Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: ReYav9NbGnykJdmu/yIPGAa/GQT2nG4Ri0Q/CgJMBRs=
Subject key identifier: A0:15:1F:00:05:D4:67:6C:D8:60:B8:ED:4B:D8:6F:B7:FA:9F:0F:3B
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01A13DEF1C5B6803A2BE53AEE67920E581CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 06AE
Signing time: Thu 15 Oct 2026 05:00:42 +0000
Manifest this update: Thu 15 Oct 2026 05:00:42 +0000
Manifest next update: Fri 16 Oct 2026 05:00:42 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: fRjZ9dM4r4E23kQIIwkI2aA4Egr+MLLDtO4qAeuB1nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:1c:5b:68:03:a2:be:53:ae:e6:79:20:e5:81:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Oct 15 05:00:42 2026 GMT
Not After : Oct 16 05:00:42 2026 GMT
Subject: CN=a0151f0005d4676cd860b8ed4bd86fb7fa9f0f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:0e:04:36:40:08:bf:4a:ab:69:e2:7a:3a:
a3:e3:1e:d5:ac:cd:19:d5:5c:c7:c0:b5:ca:69:b0:
67:55:04:41:2e:fd:f6:64:bb:d0:b3:35:6c:54:22:
af:d2:68:43:e2:90:d6:e2:b7:27:5d:0e:b8:a3:28:
cc:6d:d2:d9:e1:a2:78:b4:fd:37:14:34:e9:be:55:
9b:80:2d:1f:6e:87:4f:b9:bd:dc:d9:2f:4d:93:46:
f5:b3:10:f1:d3:af:e5:65:00:84:7f:f3:f5:7b:a0:
10:5d:0e:07:97:fe:98:df:86:d2:cc:41:92:c9:38:
a4:d1:6f:81:af:d2:70:d0:6b:4f:e9:e9:1f:a1:9b:
eb:8d:6e:c4:ef:7c:3e:be:9d:d6:ff:8d:71:af:06:
80:d1:6b:e0:8b:fc:85:51:46:68:55:46:2f:66:26:
ef:b4:54:f3:79:43:38:79:3c:dd:4b:1b:b7:c7:b9:
6e:87:c6:ba:f7:bb:2c:17:12:f9:9b:7f:9e:6a:d7:
36:1c:22:77:ff:9a:07:b1:6e:7c:b9:dc:27:93:68:
ce:7c:e7:f4:35:9c:71:a1:47:1c:e0:8e:cd:66:b6:
2b:f4:1f:51:1a:c4:a6:7f:a2:f5:47:0c:da:70:fc:
51:4e:03:56:79:5e:b0:66:c3:cd:90:57:09:7f:d2:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:15:1F:00:05:D4:67:6C:D8:60:B8:ED:4B:D8:6F:B7:FA:9F:0F:3B
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ec:bb:52:a9:15:db:4c:9c:ba:2e:c7:10:0c:a4:4c:87:61:
ee:23:ba:a6:cc:b5:62:10:74:17:af:e6:11:81:a6:0a:ee:50:
0a:96:21:c3:9c:a1:be:43:68:04:c1:46:2d:4d:39:4e:0b:1c:
33:5c:01:ee:2e:55:ef:c7:59:11:23:4e:29:ac:f6:ea:ae:21:
0d:c8:8d:f6:5c:38:67:52:ff:10:5d:f3:d9:d7:44:3a:e9:52:
02:ac:96:c6:5f:71:5e:fa:00:d0:08:63:85:f1:de:61:de:e5:
82:b8:aa:6f:7f:6c:9f:ef:38:80:20:f3:f8:e0:54:b5:98:b1:
ca:42:4c:97:74:79:4a:5a:8a:cb:91:0d:0c:01:ba:73:74:7f:
2f:9c:de:06:cb:a4:d1:30:09:80:af:96:da:be:73:38:bd:cf:
cc:2a:5a:dd:90:cf:45:3a:5d:92:1a:2f:60:df:59:ba:c1:d2:
1a:59:02:5e:03:5b:20:23:15:05:3c:10:47:dd:a0:b9:be:17:
ca:8e:ed:41:92:3d:52:16:d3:0c:c8:4a:8a:77:e1:8d:c7:86:
09:0e:a4:89:98:12:c1:7b:c8:72:35:14:6b:66:1c:1b:9f:eb:
a5:5d:a9:8a:73:9a:8e:f4:cb:3f:9a:d6:ec:9c:b2:a6:5b:b7:
8f:b0:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:23:59 2026 by rpki-client