Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: IObXvBjC7477x9cb98WNmSfqJEzqheRYXZgQ43FLwxw=
Subject key identifier: 1E:A0:FC:2B:4A:0F:56:94:01:1B:F8:89:FB:89:1A:65:64:5E:CB:9B
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019E2F5F81A92AE480224C923581408730F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 110D
Signing time: Sat 16 May 2026 06:00:48 +0000
Manifest this update: Sat 16 May 2026 06:00:48 +0000
Manifest next update: Sun 17 May 2026 06:00:48 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: U5CkTgulRHEJXIVwYwc7kuGQ4mdhI4ZtsmLDYRO61PI=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:81:a9:2a:e4:80:22:4c:92:35:81:40:87:30:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: May 16 06:00:48 2026 GMT
Not After : May 17 06:00:48 2026 GMT
Subject: CN=1ea0fc2b4a0f5694011bf889fb891a65645ecb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:cd:fb:3b:21:d7:18:c6:e8:c7:e4:31:05:
97:b2:9a:4e:06:21:b6:36:8c:fb:c9:7f:bb:8f:d0:
6e:0a:c4:a7:5d:8a:68:41:66:5c:32:d2:02:af:50:
c9:5a:7f:9c:99:45:ee:d3:9f:79:92:87:e1:12:59:
77:92:f3:af:94:b4:84:1f:c1:8b:f8:56:f1:d4:0f:
1a:b0:99:d3:36:dd:ad:06:0f:46:17:30:52:5c:60:
3c:32:a3:d2:71:61:d7:fb:7c:2f:91:b0:d6:ed:24:
6f:a0:b0:e4:9c:ce:f2:89:79:76:dd:26:ae:9a:47:
68:48:d4:0d:a5:34:15:0a:31:e9:57:26:ba:84:b6:
8e:c4:80:f8:15:e4:c0:d1:74:db:73:24:f0:b8:78:
12:30:aa:88:d6:c9:b3:29:fd:81:9b:ae:75:02:dc:
a6:2c:a6:7e:d7:6c:82:a8:c7:a0:b7:89:60:4b:61:
f5:fc:2f:3b:2f:c3:09:82:6b:e5:b9:2b:18:3f:eb:
ad:ca:a0:2d:d7:6b:2b:d6:6e:8b:48:d7:6c:fd:37:
3f:89:13:0f:8b:12:20:07:46:67:bf:21:8c:0f:39:
1d:9b:b3:c5:cf:11:8a:e9:9e:c4:5f:b3:06:ea:f9:
31:33:92:93:bb:3b:66:fd:99:17:8a:60:72:bd:dc:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:FC:2B:4A:0F:56:94:01:1B:F8:89:FB:89:1A:65:64:5E:CB:9B
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:65:07:d7:53:b6:60:3a:92:8b:2d:96:20:d6:51:e8:f2:
f9:b7:b8:e7:71:13:fd:92:ed:f4:aa:69:c7:43:1e:a8:50:6b:
b3:d9:c0:30:ce:7b:45:6b:22:ae:72:d2:ee:73:7c:da:80:1e:
46:c3:fe:e0:ab:c6:9a:2f:db:f6:84:3a:e5:dd:57:f3:b1:4d:
ac:b2:4f:54:75:ab:ab:d6:ad:6a:9a:de:ee:11:bb:53:a9:0b:
2d:7b:e1:6a:da:30:74:9c:08:f1:5a:82:3c:ce:83:1c:39:ef:
70:4d:4c:52:2e:e4:cb:69:4b:20:98:2d:fc:a7:cc:ce:f3:8b:
af:dd:05:28:75:c2:d5:66:db:a9:c9:56:1c:0b:b9:40:49:96:
fd:a4:f6:1b:38:53:72:00:4e:56:db:86:45:7d:f6:82:d0:db:
2a:7a:ef:15:b2:63:f8:fe:46:71:c4:2e:92:86:b7:fd:03:21:
b9:b7:f8:c7:5f:90:7e:54:ca:6a:0e:8e:6b:e8:4a:f3:ed:ba:
d1:da:67:67:34:7d:d4:49:4a:4d:ac:de:4c:ad:df:a0:e5:2e:
b7:59:eb:76:c4:d6:40:ef:6f:06:84:5d:62:49:3b:a1:ac:68:
09:8a:3b:fb:54:8d:61:55:5e:c4:a3:2c:70:a9:5b:97:e5:36:
f9:ba:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:41 2026 by rpki-client