Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: bBhujnbex0FCmbUxTcnIiLA/P/C49m8FwVa0KrWksAM=
Subject key identifier: 74:A6:4E:31:B5:22:23:BC:DD:9F:7C:7D:C3:0D:91:BB:85:74:42:FC
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019F916CB0DCC2536EEFEC755FDD505C6099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 01FA
Signing time: Fri 24 Jul 2026 00:00:47 +0000
Manifest this update: Fri 24 Jul 2026 00:00:47 +0000
Manifest next update: Sat 25 Jul 2026 00:00:47 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: oUo4cCEFSPFvNbpynm7eZ10S/y9Gb5aFWh/EF13kNvA=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b0:dc:c2:53:6e:ef:ec:75:5f:dd:50:5c:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Jul 24 00:00:47 2026 GMT
Not After : Jul 25 00:00:47 2026 GMT
Subject: CN=74a64e31b52223bcdd9f7c7dc30d91bb857442fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:4d:77:de:a8:56:44:0e:2a:c7:e1:82:1d:
fa:07:b8:dc:ff:68:09:bc:33:c8:5d:b4:8e:69:41:
eb:00:45:b9:9d:41:88:15:a4:b4:00:bb:5c:a5:79:
d8:a8:0e:d2:ae:3c:90:24:2c:e7:1f:08:bc:f9:9b:
7a:20:47:93:9e:bb:bc:e4:33:1a:ee:b5:ee:ce:a8:
8a:e1:9f:20:38:a7:95:9c:60:0e:44:70:31:b6:37:
8d:57:ff:30:2f:df:e0:22:41:69:9b:5f:f9:ea:c2:
d6:16:ae:5c:f0:d0:9d:c4:8e:fa:2f:3a:b5:74:01:
1e:34:c5:c8:e7:31:5d:d7:d8:b5:13:86:a8:e5:ba:
c1:c0:40:85:74:b3:b2:d2:3b:c0:d0:b0:45:b2:e6:
0f:42:40:24:9c:2e:31:fd:9b:5c:b7:36:6c:1d:f0:
c9:d0:92:0a:a9:c8:33:e9:1c:20:3d:c3:03:c4:9c:
87:a2:b5:86:c9:e6:24:0e:a6:49:9e:f7:18:8f:c2:
bb:67:58:e7:dc:51:fe:40:93:c8:5c:7e:c1:32:a8:
16:05:8f:0d:16:f9:da:65:1f:68:6d:ab:c9:dd:61:
56:2a:f7:85:b6:27:af:f1:6f:01:b7:74:6b:63:d9:
eb:e9:1a:ef:38:b5:4c:53:82:6a:31:5a:90:59:27:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:4E:31:B5:22:23:BC:DD:9F:7C:7D:C3:0D:91:BB:85:74:42:FC
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:1e:67:a8:2f:f6:7c:0d:8a:86:39:1c:60:77:bd:27:63:
a3:a6:66:f0:49:51:46:92:7a:a3:b5:d2:64:dd:ab:a9:e2:9c:
2e:00:ab:b3:de:e1:b4:36:c1:13:74:87:5a:79:10:af:24:db:
eb:a9:ac:c7:95:35:28:56:fb:8d:7a:70:04:c2:69:c5:c3:7b:
6a:65:a7:38:da:81:6c:bf:ab:ba:2f:5d:ee:fe:2d:7c:68:09:
ae:da:30:10:c1:d7:f0:0b:6e:ea:26:49:6b:85:b1:44:e3:e2:
b4:40:7d:ed:03:e5:05:6b:cd:bf:21:a0:fa:8a:8b:2e:68:54:
9a:87:ed:ad:cf:3c:8b:a0:a0:1d:17:c3:21:b5:b6:5a:8a:b5:
bf:6f:09:34:31:36:e0:59:3d:cf:5c:db:24:db:87:f3:a9:ad:
6c:b7:15:3f:f1:e3:86:57:11:be:06:f2:12:0e:0f:7e:2e:63:
57:2e:2f:15:70:a4:8e:66:2f:bb:f0:24:6a:57:0d:e1:ec:9f:
80:84:90:12:d7:db:fc:83:11:58:a3:ab:bc:1a:00:7f:67:18:
39:ba:04:31:88:a8:de:4e:84:0a:e4:1b:a6:57:08:75:20:35:
0d:c2:ce:bc:58:48:1b:7e:c7:a3:98:20:72:53:0c:4a:e7:40:
c5:7f:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:01 2026 by rpki-client