Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: T1/PocEFoTjZ4J3y1LyyW7xd9ANuI3XQdGWNNA82nkM=
Subject key identifier: 51:9C:35:42:39:EB:BF:85:62:52:F0:17:70:F3:41:71:A3:78:83:13
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019EB73354D9EEAD9A03B0AF1AD32B49D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 0189
Signing time: Thu 11 Jun 2026 15:00:55 +0000
Manifest this update: Thu 11 Jun 2026 15:00:55 +0000
Manifest next update: Fri 12 Jun 2026 15:00:55 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: RSBLka5pgrXvtF3hEjcmzwgNi6M2mhVoHTAXcT80TGY=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:54:d9:ee:ad:9a:03:b0:af:1a:d3:2b:49:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Jun 11 15:00:55 2026 GMT
Not After : Jun 12 15:00:55 2026 GMT
Subject: CN=519c354239ebbf856252f01770f34171a3788313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:9f:45:da:b8:9a:02:20:fc:90:1d:20:84:
56:0d:85:4a:6b:5d:6f:5e:6f:2b:df:a3:62:bb:fe:
50:fb:b3:81:69:c3:bd:f1:ef:e1:bf:45:bb:18:e9:
64:e7:96:69:b4:9c:1c:3a:28:b7:57:f5:30:bf:15:
96:80:6f:ca:81:77:1d:c7:0e:c6:da:6c:27:83:77:
92:74:f4:f0:85:04:e2:63:3c:4a:b2:fb:7f:16:4c:
e7:21:13:60:ec:b0:c0:e2:66:64:68:42:d5:19:86:
64:5f:12:1d:22:59:ee:dc:db:e2:34:bc:80:a8:c0:
58:13:9c:15:d0:bf:63:9c:7f:19:c1:de:84:bc:17:
7c:9c:8b:c7:96:56:de:14:5b:aa:5e:14:81:64:68:
e9:c1:c5:5f:af:e8:b6:63:9c:68:24:a9:73:75:b6:
52:1e:10:61:85:c3:7d:c8:23:c2:39:7b:5d:7e:c6:
91:6d:c8:66:9e:87:41:fb:78:7e:93:bf:8a:9f:f5:
f7:b3:24:1b:fc:f6:93:33:ba:cd:a8:98:10:45:33:
a2:65:c6:bb:56:15:d2:2a:87:cb:cf:1a:a0:3b:44:
82:c7:90:2d:ce:f1:f3:2b:3a:c0:71:3a:63:62:d0:
23:77:42:fb:53:13:37:16:79:b7:93:ed:97:1a:b4:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9C:35:42:39:EB:BF:85:62:52:F0:17:70:F3:41:71:A3:78:83:13
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8b:4a:3c:a7:ba:a3:1c:fe:76:bc:98:dd:ba:8b:7d:1f:54:
03:72:0c:0d:34:30:9f:4e:0b:5e:42:24:9e:91:5d:e3:75:50:
07:65:d9:2f:df:ea:db:6e:6a:d6:81:42:94:6b:59:11:22:de:
63:8b:8c:b3:c3:41:08:55:87:11:22:1e:56:d6:f6:83:5e:c0:
89:37:e8:70:48:76:cc:c2:a1:e3:0f:ed:1d:51:cb:a0:fa:6c:
06:26:27:78:a1:57:97:81:8f:1b:f0:4a:ed:ed:7b:ee:0a:08:
94:e9:4b:07:7f:53:5a:c8:37:fe:7e:e3:41:fe:8c:b9:eb:94:
e0:38:39:25:1e:54:b4:34:3a:09:e1:d8:7a:c2:6f:63:14:8e:
91:d4:b7:17:f5:c1:e0:e5:71:69:88:f6:96:87:28:05:de:e4:
9a:b5:20:76:3c:ad:8b:2b:e6:42:26:9a:70:6c:31:9f:80:3b:
2d:5b:cc:9b:82:49:13:c3:5b:24:b7:5c:a3:a2:23:e2:0b:ad:
53:fd:30:17:30:a0:86:70:18:b5:41:bf:16:2d:25:86:3a:63:
e3:35:4f:e6:b8:86:9c:bf:af:a5:6f:30:96:9a:07:0b:c6:6a:
db:8e:5d:d9:0d:e9:5d:b4:c3:0f:e2:42:38:11:bf:05:c1:3b:
f2:e3:c8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:46 2026 by rpki-client