Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: zQ6btB3z+0EA4sfm1OSG27WDB7qVV5TDBYDTYxO2o14=
Subject key identifier: 00:6E:EA:F1:8D:C2:2D:C4:64:80:27:54:5E:82:55:99:AF:A7:99:FD
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019F190CBF99B3B102C091F35627D8929B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1186
Signing time: Tue 30 Jun 2026 15:01:33 +0000
Manifest this update: Tue 30 Jun 2026 15:01:33 +0000
Manifest next update: Wed 01 Jul 2026 15:01:33 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: RHwJ/uhGGrwz1M4AFyYYwX3OMSpixPfQdQEh29CbWD0=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:bf:99:b3:b1:02:c0:91:f3:56:27:d8:92:9b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jun 30 15:01:33 2026 GMT
Not After : Jul 1 15:01:33 2026 GMT
Subject: CN=006eeaf18dc22dc4648027545e825599afa799fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:1d:a4:78:e0:f2:46:5e:54:1f:d9:4b:07:
f3:22:71:30:71:af:80:93:94:43:51:38:46:14:1b:
84:5a:60:06:99:cf:a6:39:1d:5e:ee:88:ae:fa:2d:
15:1c:25:c7:1e:62:71:ff:8e:55:29:13:2d:09:a9:
60:4c:cf:0e:78:36:69:8d:d2:a1:1b:d1:07:55:0c:
b9:d5:87:72:c0:26:34:a5:a9:b2:5f:5a:eb:bd:9d:
ba:da:c7:bf:3f:5c:c4:c5:e8:a2:40:74:7c:be:60:
bf:df:a2:3e:65:bd:a6:b4:e6:71:ee:92:d4:22:4f:
e3:c5:db:aa:7f:58:6a:a6:dc:22:eb:ed:74:51:5c:
fa:f5:ef:07:ac:e7:4a:ec:2a:24:c4:26:4a:52:a8:
6a:70:64:50:ce:3a:22:ec:69:87:b6:23:e4:96:da:
c7:5a:f7:97:12:1a:90:59:70:78:88:e7:e5:f2:ed:
b6:9f:04:d8:42:3e:70:ee:7b:7e:25:e8:4d:28:3b:
da:87:3c:6b:87:09:70:e8:0f:e2:fc:14:5d:48:85:
ff:8f:30:b0:3c:e8:f6:68:66:30:98:a7:fe:c5:91:
55:9e:b1:06:45:67:17:46:1e:95:ec:6c:03:36:f5:
a0:fb:a7:28:8a:24:db:a6:5e:46:97:e0:e8:05:65:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6E:EA:F1:8D:C2:2D:C4:64:80:27:54:5E:82:55:99:AF:A7:99:FD
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c2:46:86:c8:b8:dc:51:8d:e7:b9:bf:0e:23:97:74:45:d1:
99:ab:64:68:91:e5:27:f3:af:9a:c2:87:47:97:6f:d1:81:4b:
84:43:ed:f5:62:ab:af:7f:44:44:cf:21:d2:bc:3e:bd:91:99:
a7:64:4c:bb:fc:fc:3f:e8:d8:82:e9:0b:1c:35:7b:6d:b7:94:
59:5e:e5:7d:7b:b8:9f:9a:c7:60:5b:79:81:5f:17:0b:76:b5:
c4:09:92:68:2d:2b:75:3d:a7:a5:d1:ac:7e:9a:50:b8:3f:cb:
8b:3a:a5:f7:07:3c:44:01:42:dd:e6:a6:f4:8f:a5:6e:5b:8a:
16:bc:f7:05:59:57:03:86:24:d6:f4:32:76:e1:87:90:ed:94:
9b:45:fd:2e:5e:4f:e0:c1:1a:36:c8:3c:a7:c4:99:c1:50:90:
cb:7e:c8:e3:66:ce:e8:c3:cf:47:15:4b:15:46:6d:54:76:e5:
2e:8c:12:7b:50:99:77:97:24:6f:bd:c2:69:ec:b1:45:bd:dd:
1c:18:c2:ba:1b:a9:e2:a9:e8:a7:2b:43:9a:d9:d3:a7:f5:ca:
6a:a2:4c:12:61:1c:e3:1e:fc:5e:b5:d6:67:b8:30:7f:c0:d0:
24:0a:0c:dd:75:29:df:fd:d8:7d:c7:f9:ea:14:f6:23:da:39:
e0:47:fe:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDL+Zs7ECwJHzVifYkps5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjYwNjMwMTUwMTMzWhcNMjYwNzAxMTUwMTMzWjAzMTEwLwYDVQQD
EygwMDZlZWFmMThkYzIyZGM0NjQ4MDI3NTQ1ZTgyNTU5OWFmYTc5OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqskdpHjg8kZeVB/ZSwfzInEwca+A
k5RDUThGFBuEWmAGmc+mOR1e7oiu+i0VHCXHHmJx/45VKRMtCalgTM8OeDZpjdKh
G9EHVQy51YdywCY0pamyX1rrvZ262se/P1zExeiiQHR8vmC/36I+Zb2mtOZx7pLU
Ik/jxduqf1hqptwi6+10UVz69e8HrOdK7CokxCZKUqhqcGRQzjoi7GmHtiPkltrH
WveXEhqQWXB4iOfl8u22nwTYQj5w7nt+JehNKDvahzxrhwlw6A/i/BRdSIX/jzCw
POj2aGYwmKf+xZFVnrEGRWcXRh6V7GwDNvWg+6coiiTbpl5Gl+DoBWVxpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABu6vGNwi3EZIAnVF6CVZmvp5n9MB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8JGhsi4
3FGN57m/DiOXdEXRmatkaJHlJ/OvmsKHR5dv0YFLhEPt9WKrr39ERM8h0rw+vZGZ
p2RMu/z8P+jYgukLHDV7bbeUWV7lfXu4n5rHYFt5gV8XC3a1xAmSaC0rdT2npdGs
fppQuD/Lizql9wc8RAFC3eam9I+lbluKFrz3BVlXA4Yk1vQyduGHkO2Um0X9Ll5P
4MEaNsg8p8SZwVCQy37I42bO6MPPRxVLFUZtVHblLowSe1CZd5ckb73CaeyxRb3d
HBjCuhup4qnopytDmtnTp/XKaqJMEmEc4x78XrXWZ7gwf8DQJAoM3XUp3/3Yfcf5
6hT2I9o54Ef+fA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:21 2026 by rpki-client