
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: Hf3CM+jezhb13H5zMOSINCE1Wg8+81u3k4jr2KoCcP8=
Subject key identifier: A1:22:FB:8E:78:E7:8E:8F:BF:C4:0F:8D:1C:9B:7F:F6:DB:3D:AC:C8
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019F18681A62793CDFFBFE4506D27FAF1729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 12:01:43 +0000
Manifest this update: Tue 30 Jun 2026 12:01:43 +0000
Manifest next update: Wed 01 Jul 2026 12:01:43 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: X9UGAI/l8TdIU7v8ecYuELAhHdm3OCL+/vvDjW6JavQ=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:1a:62:79:3c:df:fb:fe:45:06:d2:7f:af:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Jun 30 12:01:43 2026 GMT
Not After : Jul 1 12:01:43 2026 GMT
Subject: CN=a122fb8e78e78e8fbfc40f8d1c9b7ff6db3dacc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:67:9c:29:f3:df:ca:90:d5:4f:c6:fe:6f:
99:b4:37:71:91:2d:e4:00:45:a9:65:24:be:fd:0d:
9c:2f:9e:fb:8e:19:ac:14:46:a2:6d:54:19:48:f4:
90:00:8b:ab:11:92:8b:a7:9b:44:1f:d3:73:56:24:
26:bb:c7:86:a4:98:5a:06:bf:26:f2:5a:07:61:26:
5d:c7:44:e9:46:c6:9b:c3:7e:c5:a5:b0:6e:8f:12:
20:47:a0:72:d8:94:01:15:74:2a:5e:32:44:7b:4d:
ac:56:8a:d2:28:7b:93:cc:a4:c5:3c:6a:8e:6c:7f:
64:65:ea:c8:e9:d5:08:96:6c:d6:b6:af:f1:b4:d2:
31:b5:3b:fc:51:f1:d9:ff:a2:6c:93:6c:ee:33:f5:
cb:bc:12:0c:7b:3e:99:bc:86:b3:6d:ba:d1:3e:ac:
02:29:13:bf:ee:e3:22:d3:f0:6e:3a:10:b8:04:d7:
b7:7e:d2:d0:bd:f4:e4:37:d3:36:1a:ee:03:12:85:
e0:cc:76:9e:6e:13:29:f6:49:28:70:33:ba:0d:94:
eb:92:7a:af:86:9e:58:0f:2c:f7:f6:82:9d:55:bc:
75:08:7a:7d:db:8e:87:67:f3:3d:76:c3:5c:da:ef:
85:64:bb:6f:8b:e2:7f:20:2c:fd:27:ab:b8:ea:0b:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:FB:8E:78:E7:8E:8F:BF:C4:0F:8D:1C:9B:7F:F6:DB:3D:AC:C8
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:4e:57:3d:c0:f4:7d:1a:f9:c2:ee:eb:d7:23:a0:86:4e:
5d:6d:1c:e3:dc:04:c3:15:c7:72:49:d5:41:fb:86:7d:e0:67:
fd:f8:92:c2:05:bd:81:5a:74:97:8e:4c:de:a7:58:4c:d8:15:
c7:81:2a:17:57:09:64:f7:18:d8:d9:11:1c:52:7d:d0:af:c4:
80:0c:e3:04:1f:94:b0:56:9d:bc:0a:52:ff:ef:1f:b8:8f:61:
2f:5c:9a:a9:6e:cd:df:5a:9e:91:ee:59:5a:ce:a0:85:8e:21:
f1:2f:32:c0:39:ca:21:11:8a:8e:82:51:ce:02:f1:9a:a1:1c:
f1:d0:14:51:90:d0:a4:eb:c6:f6:0d:d0:4d:4b:c8:11:fc:f6:
98:0e:a5:b1:8b:04:1f:5d:26:83:e2:fb:6d:15:05:45:2b:5d:
9a:0a:5d:70:67:8d:b1:a4:f9:28:5d:10:66:2d:d5:44:ea:34:
7c:a8:7f:32:7b:40:35:6f:0a:e0:ab:f0:ef:1f:fe:24:6e:19:
a5:66:45:33:e4:d0:53:62:b3:30:35:e7:1f:a9:5a:16:b7:b5:
3c:bd:d7:c4:6c:86:5f:8e:44:3b:7c:2d:c7:7f:5b:88:89:08:
9b:7d:f1:ca:85:48:4f:fa:fd:68:a2:52:2e:1c:92:82:ab:c5:
ce:f0:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:29 2026 by rpki-client