Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: rLsTubbQff6s+mIIGYfQvjwPqbxF2DzT3aH2vL6Eh1Q=
Subject key identifier: 0F:9D:9A:2D:B4:D1:A7:22:C8:A5:EB:96:FB:BE:3D:06:76:13:3E:43
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 019E2FCDADCC79655929B63997DC6739FC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 1799
Signing time: Sat 16 May 2026 08:01:08 +0000
Manifest this update: Sat 16 May 2026 08:01:08 +0000
Manifest next update: Sun 17 May 2026 08:01:08 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: qbBqFfRUKfZhvmiUfs40twLkuxA9m3hv0zywYlNwpgM=)
2: LbDAcjZRmfBvnYit-qN-3rlzTKY.roa (hash: +vYoAsDEQG/i2Ib8tFZBcU6HYqtLxdIh9g5RpOOfFc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ad:cc:79:65:59:29:b6:39:97:dc:67:39:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: May 16 08:01:08 2026 GMT
Not After : May 17 08:01:08 2026 GMT
Subject: CN=0f9d9a2db4d1a722c8a5eb96fbbe3d0676133e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:21:88:b8:b2:ea:c1:01:d2:71:3e:01:65:
78:47:6b:84:1b:db:26:7d:cc:f1:34:eb:71:16:72:
98:d0:ef:2e:e3:ae:82:9d:54:ef:0a:9e:0a:88:75:
c3:4e:f4:61:51:a9:b5:1e:74:7e:61:b4:2a:a3:a9:
c3:24:0d:07:80:4a:b3:a7:db:8a:0c:5b:fd:11:63:
b9:16:34:8d:44:23:3d:c3:58:48:8f:55:e5:65:ac:
5f:f0:dc:02:8e:1e:91:1b:1d:73:3e:8b:a6:87:b5:
97:33:b5:5c:02:d4:f5:41:00:70:d4:12:22:23:73:
17:e4:b0:c1:8b:8a:a8:27:19:07:e3:98:c2:ff:c3:
fd:f6:a7:95:da:1c:24:6e:ad:f4:fb:78:01:17:6e:
1e:1b:28:77:c5:57:e8:38:f7:77:7c:ff:d9:d2:d7:
57:88:9d:2b:57:bd:d0:13:55:a7:24:20:ea:a7:11:
67:0e:70:ac:b6:8f:f1:63:7d:bb:2d:84:eb:b5:d4:
8f:ed:7e:dd:6c:1a:f8:f8:4e:4b:56:84:52:ae:66:
8f:8c:41:ae:4c:a9:4b:fc:a9:3d:b3:42:a9:87:df:
7a:85:41:65:7c:3c:12:0c:35:b2:84:cd:8d:5f:b9:
b7:e8:ad:2f:8f:de:9f:1e:b8:04:72:21:69:ae:3a:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:9A:2D:B4:D1:A7:22:C8:A5:EB:96:FB:BE:3D:06:76:13:3E:43
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:97:cc:d3:98:13:9e:82:71:dc:4b:2b:ef:ff:30:cf:fe:14:
51:a3:45:20:31:2a:6a:0b:82:d1:71:f4:22:4c:0c:b0:e1:b6:
a0:1e:a1:f0:bb:b9:1b:54:73:3d:65:ca:9d:94:8a:9d:c2:e5:
d8:19:3f:79:e5:f4:33:54:68:46:de:f0:7b:3d:af:56:2b:b9:
70:fe:1f:ef:86:02:86:3e:e3:94:5a:8b:51:c3:67:f9:71:4d:
0d:68:cf:3d:8c:b8:b8:86:da:31:1b:d9:4b:ff:a7:26:4a:66:
c0:4e:3d:52:7f:36:3a:13:a7:d1:24:8a:9a:6e:14:5d:ac:78:
ef:35:fb:cf:4a:46:34:7d:fb:3c:f5:55:9e:ee:d0:b4:e8:12:
f7:c2:56:5b:e3:5b:f9:cd:d3:1c:cd:8a:c3:0d:47:a2:f7:a1:
23:fb:dc:82:ed:4a:a4:59:51:33:cb:3f:bf:d1:b7:b6:32:27:
ff:89:92:b9:0b:6f:ac:70:77:3a:8d:49:a5:0b:2d:02:3c:26:
5a:70:d8:3e:b7:68:b0:9f:c4:03:bf:71:3b:3d:e2:f8:cf:92:
4e:e0:c8:ca:4f:0d:83:8d:2e:d4:ce:9b:1c:f0:d0:ae:73:78:
9a:8d:38:25:22:20:06:e5:08:1b:5e:eb:85:1e:b6:18:1e:b1:
bc:70:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:58 2026 by rpki-client