Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: 3bBKD+VtsQ1seGNZWT5Qi0KZg6YmtSWkphYBxojSQhk=
Subject key identifier: CC:3C:D2:D5:D9:48:D1:B7:02:1D:74:99:F1:D8:98:27:BA:E1:15:22
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01A13F701EFDFAEFE24F3AE5DEA9C412E2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 12A3
Signing time: Thu 15 Oct 2026 12:01:14 +0000
Manifest this update: Thu 15 Oct 2026 12:01:14 +0000
Manifest next update: Fri 16 Oct 2026 12:01:14 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: chPqDfwCahI0bUCWUKxf0/6qplnZLAK29lRBIKODdi4=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:1e:fd:fa:ef:e2:4f:3a:e5:de:a9:c4:12:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Oct 15 12:01:14 2026 GMT
Not After : Oct 16 12:01:14 2026 GMT
Subject: CN=cc3cd2d5d948d1b7021d7499f1d89827bae11522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:62:b8:68:f4:46:5d:1e:48:fc:05:2c:12:
27:75:55:83:66:fb:3f:da:c7:f5:85:d0:4a:97:15:
00:00:24:0e:d7:0e:df:23:4b:d5:f4:e8:d0:18:33:
19:d3:f1:fc:5d:38:ef:1a:9c:41:53:22:22:2b:52:
e2:57:11:de:76:67:93:7b:8f:9d:c1:c1:9c:aa:d6:
eb:48:d6:0c:9c:00:05:87:89:48:3b:aa:62:11:33:
5c:9d:66:7e:77:c2:c0:9f:46:6f:e9:ff:74:c5:5b:
25:13:90:8c:60:75:c9:4c:27:03:57:c0:6c:2e:7c:
ac:34:32:90:d7:25:1d:b2:02:a3:b7:69:12:c3:50:
a9:b9:f9:d3:78:44:3e:31:4a:2f:5b:b8:38:bd:2e:
02:c1:7e:dc:48:35:d4:a8:32:f7:81:f2:10:8c:e5:
c6:eb:37:4c:d0:00:fb:46:99:c8:4d:5f:fe:8d:20:
ed:ab:b2:ed:12:6e:34:ae:80:1a:95:28:d3:7d:cc:
cc:08:01:55:37:9b:63:78:90:67:ba:dc:b8:f8:0c:
35:9d:29:de:db:1d:4c:66:ce:c3:fd:1a:cd:05:21:
d4:09:fb:7c:7b:1d:0c:ef:2d:35:68:4c:b8:81:93:
a7:95:b7:60:b6:e7:44:96:c2:7d:ce:98:62:75:04:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:D2:D5:D9:48:D1:B7:02:1D:74:99:F1:D8:98:27:BA:E1:15:22
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:18:ca:35:4d:7c:87:73:7f:71:1d:ec:2e:ca:80:34:78:92:
51:f8:0d:f9:07:fb:c8:70:22:c4:a0:ab:91:76:f4:f6:92:7b:
c7:79:6b:ab:4d:38:0a:85:03:34:ed:e4:17:0d:0c:b5:e4:3f:
33:4a:c8:e6:f6:2a:bd:f3:65:e4:6c:49:9f:b0:c2:8a:d3:77:
25:fa:2c:15:f5:cd:18:41:6b:5f:5b:df:fb:b5:cb:6e:11:fb:
2e:9e:61:b5:60:cb:44:cb:09:06:4b:00:d3:4f:f0:19:08:d8:
49:4f:cb:2d:8b:84:a6:ec:d4:56:86:12:1c:b5:8a:6a:d6:a0:
97:f9:e6:ca:da:15:64:53:9f:2e:a4:6c:45:f6:66:ea:86:3b:
bf:c0:9f:6c:b1:30:df:12:1a:6f:25:24:d6:e4:c3:21:7a:46:
34:4b:e5:fa:47:c6:ad:7d:33:e0:47:3c:d2:73:be:aa:cb:bb:
9a:cf:a2:d1:0d:ec:4f:f9:eb:bc:37:43:71:9d:1c:95:ef:b9:
22:b2:6e:d1:a6:ff:42:e5:81:4c:bc:f1:75:46:7e:23:3c:92:
0c:d7:2c:54:d3:a8:81:bb:b2:5f:92:bd:18:51:59:d0:35:e1:
b8:d6:2e:ab:c5:a2:35:e9:4b:d6:e6:c8:c2:05:38:c1:c3:60:
8c:63:0f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cB79+u/iTzrl3qnEEuLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjYxMDE1MTIwMTE0WhcNMjYxMDE2MTIwMTE0WjAzMTEwLwYDVQQD
EyhjYzNjZDJkNWQ5NDhkMWI3MDIxZDc0OTlmMWQ4OTgyN2JhZTExNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/piuGj0Rl0eSPwFLBIndVWDZvs/
2sf1hdBKlxUAACQO1w7fI0vV9OjQGDMZ0/H8XTjvGpxBUyIiK1LiVxHedmeTe4+d
wcGcqtbrSNYMnAAFh4lIO6piETNcnWZ+d8LAn0Zv6f90xVslE5CMYHXJTCcDV8Bs
LnysNDKQ1yUdsgKjt2kSw1CpufnTeEQ+MUovW7g4vS4CwX7cSDXUqDL3gfIQjOXG
6zdM0AD7RpnITV/+jSDtq7LtEm40roAalSjTfczMCAFVN5tjeJBnuty4+Aw1nSne
2x1MZs7D/RrNBSHUCft8ex0M7y01aEy4gZOnlbdgtudElsJ9zphidQQwewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw80tXZSNG3Ah10mfHYmCe64RUiMB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRjKNU18
h3N/cR3sLsqANHiSUfgN+Qf7yHAixKCrkXb09pJ7x3lrq004CoUDNO3kFw0MteQ/
M0rI5vYqvfNl5GxJn7DCitN3JfosFfXNGEFrX1vf+7XLbhH7Lp5htWDLRMsJBksA
00/wGQjYSU/LLYuEpuzUVoYSHLWKatagl/nmytoVZFOfLqRsRfZm6oY7v8CfbLEw
3xIabyUk1uTDIXpGNEvl+kfGrX0z4Ec80nO+qsu7ms+i0Q3sT/nrvDdDcZ0cle+5
IrJu0ab/QuWBTLzxdUZ+IzySDNcsVNOogbuyX5K9GFFZ0DXhuNYuq8WiNelL1ubI
wgU4wcNgjGMPVw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:50 2026 by rpki-client