Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: UZKA+HgTMLHWbkstrRzucbvPRbdfOmEY2PGYAZZzmTE=
Subject key identifier: EA:D4:A0:51:49:C9:3A:33:48:55:DF:9D:5B:09:BB:99:D3:DD:26:AF
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 01A13D8136C53FE4B7817D7974B7F496047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 08B2
Signing time: Thu 15 Oct 2026 03:00:40 +0000
Manifest this update: Thu 15 Oct 2026 03:00:40 +0000
Manifest next update: Fri 16 Oct 2026 03:00:40 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: MjohVnt2PuGmytYpNiDY405RkKeBZQ4Qts0jFJIYClg=)
2: 6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa (hash: WXzY4f3u5JQjX40pGEpdB10HXKmkV5vsO5q3+OkfgwM=)
3: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:36:c5:3f:e4:b7:81:7d:79:74:b7:f4:96:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Oct 15 03:00:40 2026 GMT
Not After : Oct 16 03:00:40 2026 GMT
Subject: CN=ead4a05149c93a334855df9d5b09bb99d3dd26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:e7:4b:fa:4b:26:b1:32:a3:97:c9:32:29:
e8:af:3b:17:75:ea:f6:ae:aa:6b:4d:38:2f:49:7e:
41:a4:dc:07:9b:6c:47:1b:de:c7:00:52:dd:a6:a9:
5f:47:36:24:8f:76:d0:e6:a6:63:72:2b:3d:27:ea:
87:6e:33:5e:4f:7e:78:13:4f:27:34:49:a7:78:b5:
0d:d4:bd:e8:0e:35:36:67:58:db:2e:f9:66:63:23:
f8:3d:3d:15:49:79:54:43:d2:7b:e5:6c:39:a0:30:
87:8f:af:5b:6f:b8:44:c2:66:76:be:af:6b:c2:f8:
f8:f1:0c:f8:f3:a3:11:62:35:ab:cd:6b:54:ac:99:
8a:b6:03:5a:14:1b:3d:79:75:8f:15:d4:a1:0f:67:
71:b8:58:21:db:ac:4e:49:43:cd:96:da:2c:02:90:
09:f6:ee:0e:d5:d3:c1:89:ca:1b:e9:6c:49:39:7b:
06:8c:8a:1c:4c:7d:df:11:98:ef:1b:e3:5e:8f:e7:
3e:3a:ce:3e:30:8a:91:bb:b5:92:5f:35:56:eb:cb:
2c:71:78:41:da:91:ad:29:44:04:82:ff:bb:2c:11:
eb:be:45:50:88:ed:d5:b1:c0:84:2a:f5:9b:57:4c:
82:83:c3:5f:a1:8f:25:7c:9e:80:f4:69:2a:39:a6:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:A0:51:49:C9:3A:33:48:55:DF:9D:5B:09:BB:99:D3:DD:26:AF
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:d9:5c:62:8b:e6:11:3d:80:fd:18:0f:bd:4b:d2:94:1c:
19:b1:30:3f:16:fa:42:c8:8b:3a:32:1a:41:83:a5:bf:61:67:
47:5e:a4:09:c1:1e:54:3d:d2:3c:e1:a2:36:65:db:3d:01:c7:
44:27:ae:df:43:0e:9f:13:21:33:90:1c:0f:94:8a:1e:14:aa:
e2:79:a1:b3:2f:b9:26:34:7a:09:43:e6:e1:c6:7d:75:ed:12:
96:33:d4:29:30:ac:d8:18:5c:30:9b:20:2a:a7:ed:fe:91:2a:
67:a5:08:30:39:e1:c9:4e:e3:7f:77:a1:2f:bc:2e:c9:e6:89:
62:59:77:3d:e0:66:a2:af:8b:f2:3d:1b:d9:c4:9c:b5:eb:bc:
90:97:2a:b9:2f:60:8d:9e:77:d6:b9:84:ac:22:6e:bb:74:db:
19:81:d4:4a:d7:f0:87:c5:f8:c9:09:01:e7:b7:7f:31:59:29:
71:3a:24:96:fc:ff:9e:63:7a:2f:6e:19:1f:b5:d5:79:e7:9f:
15:e6:de:59:f6:59:3f:13:b5:29:df:4e:9b:54:5d:64:a8:67:
06:0f:56:ab:28:54:5c:81:a4:7f:71:73:77:ba:87:d7:0b:85:
04:90:5c:0a:50:ed:28:5a:d3:e5:df:9d:33:26:4c:01:dd:9b:
df:e7:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:16 2026 by rpki-client