
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: Wxbc0p++S/dqLlMyyIu72+8Y/l/GFYfCixsBSW3i22k=
Subject key identifier: 81:20:C0:10:3C:94:4E:D9:3D:89:79:48:85:38:81:57:4D:9D:79:5D
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01A000C9ED2AD9BB565CA3A4FBAB57F9F62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 11FE
Signing time: Fri 14 Aug 2026 15:00:28 +0000
Manifest this update: Fri 14 Aug 2026 15:00:28 +0000
Manifest next update: Sat 15 Aug 2026 15:00:28 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: YCmKm5gaImud+DoLXH1ynm8SVvB0W5ijjF0yhuYEVNc=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:ed:2a:d9:bb:56:5c:a3:a4:fb:ab:57:f9:f6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Aug 14 15:00:28 2026 GMT
Not After : Aug 15 15:00:28 2026 GMT
Subject: CN=8120c0103c944ed93d897948853881574d9d795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:51:39:61:0b:69:ae:3c:2b:e7:c7:1c:83:
4c:43:75:cd:ca:61:b3:12:6d:16:89:95:c2:b9:39:
69:4a:cb:08:2e:3c:c9:3e:54:c9:b4:1c:ac:16:b2:
78:b6:9f:84:76:80:6f:9b:14:44:3b:79:5a:5a:6c:
35:55:53:28:0e:7f:cc:db:d5:70:1d:4e:10:06:fc:
16:0b:8c:8a:29:b0:56:99:ab:9f:a2:75:7f:78:06:
6a:a4:d2:88:ab:8c:e6:81:65:14:89:f2:d7:da:28:
4f:2e:5f:b9:ec:f6:4e:64:bd:0a:10:27:9a:87:89:
1a:b2:48:a2:39:64:0f:ae:52:2d:7b:6f:f5:5d:1b:
3b:f3:27:41:40:a5:f3:5d:dc:e5:13:97:cb:99:fd:
bd:3f:5f:54:1b:3a:c1:f3:23:46:41:ba:0d:1a:51:
5e:ff:67:82:59:41:fb:e2:a2:24:23:8e:e1:ec:02:
c1:99:dd:b3:18:8d:e9:98:76:35:da:25:1b:30:09:
94:ce:eb:51:bb:2d:12:3a:a1:03:4d:9a:1b:86:0b:
0a:21:2a:c4:9b:95:60:89:04:b8:cb:47:47:52:31:
df:58:59:92:ab:6e:41:5f:79:ca:16:0d:61:dc:5f:
32:5c:c1:c0:e1:80:11:df:e5:30:b0:45:2f:b7:f2:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:20:C0:10:3C:94:4E:D9:3D:89:79:48:85:38:81:57:4D:9D:79:5D
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1d:5b:33:c0:f7:6e:f8:60:64:44:fd:4c:3c:ce:68:df:b8:
50:38:7a:80:fd:1e:ca:f9:4c:71:30:fd:7a:b5:57:9c:27:4d:
cb:c1:cb:bd:98:81:a5:2e:7c:9b:9f:d5:a4:45:9f:74:5e:35:
7d:a9:8b:ca:e9:1f:ba:cd:63:75:0a:6e:70:ba:cd:04:ad:15:
1f:03:8c:41:dc:00:75:99:21:95:2d:dc:95:01:26:04:e2:3b:
ee:46:1a:98:44:86:00:bd:a0:f3:b6:61:d4:aa:8a:b7:50:fd:
d5:8d:2a:47:0a:ef:eb:71:79:bc:83:35:a6:e2:6f:91:bf:d6:
73:7e:fd:f4:fc:58:53:0f:93:87:ee:0f:e1:26:81:8f:61:17:
6c:4b:b9:80:a7:c5:90:f3:cb:ce:0c:16:64:f2:af:b4:6b:5b:
2c:e0:04:1f:44:b0:9a:4b:b5:46:ec:c5:f4:ea:3f:89:2d:11:
95:35:4c:60:3d:98:dd:8e:90:48:36:45:66:70:ad:71:56:cb:
fa:7b:a6:19:02:80:9b:85:26:42:08:1e:7f:7c:b4:91:22:d2:
40:1a:fe:1a:46:1e:6e:6b:5c:75:1d:6b:83:d0:e3:72:76:52:
cf:b1:c1:3d:a0:da:23:72:8f:60:75:fd:1e:fc:bd:c1:83:b2:
40:6d:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:04 2026 by rpki-client