=
Subject key identifier: DC:F1:57:CA:17:8E:7E:AC:44:D7:F2:7D:0D:0C:27:EE:30:4D:8D:98
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019E1CEB9C06BE24EA55DC8645E779A6F607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 0712
Signing time: Tue 12 May 2026 16:01:03 +0000
Manifest this update: Tue 12 May 2026 16:01:03 +0000
Manifest next update: Wed 13 May 2026 16:01:03 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: NbmNCOuxgKEtfDylXkrOp+Va3XSkVxojFgSl6yCryD8=)
2: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
3: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:9c:06:be:24:ea:55:dc:86:45:e7:79:a6:f6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: May 12 16:01:03 2026 GMT
Not After : May 13 16:01:03 2026 GMT
Subject: CN=dcf157ca178e7eac44d7f27d0d0c27ee304d8d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:fe:9e:2f:3b:d8:63:9d:83:26:00:bc:88:
6b:f8:eb:e1:ca:29:b9:e6:a8:d2:f1:58:f8:16:91:
55:02:40:82:78:4a:bd:d3:48:1c:28:de:5a:5f:46:
17:19:aa:30:f9:74:d1:99:e5:53:30:3f:96:c1:bb:
e9:66:4b:7c:d7:58:f6:c3:01:7b:93:65:85:3f:a8:
20:01:57:f8:e4:c3:b7:0a:8e:2b:91:aa:75:da:29:
35:3d:87:ce:24:66:2c:0e:8c:22:3a:c7:31:38:eb:
9b:8e:63:dc:5b:93:b2:29:01:47:d8:24:50:ba:2a:
dd:31:23:26:ba:89:36:c9:b6:e7:1b:d8:fc:d6:49:
e5:08:c6:5b:a1:47:24:0a:43:8f:5a:70:03:06:29:
c7:e0:8f:e1:4c:90:b2:f5:5d:44:f5:f5:1f:03:eb:
88:d8:08:0b:d9:02:dc:ea:f7:a4:09:f4:e7:ab:aa:
01:aa:6e:13:48:a3:0b:9d:f0:11:b3:e5:52:37:ac:
1c:dc:58:a6:05:75:4f:4d:24:45:5b:20:e1:3b:f6:
c1:0f:83:e4:e2:57:74:aa:ab:9a:ca:4a:49:e3:7d:
f7:5a:da:45:d9:89:93:21:3c:30:9f:3e:f5:f7:96:
b6:f1:63:2c:8c:aa:aa:5d:c0:e5:7e:30:57:42:62:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F1:57:CA:17:8E:7E:AC:44:D7:F2:7D:0D:0C:27:EE:30:4D:8D:98
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e4:3f:5c:7c:6c:92:3d:60:3e:83:45:cf:27:3f:f1:d6:f5:
b3:4c:20:6f:66:22:51:4a:a4:39:aa:3c:c1:53:a6:3c:80:66:
a0:b8:0e:de:84:20:d8:f9:eb:4c:27:24:d3:c3:a8:8d:fc:fc:
0c:f6:e1:46:fe:1c:41:10:08:e6:8a:f1:e2:c9:0c:f9:ba:06:
9c:d7:a4:60:b5:06:43:0f:8e:78:a7:15:ce:ea:b5:5b:d1:51:
d0:d4:5c:5c:e5:f0:f5:cc:86:2e:fa:6b:35:23:5e:4e:11:26:
6e:5a:82:ae:09:e1:8c:88:5c:25:b0:1a:d3:d1:39:f9:55:5c:
5c:a4:00:d1:e5:0d:c3:90:d1:cb:9e:8e:1a:01:d9:a9:f3:0a:
9a:6c:df:83:c9:7e:df:4a:b1:7f:b7:ea:b5:ec:8c:83:1f:12:
b9:ea:54:e1:10:c7:eb:eb:a3:50:1c:77:7c:d7:40:84:8e:1c:
4b:ed:bb:21:e6:98:5a:71:4e:f5:cf:43:fc:e7:5a:94:43:ea:
4b:a8:56:b3:d9:55:c8:6a:a2:a4:38:fa:65:b0:af:84:26:ec:
41:f8:f7:73:07:18:21:ca:04:bb:02:e0:1f:91:75:ef:89:b9:
90:87:99:3a:c3:98:35:50:06:29:73:67:8e:72:96:69:8c:aa:
f1:78:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:06 2026 by rpki-client