Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: ddIgn+zVCo1QBvNroRZplpaD+2YHhsPxWBr5qRtGKCc=
Subject key identifier: 4D:FE:8C:98:E6:B5:E9:F9:AF:80:2C:D4:F0:D9:E9:3E:CD:A5:69:C3
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019F111BEECB9252F9C45CC6BBB3909D96CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 085A
Signing time: Mon 29 Jun 2026 02:01:11 +0000
Manifest this update: Mon 29 Jun 2026 02:01:11 +0000
Manifest next update: Tue 30 Jun 2026 02:01:11 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: SEDneWoTvgMUpbV3X5Wn2gxfqe8BCzRhWOZuYbUJQq4=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:ee:cb:92:52:f9:c4:5c:c6:bb:b3:90:9d:96:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Jun 29 02:01:11 2026 GMT
Not After : Jun 30 02:01:11 2026 GMT
Subject: CN=4dfe8c98e6b5e9f9af802cd4f0d9e93ecda569c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:ea:fc:4b:e0:19:04:d1:0f:a5:8a:0c:cd:
6b:56:a5:88:97:dd:92:3c:c3:ef:4c:08:2a:6b:24:
80:ba:eb:27:53:ea:00:cf:f8:5a:fa:bf:8d:b9:16:
70:97:0f:16:55:4e:60:49:e5:54:d8:08:86:24:07:
b0:2a:70:55:5b:e2:4b:bc:a3:29:73:42:64:91:16:
c8:1c:0b:04:2d:c4:66:2a:82:61:5b:21:d2:d1:72:
8e:18:e9:9a:74:ef:53:1a:42:d2:3e:84:5b:af:6a:
a1:67:11:a1:4c:08:81:a2:cf:2b:2c:3d:df:97:50:
ca:a1:1d:dd:96:1c:0c:b4:64:51:43:67:37:90:33:
9a:3c:69:24:e2:4e:a0:1c:fd:d6:b6:0a:42:59:b1:
fd:e2:d8:ed:ff:b2:fa:81:73:c0:89:d5:a3:25:44:
35:5b:39:88:fb:6a:0e:5f:e9:8c:5a:50:19:09:3d:
b4:1c:3f:c7:c2:92:12:eb:df:68:57:77:55:41:b0:
24:76:1b:33:06:ed:15:7d:c0:cf:2e:4b:44:be:88:
19:bc:28:26:6c:e9:77:77:44:a4:7c:db:dd:bc:60:
e7:b3:b9:53:84:f3:46:10:b0:49:35:99:8d:7c:b9:
5e:a1:47:f2:96:69:0d:c9:12:e0:ba:44:91:d5:0f:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:8C:98:E6:B5:E9:F9:AF:80:2C:D4:F0:D9:E9:3E:CD:A5:69:C3
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:e5:2f:6a:4d:99:26:9b:62:4b:77:d0:8b:03:4d:6c:da:
f6:39:9b:2a:91:2c:4e:1e:78:60:47:d6:04:10:12:af:6f:96:
85:56:01:8a:b6:a0:b5:df:0e:2a:18:c3:a5:58:97:ca:5b:f2:
10:28:4f:f5:93:9a:4b:74:4f:cc:e1:90:15:53:06:c2:47:0c:
cb:c3:56:b9:30:b0:18:35:dc:68:2c:69:ee:62:5c:ac:ba:ed:
13:48:0c:28:27:bf:dc:39:f0:6b:e1:52:0f:0f:ba:08:2d:f7:
14:0e:46:9f:4a:07:6e:1f:e9:09:2c:e8:2b:ff:3c:1f:a2:8c:
9b:a2:e2:10:38:16:a8:c6:34:53:a4:d3:d7:fc:cd:ea:16:a3:
bd:7b:aa:76:cb:e2:30:bd:57:1c:5a:3f:90:98:71:8d:d7:57:
1c:69:8d:48:9d:93:cb:ea:63:f3:64:1a:f7:d2:72:92:49:dd:
7c:d8:00:a0:ba:53:92:1d:58:14:f1:c6:81:e9:10:34:c4:15:
e1:12:c9:60:85:dd:a8:04:db:0d:92:54:d8:04:3b:65:5d:c2:
d1:85:1d:fe:50:08:37:a2:e2:01:3c:7d:9b:6d:de:55:09:bf:
1a:10:e1:79:57:a8:4e:d2:21:5e:16:bb:6d:ed:8c:2b:ea:f9:
9f:51:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:57 2026 by rpki-client