Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: ofyZsdLiPx/JNf7iY4yVnCkA5jPEf0h11e7h1Xnws48=
Subject key identifier: 17:41:2F:F7:AB:CD:17:0E:40:32:0F:D0:26:5E:D8:77:58:90:3B:9B
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 019E28EFB82DCDAB9AB27893B5AB06A03514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 10AB
Signing time: Fri 15 May 2026 00:00:59 +0000
Manifest this update: Fri 15 May 2026 00:00:59 +0000
Manifest next update: Sat 16 May 2026 00:00:59 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: KJPm1I8nW4k+61aG1EWY1UDpHFhv+Meh3J83Y8tzhpE=)
2: 73KjaABUIPMMJFXxvW8vZjtsKWs.roa (hash: gAkg8MW5s4Wu4Exe0BB68OpW+467tevdwwSm3IV/F4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:b8:2d:cd:ab:9a:b2:78:93:b5:ab:06:a0:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: May 15 00:00:59 2026 GMT
Not After : May 16 00:00:59 2026 GMT
Subject: CN=17412ff7abcd170e40320fd0265ed87758903b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:2f:b3:f7:35:94:7c:b0:5c:18:6b:67:25:
52:f4:b3:43:35:9d:4a:c8:01:7a:31:c6:98:2f:5f:
1a:04:51:ab:3e:0a:cd:d6:d1:8e:28:04:71:de:fc:
f5:8d:8e:80:ea:d3:aa:4b:41:4e:ea:b8:6a:c4:17:
ef:ec:e8:af:5e:52:13:9d:9b:53:e0:37:75:06:df:
8f:b6:da:c2:cd:2b:82:37:ad:2c:da:23:ec:58:70:
e8:bc:de:1b:ba:e0:60:36:0e:c6:51:9f:1f:d2:89:
dd:65:7c:4b:b6:ac:1c:12:c8:49:f3:25:7c:c3:d4:
af:c7:eb:c3:ee:d5:ac:31:58:44:5f:30:32:1d:cf:
fe:88:6f:df:b5:5b:b6:dd:8a:f6:c3:43:8c:92:fd:
0a:51:f7:74:2e:a8:47:b5:ae:4b:ff:40:95:88:b8:
e9:c0:17:52:8b:49:b5:c1:58:19:b7:f1:65:8b:91:
2a:ac:09:23:27:4b:a4:1a:8f:ca:3d:fe:54:14:42:
1e:3e:4a:57:2b:e9:16:a8:a4:fb:b3:9b:76:78:4a:
84:f0:fa:5d:05:b6:db:e2:f1:af:dc:b1:2f:13:d5:
e9:38:e8:9b:28:fc:75:b2:2a:1e:1a:90:ab:48:6a:
cb:1b:8c:2e:7f:aa:7e:fc:8d:0d:8d:b4:25:85:0b:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:2F:F7:AB:CD:17:0E:40:32:0F:D0:26:5E:D8:77:58:90:3B:9B
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:f1:27:63:08:b2:14:1f:0b:01:3c:e1:d7:75:71:99:d4:
a5:c3:c0:9f:e7:b5:60:f1:c9:c4:01:2c:9d:48:69:b1:bd:f5:
30:e6:7e:e6:46:73:7c:fc:48:e1:56:bb:04:0a:b7:0b:9e:2c:
2b:a8:2a:3c:03:66:f4:ab:a0:e5:7a:02:10:9c:d0:1f:63:a5:
80:64:b4:d2:85:93:a2:b9:46:c2:90:91:8a:11:bc:06:6a:3a:
e9:e5:5f:56:ee:68:53:3d:81:05:38:97:9c:df:3c:60:5b:a7:
89:d0:da:81:01:18:63:e4:b0:38:a9:c2:4f:08:b5:82:7e:7c:
9b:19:34:16:ec:53:26:3d:29:3a:0e:31:65:81:4e:ae:3c:9a:
4a:a3:12:54:a9:69:02:38:e1:b3:12:98:e8:82:e8:69:89:73:
84:cc:e5:7b:0c:26:50:0c:81:9a:4c:d9:9a:65:33:9b:c8:41:
b8:a2:e0:cd:05:b9:0f:2e:92:c9:93:66:d1:3e:f8:ea:0d:b8:
26:14:43:17:bf:b0:a7:df:5b:de:80:05:e0:c0:aa:15:e1:fa:
05:3b:9b:4f:5e:8b:78:d7:da:d1:7e:fe:33:55:1e:4b:c1:eb:
a9:4d:34:1c:41:f9:56:35:2b:05:31:57:d7:47:ad:6c:28:1d:
8e:0d:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:19 2026 by rpki-client