Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: TUcTYUIO/Zo5HoSO8ItmsvlCX0oW60AM1dMhxIHIQu0=
Subject key identifier: E5:89:7F:C2:24:7E:24:5B:34:3C:B5:7F:50:A3:ED:09:B0:57:CB:F5
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 01A00138308DC52BD45147656E81E86BAED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 188A
Signing time: Fri 14 Aug 2026 17:00:54 +0000
Manifest this update: Fri 14 Aug 2026 17:00:54 +0000
Manifest next update: Sat 15 Aug 2026 17:00:54 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: LnhwsvNsO+87Kf7wgcMNeg/fTTu6bBRo+KOg4ZUkYIk=)
2: LbDAcjZRmfBvnYit-qN-3rlzTKY.roa (hash: +vYoAsDEQG/i2Ib8tFZBcU6HYqtLxdIh9g5RpOOfFc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:30:8d:c5:2b:d4:51:47:65:6e:81:e8:6b:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Aug 14 17:00:54 2026 GMT
Not After : Aug 15 17:00:54 2026 GMT
Subject: CN=e5897fc2247e245b343cb57f50a3ed09b057cbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:cb:b9:85:44:8e:91:61:e8:87:11:5f:c1:
f2:a3:9e:d0:80:2e:fe:75:4c:56:9a:e7:7e:13:78:
77:19:ff:79:d2:42:08:00:a3:41:4a:d6:be:d4:3b:
cd:4c:77:64:e5:42:fd:91:df:c1:68:46:af:a6:21:
03:f1:27:73:09:44:8c:ff:0c:b9:47:d2:9a:fe:b6:
57:9e:a3:ad:db:71:96:5c:d0:24:ff:44:18:e2:88:
75:79:f7:63:f3:27:83:56:3b:ee:1f:69:fa:7e:d9:
44:31:58:63:97:a7:8d:0d:a2:2c:7a:49:56:d7:0d:
27:60:38:0b:f5:b8:4a:c9:5e:f1:9d:e2:f9:72:98:
9b:71:8b:83:7f:76:26:5a:45:da:e3:79:6b:b0:b3:
1a:b3:83:a5:b5:56:04:db:b0:5c:95:51:ad:eb:a4:
a8:bf:b9:ce:4b:97:84:1e:ae:c1:ac:85:e1:b2:95:
06:c6:49:a4:cc:fb:fe:80:75:ba:95:d8:8c:ef:e9:
4f:bf:f9:fa:57:10:48:c6:d6:3d:fd:be:c6:14:07:
c4:d5:5d:80:dd:5e:f4:51:1f:91:e0:6d:ba:de:97:
78:92:b1:b0:8b:8a:38:fd:1e:c1:2a:01:d8:9d:57:
6a:a3:f8:47:78:c1:96:e0:e3:b3:fa:ca:d5:30:80:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:7F:C2:24:7E:24:5B:34:3C:B5:7F:50:A3:ED:09:B0:57:CB:F5
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:97:1e:cc:b8:5f:bb:2b:a3:40:a4:83:39:fe:41:bb:4a:62:
89:e8:b8:0c:51:39:1f:9e:11:e9:2f:85:45:7f:b9:6e:44:7b:
2f:7a:26:43:4f:a9:48:8f:0a:3a:d1:15:9c:c7:3f:70:ee:54:
7c:ee:d9:7a:2e:1f:b8:5a:8c:7b:2d:73:ed:64:5f:c5:05:38:
b0:9a:b9:d0:f8:78:71:cd:1c:3f:dd:9e:42:c8:ef:e8:1a:60:
47:e5:81:fd:84:4d:c9:85:06:8b:57:b6:a6:2a:4c:a5:04:29:
a1:a4:b0:ed:1a:36:67:1b:4a:16:33:ba:e0:fe:a0:e4:76:04:
9f:f6:3c:12:c2:78:fe:43:59:69:f3:fc:75:30:8d:9b:12:08:
f3:80:19:b0:04:e1:60:bc:62:35:ff:8b:bb:ea:6f:10:85:f5:
1a:d4:93:bd:e7:2b:73:32:f8:54:47:e5:a6:ea:ce:6f:9d:ee:
20:8c:ec:da:b5:5b:81:bc:1d:5e:1b:2f:1a:2f:17:94:93:f9:
d5:db:21:a7:e7:da:da:05:5a:dd:28:7d:62:00:8d:44:58:f6:
45:e7:a0:83:3e:22:36:a2:db:f1:71:ee:2c:57:9f:bd:c9:41:
c6:8e:e9:74:9b:ca:19:23:1a:98:3f:5a:1e:f7:b5:27:03:38:
29:25:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:56 2026 by rpki-client