Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: 0mPBNMyZRBtwxw/GsLvyomXCMn2XOJWuVBGR0isWPmY=
Subject key identifier: 44:6B:07:11:1E:92:1D:5A:AB:7A:11:B5:50:D6:B2:04:A9:53:83:AF
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019D37F79397AA22C77BBA45B7704A80B5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 069B
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: Ghinna1A4lA4m7T6syiN+u7jfOycipcoJj3bQdu4rPE=)
2: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:93:97:aa:22:c7:7b:ba:45:b7:70:4a:80:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=446b07111e921d5aab7a11b550d6b204a95383af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:55:e4:26:0a:61:f6:ac:d4:32:a3:3e:41:
80:1d:43:e7:8b:2e:2e:d6:37:0d:80:9e:a8:5c:78:
72:e1:1c:fc:32:8e:59:74:ba:eb:82:d3:92:ef:08:
ed:32:7e:38:1c:f8:69:f2:2d:2e:78:f1:9b:34:eb:
e0:6d:84:56:ed:64:63:00:e9:4d:53:37:c7:2a:cb:
44:2e:4f:e5:b0:6f:ed:d3:44:b3:7f:42:ad:ec:98:
c9:d5:31:53:82:e4:7a:21:63:1b:c2:21:7a:c1:dd:
6e:f2:62:40:9f:f2:57:8a:0a:1b:ce:0c:0b:26:45:
35:ee:ae:36:75:14:b2:a9:16:73:5d:4d:99:fb:37:
fc:c8:50:65:e9:0b:46:a3:5c:dd:2b:5b:d1:0c:e9:
e8:6b:81:de:7a:80:95:ae:ae:b2:80:5a:e7:82:32:
fc:5a:12:f3:77:f8:05:8b:27:1d:0f:c0:a9:b0:62:
0d:18:4e:e0:b7:2f:65:a5:69:d6:4f:7f:1c:98:27:
2d:50:da:65:cb:94:73:3c:b3:e8:27:66:3d:6b:b5:
12:c6:fd:da:17:75:9f:6a:6e:39:cc:03:25:a9:c9:
34:08:35:88:3b:30:e5:a4:86:7a:24:e8:72:d7:94:
a0:1d:8e:02:c8:90:50:f1:21:4c:02:5e:3b:10:b3:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6B:07:11:1E:92:1D:5A:AB:7A:11:B5:50:D6:B2:04:A9:53:83:AF
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:50:dd:b1:5e:82:c0:13:14:05:b2:a2:40:ae:86:a9:61:8e:
08:28:53:b2:f7:49:f9:94:b8:ed:54:59:f5:a6:f7:a9:89:d1:
39:2b:df:a7:ef:a1:5c:07:b2:f0:46:d0:bd:cd:0b:8c:c1:8f:
44:40:4d:65:b7:5a:70:25:dd:55:3f:86:66:fd:dd:c1:01:93:
0e:85:fa:17:36:76:db:b2:7b:45:2f:f1:de:27:6e:eb:5e:51:
d4:b4:c3:05:47:26:04:a7:e8:c7:ed:1b:6e:bf:17:fb:2a:3d:
18:10:b9:f4:88:24:fd:cf:4c:cc:14:f4:4c:9f:07:97:01:d9:
64:2b:5e:ae:28:30:85:c9:2c:0f:14:3b:9b:9b:bd:f2:c9:3f:
8e:83:0c:d9:6e:a7:24:28:6f:21:0a:e2:ae:8c:4b:15:15:0d:
58:bb:ac:94:5c:bf:dc:73:53:ea:52:39:95:e3:f0:6a:17:ec:
f7:0c:5e:34:c2:b4:36:72:63:97:a6:bd:e8:f9:fa:cd:3e:d4:
19:78:d0:c1:61:e1:71:9e:39:89:96:35:d7:44:d8:39:03:3a:
3a:f5:71:d2:90:f6:1e:c5:36:23:cc:c4:2c:aa:0c:55:69:e6:
44:fd:64:ce:3e:04:1a:bf:c0:4b:ad:18:a5:31:6a:b4:75:7a:
de:66:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:42 2026 by rpki-client