Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: Hgfqvwo/JrauU2Q4lBxBEJbSBTjj9CVVOmDlswCE1r8=
Subject key identifier: 6F:D9:5D:C8:8E:07:BC:5D:09:75:42:91:5A:DD:8B:0E:7D:90:0B:AF
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01A0013880097CF7F697B2FB2907F943EDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 060A
Signing time: Fri 14 Aug 2026 17:01:15 +0000
Manifest this update: Fri 14 Aug 2026 17:01:15 +0000
Manifest next update: Sat 15 Aug 2026 17:01:15 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: 8Fh3zeYPi+rj46CNlEM1Y1n7qqyS4SWpIGHR27Pp5Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:80:09:7c:f7:f6:97:b2:fb:29:07:f9:43:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Aug 14 17:01:15 2026 GMT
Not After : Aug 15 17:01:15 2026 GMT
Subject: CN=6fd95dc88e07bc5d097542915add8b0e7d900baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:13:1b:4d:ab:fd:73:21:51:62:5d:ee:fa:
60:ee:b3:e5:dc:80:39:88:02:c0:d0:67:8d:51:c0:
17:99:d1:e9:3c:f0:d3:dd:56:e8:b2:d7:64:08:e4:
93:1b:59:33:e8:fc:a0:06:84:fe:df:7c:85:55:17:
a1:cf:b5:72:20:22:57:cb:77:65:33:ad:00:bf:b5:
e8:e7:14:4c:0a:49:ad:10:f7:ce:dd:db:e9:17:c4:
bd:0a:79:fa:dd:9e:94:13:14:8a:78:e7:50:77:50:
6d:29:12:54:40:ef:fc:59:a8:5b:d0:c8:37:83:cd:
2b:4b:22:e9:be:c6:14:3e:29:00:b0:75:bb:8b:7a:
e1:46:bd:d0:4e:53:28:7c:11:7f:51:f8:26:e9:81:
9b:2a:be:36:72:56:0f:db:9a:36:ae:13:8d:63:8e:
c5:38:f6:6a:c2:92:21:0e:af:7a:3e:85:76:fd:21:
9e:ff:6a:e1:5b:bd:b1:fb:53:f6:13:ff:14:c5:da:
e0:cf:d0:f0:93:93:7b:11:1b:9c:86:5f:ca:60:01:
9e:fe:f1:be:aa:03:11:7c:9f:3e:d7:90:c4:07:99:
ec:94:1d:a4:b8:99:b8:84:46:e6:ed:4c:ba:af:e5:
0b:bd:ee:2a:2a:eb:dc:9f:1d:85:5e:61:ef:ce:dd:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:5D:C8:8E:07:BC:5D:09:75:42:91:5A:DD:8B:0E:7D:90:0B:AF
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2c:1b:ce:db:86:58:9a:fb:82:00:17:fc:66:db:8e:93:a8:
b3:b6:31:a8:bc:03:a0:12:64:c4:36:3c:ac:0d:94:4f:0b:12:
54:59:36:0b:4f:f8:87:f0:31:3c:89:24:23:87:5d:20:dc:7d:
89:4e:76:e4:1c:88:cb:7b:ec:8d:b0:2a:e7:3d:f4:7b:c1:86:
57:76:b2:8e:b9:a2:92:89:83:d4:73:86:a2:e8:a7:a4:5d:34:
c7:0d:5f:43:ac:b9:e6:61:16:4e:0b:15:d4:de:90:3d:dd:52:
ef:7d:c5:8b:6e:a4:46:48:6d:e4:62:1d:85:ff:c3:37:4d:c8:
f0:a2:89:dc:65:c0:7c:b6:8e:51:75:d5:cb:75:87:ac:57:79:
5a:ca:0c:79:aa:d6:e6:f5:d2:97:7d:bf:c3:0b:75:40:95:49:
82:20:d8:7d:a0:0a:c7:9f:60:94:ae:07:24:55:4e:1d:bb:74:
92:bc:cf:ee:be:69:d5:69:6f:db:a8:d7:e5:d9:d7:f0:76:25:
a6:45:2d:19:4a:9f:fd:77:db:42:75:88:40:bd:61:da:5c:2c:
c2:fc:02:fa:30:92:c6:de:dd:33:98:93:77:9f:75:5e:b7:1e:
7d:77:99:9c:4f:ba:57:45:3f:c1:98:ee:37:fb:b8:4c:a5:3b:
26:45:97:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOIAJfPf2l7L7KQf5Q+2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MGFkMTExMTMxODMwMGJhNjc4ZTg4ZTA1MDJiMWZjNTFl
MzUzNzkwHhcNMjYwODE0MTcwMTE1WhcNMjYwODE1MTcwMTE1WjAzMTEwLwYDVQQD
Eyg2ZmQ5NWRjODhlMDdiYzVkMDk3NTQyOTE1YWRkOGIwZTdkOTAwYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlkTG02r/XMhUWJd7vpg7rPl3IA5
iALA0GeNUcAXmdHpPPDT3VbostdkCOSTG1kz6PygBoT+33yFVRehz7VyICJXy3dl
M60Av7Xo5xRMCkmtEPfO3dvpF8S9Cnn63Z6UExSKeOdQd1BtKRJUQO/8Wahb0Mg3
g80rSyLpvsYUPikAsHW7i3rhRr3QTlMofBF/Ufgm6YGbKr42clYP25o2rhONY47F
OPZqwpIhDq96PoV2/SGe/2rhW72x+1P2E/8Uxdrgz9Dwk5N7ERuchl/KYAGe/vG+
qgMRfJ8+15DEB5nslB2kuJm4hEbm7Uy6r+ULve4qKuvcnx2FXmHvzt3+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/ZXciOB7xdCXVCkVrdiw59kAuvMB8GA1UdIwQY
MBaAFNkK0RETGDALpnjojgUCsfxR41N5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzIt
NWEyN2I4YWYyOGE1LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NThhMGYtM2M0Yy00MzEwLTlhNzItNWEyN2I4YWYyOGE1
LzEvMlFyUkVSTVlNQXVtZU9pT0JRS3hfRkhqVTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCwbztuG
WJr7ggAX/GbbjpOos7YxqLwDoBJkxDY8rA2UTwsSVFk2C0/4h/AxPIkkI4ddINx9
iU525ByIy3vsjbAq5z30e8GGV3ayjrmikomD1HOGouinpF00xw1fQ6y55mEWTgsV
1N6QPd1S733Fi26kRkht5GIdhf/DN03I8KKJ3GXAfLaOUXXVy3WHrFd5WsoMearW
5vXSl32/wwt1QJVJgiDYfaAKx59glK4HJFVOHbt0krzP7r5p1Wlv26jX5dnX8HYl
pkUtGUqf/XfbQnWIQL1h2lwswvwC+jCSxt7dM5iTd591XrcefXeZnE+6V0U/wZju
N/u4TKU7JkWXpw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:53 2026 by rpki-client