Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: sZY+fArolQdD0t8FlxpGGu+HVWureFs2mG6snQsTcEs=
Subject key identifier: B5:8D:52:60:18:89:B1:87:99:FC:F8:11:F2:50:E0:35:2A:F2:E7:CE
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019E303B7F3558E528B71AA856E4242B669F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 071C
Signing time: Sat 16 May 2026 10:01:05 +0000
Manifest this update: Sat 16 May 2026 10:01:05 +0000
Manifest next update: Sun 17 May 2026 10:01:05 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: Qd1n1NYgrzTxcVoHLFBjRj5WUkfI1lLGRi++lCRmv2o=)
2: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
3: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:7f:35:58:e5:28:b7:1a:a8:56:e4:24:2b:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: May 16 10:01:05 2026 GMT
Not After : May 17 10:01:05 2026 GMT
Subject: CN=b58d52601889b18799fcf811f250e0352af2e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:bb:19:73:40:50:a8:e7:55:c3:36:e1:2c:
4e:8a:d9:a5:d8:8a:9c:de:ab:93:60:f7:b4:09:f9:
9b:74:e6:21:f2:a1:51:f3:bc:f2:e5:ab:fa:eb:84:
6c:37:99:eb:44:4e:f0:0f:05:87:9b:5e:1d:59:b0:
6e:2c:3a:13:1e:47:48:cb:fd:d3:36:8e:39:9c:d3:
31:36:1d:28:8c:82:97:d5:ff:e7:0b:61:e4:c0:9b:
18:4c:3c:5a:67:81:2b:01:3a:e2:75:04:b0:81:08:
1a:45:aa:d7:2e:03:45:75:e9:f9:23:cc:6b:54:b7:
a7:54:3c:36:64:38:ac:80:b6:1d:b5:34:8a:c9:c8:
02:af:40:a6:fa:8f:e9:f1:f7:63:a1:a8:43:b1:f5:
21:f1:53:e8:46:0d:ec:37:cc:4c:e2:7e:98:5f:ab:
2c:40:45:aa:50:22:ce:38:a4:a0:e5:d6:d4:cc:83:
7e:a2:25:5e:0b:94:5d:f5:44:e2:35:21:fe:6b:08:
c5:d5:15:92:54:32:7b:bb:64:4b:f3:9d:10:54:14:
b6:d3:8c:c0:88:69:bb:68:16:7d:7c:83:5c:3d:c4:
26:da:9a:9d:d3:7e:b8:e1:0e:25:b1:49:5c:4b:ef:
29:7b:95:f2:b5:88:28:d0:24:e7:14:99:8e:de:87:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:52:60:18:89:B1:87:99:FC:F8:11:F2:50:E0:35:2A:F2:E7:CE
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:78:17:54:67:c8:7a:e3:31:92:51:a1:82:bf:80:a9:03:
44:a5:d2:1f:5c:33:3e:6b:7c:d2:f4:9d:7b:61:83:f3:fe:9d:
2d:af:cb:8d:ba:9c:84:7a:b9:a8:7b:f9:f2:dc:80:b0:ab:57:
a9:cf:81:12:9c:7a:fb:f7:f0:0c:21:b7:cf:3c:b3:fe:bc:23:
d5:e2:26:33:8e:c6:73:ff:df:b9:e7:cb:a2:66:ae:96:d5:40:
77:17:2a:23:1b:31:45:72:ce:66:5e:cb:4f:85:91:04:4f:05:
0b:f2:c4:6b:f3:28:fb:27:11:65:ec:fe:ac:1d:15:af:05:1a:
ad:7c:ff:50:85:23:fb:1b:01:43:3a:6c:40:55:b5:e3:71:15:
bf:d8:c5:ea:41:70:a9:86:84:6c:f9:43:67:ff:cb:a7:64:15:
e0:39:cb:8a:3d:a8:6e:d3:da:3d:32:30:17:1b:8b:03:55:59:
44:54:e8:45:cc:52:7a:a3:32:54:57:12:49:fd:4c:16:00:91:
c7:d9:e7:12:c8:ce:88:9b:c1:9d:ec:3c:d1:9a:24:1e:88:63:
13:8b:c9:66:5b:ab:e1:4d:20:42:ab:88:7e:a0:3f:76:3f:17:
bf:2e:14:28:b1:02:e1:bd:94:82:78:2c:af:b6:7f:94:3c:a7:
45:c1:99:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO381WOUotxqoVuQkK2afMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjYwNTE2MTAwMTA1WhcNMjYwNTE3MTAwMTA1WjAzMTEwLwYDVQQD
EyhiNThkNTI2MDE4ODliMTg3OTlmY2Y4MTFmMjUwZTAzNTJhZjJlN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aK7GXNAUKjnVcM24SxOitml2Iqc
3quTYPe0CfmbdOYh8qFR87zy5av664RsN5nrRE7wDwWHm14dWbBuLDoTHkdIy/3T
No45nNMxNh0ojIKX1f/nC2HkwJsYTDxaZ4ErATridQSwgQgaRarXLgNFden5I8xr
VLenVDw2ZDisgLYdtTSKycgCr0Cm+o/p8fdjoahDsfUh8VPoRg3sN8xM4n6YX6ss
QEWqUCLOOKSg5dbUzIN+oiVeC5Rd9UTiNSH+awjF1RWSVDJ7u2RL850QVBS204zA
iGm7aBZ9fINcPcQm2pqd03644Q4lsUlcS+8pe5XytYgo0CTnFJmO3odNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWNUmAYibGHmfz4EfJQ4DUq8ufOMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo054F1Rn
yHrjMZJRoYK/gKkDRKXSH1wzPmt80vSde2GD8/6dLa/LjbqchHq5qHv58tyAsKtX
qc+BEpx6+/fwDCG3zzyz/rwj1eImM47Gc//fuefLomaultVAdxcqIxsxRXLOZl7L
T4WRBE8FC/LEa/Mo+ycRZez+rB0VrwUarXz/UIUj+xsBQzpsQFW143EVv9jF6kFw
qYaEbPlDZ//Lp2QV4DnLij2obtPaPTIwFxuLA1VZRFToRcxSeqMyVFcSSf1MFgCR
x9nnEsjOiJvBnew80ZokHohjE4vJZlur4U0gQquIfqA/dj8Xvy4UKLEC4b2Ugngs
r7Z/lDynRcGZgQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:35 2026 by rpki-client