Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: 4OMF8TaK6emgPGHxrXeYLdYebNbgeFiqSR8WEDr7YJE=
Subject key identifier: F4:8D:67:28:E7:4F:69:C3:02:C7:38:FD:59:28:25:8A:34:19:84:6F
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 019D39780832B6D8DDA263BA9C2F633DAB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 102F
Signing time: Sun 29 Mar 2026 12:01:00 +0000
Manifest this update: Sun 29 Mar 2026 12:01:00 +0000
Manifest next update: Mon 30 Mar 2026 12:01:00 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: tBpEr9gkKRKxF0CBiIeasX0cqrcW4MrwOIWIi96RsSw=)
2: 73KjaABUIPMMJFXxvW8vZjtsKWs.roa (hash: gAkg8MW5s4Wu4Exe0BB68OpW+467tevdwwSm3IV/F4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:08:32:b6:d8:dd:a2:63:ba:9c:2f:63:3d:ab:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Mar 29 12:01:00 2026 GMT
Not After : Mar 30 12:01:00 2026 GMT
Subject: CN=f48d6728e74f69c302c738fd5928258a3419846f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:82:50:a0:88:84:f2:88:59:6c:40:a0:41:
60:ea:85:85:81:e1:31:ef:ef:92:75:56:cb:ea:72:
d7:08:ad:09:87:62:fb:81:1f:52:4d:f0:ec:f9:bf:
dc:46:43:57:9d:13:0d:43:8a:3a:7a:de:3d:ce:5c:
16:c3:d6:83:41:ac:f8:de:3e:e5:eb:c6:b8:7e:dd:
ad:9a:3f:78:1e:bc:46:f8:f6:5e:76:a0:9f:47:a8:
e8:5c:fa:7c:e6:62:aa:6a:b6:9c:7d:c5:42:a8:92:
9b:60:a4:d8:fa:09:ba:ee:b0:19:48:84:9c:08:a1:
ca:4f:a5:b3:e1:a3:eb:cf:0c:49:de:f2:8d:56:bb:
70:07:64:75:f8:ba:69:6b:59:d6:f4:d4:d5:44:9a:
b9:5c:41:0d:e7:8d:8f:0d:97:a3:09:f3:36:ce:66:
20:67:71:95:b7:c3:b9:a8:5e:9a:c8:00:6a:23:81:
9f:ce:af:ce:73:9d:0c:a1:38:e2:91:1e:80:d1:74:
4b:aa:1e:94:03:05:ff:f6:97:07:df:0b:09:ff:44:
3e:a6:55:cb:35:b7:a9:5e:d8:d4:3d:ca:11:5e:6c:
ca:f7:d5:93:ad:cb:4d:01:58:c2:38:d6:30:a5:66:
f3:81:cb:8b:46:9d:87:72:66:a8:ff:0d:69:ec:da:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:67:28:E7:4F:69:C3:02:C7:38:FD:59:28:25:8A:34:19:84:6F
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5a:01:a4:bf:9e:c6:d8:a0:8b:47:1d:d3:47:4b:79:d4:7e:
84:87:0d:2b:b6:71:b5:7c:9b:b5:ca:ac:92:bb:ec:56:88:5a:
bc:5d:72:23:88:df:de:ea:07:00:51:2f:df:29:77:8f:a0:3e:
3b:b9:e1:87:6f:88:99:40:4a:97:cd:e9:30:4e:4a:8a:1d:fd:
61:d3:fe:da:73:80:d5:4c:95:a4:76:f5:be:86:14:32:3a:61:
60:65:d8:7c:5f:87:33:81:b2:8e:28:8b:4a:63:d7:49:0d:97:
e3:30:b1:99:46:14:b7:a7:ff:ef:17:5d:b5:e7:36:bc:85:30:
15:e9:66:ed:1b:c2:47:fb:96:bc:26:1b:18:33:d8:4c:26:59:
f3:8d:cd:be:86:33:2a:ee:52:34:ba:c9:57:b6:80:88:5f:15:
db:fb:8b:2b:cf:0d:1e:98:dd:b4:0b:1f:84:9a:d7:75:4c:47:
6e:93:d1:a0:b0:13:42:94:47:45:74:ff:18:e8:12:d9:1d:19:
76:c3:6a:87:1c:53:a7:1d:e7:80:22:aa:2b:7e:f0:c0:d1:32:
a4:61:69:2d:f7:3f:0f:c5:f6:1e:2c:8f:d3:ea:09:c0:f5:d0:
ea:9e:c8:79:62:f2:9c:9f:21:77:40:a6:3e:51:d5:83:df:f8:
1a:10:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:59 2026 by rpki-client