Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: slHDWDUUvrsHqhQIuj60R68xZUiSl7kyB4E0/b6S5N0=
Subject key identifier: 36:48:8B:FB:85:EF:19:CB:B7:C0:D4:A4:11:AB:B6:5D:72:9F:20:04
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 01A0CC35A88A5FB9160A8C5A54D260FE3437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 029D
Signing time: Wed 23 Sep 2026 03:01:03 +0000
Manifest this update: Wed 23 Sep 2026 03:01:03 +0000
Manifest next update: Thu 24 Sep 2026 03:01:03 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: iFxUUtJXqJ1zb54fv+bGVPynYD/WxIZXic/U5v9tT/A=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:a8:8a:5f:b9:16:0a:8c:5a:54:d2:60:fe:34:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Sep 23 03:01:03 2026 GMT
Not After : Sep 24 03:01:03 2026 GMT
Subject: CN=36488bfb85ef19cbb7c0d4a411abb65d729f2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:5b:35:ec:d8:97:c4:05:9c:81:4d:7b:79:
36:ef:89:37:79:2e:82:2a:31:d2:a2:06:26:d5:45:
ca:53:af:8f:fb:30:ac:d8:88:d1:1b:ac:5e:bf:27:
86:d8:35:75:46:00:0b:40:ee:99:61:61:d7:a2:57:
a8:4e:68:8b:ac:79:9e:9e:59:1f:d8:a4:2b:b2:9f:
fd:96:9a:98:70:0a:e2:14:8e:ea:83:41:48:d6:13:
5d:ec:d5:1b:b0:76:fb:58:24:72:bc:77:e0:50:b7:
1c:93:57:40:1e:9a:06:2f:2d:c2:53:f7:37:51:cb:
08:08:9f:f6:82:18:9f:e7:f1:10:92:9d:a6:d2:07:
f1:63:9b:8e:46:d5:1e:13:72:1b:54:5c:ce:a9:09:
16:62:14:6d:63:f9:d1:10:9b:1b:9b:af:bb:01:b5:
d4:10:67:f1:a1:fa:dd:7c:3b:64:30:fb:0e:89:c7:
37:f9:5d:e5:2e:cb:90:7a:63:3f:1a:c5:d5:71:fb:
74:76:ba:4b:aa:2f:3e:95:a2:42:82:82:9e:5b:81:
42:da:a9:12:9e:94:9a:8f:94:80:87:e4:72:ca:ae:
03:16:d3:f5:3c:67:18:ea:e2:a9:1a:18:1f:ec:52:
18:aa:38:11:f8:f5:5f:f1:3b:cc:ee:66:35:50:b4:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:8B:FB:85:EF:19:CB:B7:C0:D4:A4:11:AB:B6:5D:72:9F:20:04
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:e8:e4:5c:e9:a8:2a:7b:38:db:96:e5:33:05:06:a3:ed:
a7:81:e8:95:17:bb:6f:21:e7:ab:c1:a7:d8:3e:57:aa:2a:77:
d4:55:ce:b1:17:b5:11:88:be:00:4b:70:69:04:a7:3f:cb:94:
70:5b:a0:ee:3a:ef:d8:b3:0e:d7:a7:bf:fb:d3:10:f8:60:7c:
39:c6:b3:f7:37:be:8b:dc:f1:d4:6b:bc:c6:d4:77:bd:db:1e:
59:47:50:4e:d8:a5:be:9a:de:bc:db:ee:a0:45:83:26:81:b3:
d9:ec:b9:6c:3a:6b:f0:21:1d:14:d5:7f:a4:50:72:d7:b8:67:
a6:46:d6:63:b0:55:e1:4b:50:f6:a1:b2:ae:0a:b9:f2:9c:74:
b0:ab:ca:0a:0e:2e:28:9c:40:10:ec:34:cc:ae:81:9b:3e:44:
76:1b:f6:4c:76:8b:c5:39:7b:69:db:f8:95:1b:25:1d:21:31:
f0:f0:c4:6f:cf:be:fd:f9:b6:90:8c:79:65:47:a8:8b:bb:34:
e6:75:76:49:13:8d:ef:9f:ff:25:3d:c4:15:30:e2:b0:f5:20:
15:34:92:85:3b:ff:86:89:74:ed:95:e3:d4:03:e8:6d:e1:3c:
1c:00:f6:e2:fc:3e:06:f3:80:36:f2:95:46:a6:71:af:2d:b7:
54:20:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:10 2026 by rpki-client