Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: oPM5GL7uew18HegVaqfVxmW0/u/aPMMMHyzyKnpR+j0=
Subject key identifier: 59:9A:48:5A:B6:50:4B:61:45:20:69:33:57:85:9C:A5:A4:4F:BF:67
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 01A17FCFEB74FFCCFE34288AC0CAE96CDE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 02FA
Signing time: Wed 28 Oct 2026 00:01:34 +0000
Manifest this update: Wed 28 Oct 2026 00:01:34 +0000
Manifest next update: Thu 29 Oct 2026 00:01:34 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: WQflHPJbFC3vZzzanx33Cto11qGhHQ7D5NGHtpnDcrU=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:eb:74:ff:cc:fe:34:28:8a:c0:ca:e9:6c:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Oct 28 00:01:34 2026 GMT
Not After : Oct 29 00:01:34 2026 GMT
Subject: CN=599a485ab6504b614520693357859ca5a44fbf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:a9:22:a5:70:86:b7:1b:35:08:81:f7:43:
46:eb:3f:06:db:24:ba:98:03:5c:6c:72:26:25:e7:
e3:43:cc:6f:5c:dd:61:a0:5a:26:f8:f0:e4:fa:17:
29:58:90:b4:34:21:3c:00:a6:f2:2b:48:fa:78:72:
50:0f:51:7e:de:c8:79:55:c3:79:e2:f6:b5:63:1c:
cd:06:c4:c8:b2:64:9e:a4:b7:fe:9d:37:43:96:96:
8b:7c:34:21:21:60:a7:ac:03:93:4e:40:a1:b6:59:
c0:06:2a:8e:a6:2b:24:3a:58:66:ca:a5:d4:f5:ba:
da:ce:6d:39:3a:75:6d:99:fc:23:de:8a:d8:f3:d3:
3e:ba:69:92:25:9e:17:68:3b:b5:6e:51:25:25:f0:
48:52:00:c7:ba:5f:2a:db:e6:eb:90:92:48:79:d2:
0b:f0:6a:8d:2b:4e:c0:58:73:e9:03:98:25:53:f9:
83:c5:c1:62:02:9a:05:af:0c:e9:79:16:3c:5c:fc:
80:72:16:ff:dc:46:c3:e2:dd:26:20:77:21:00:65:
a6:44:56:73:32:56:db:68:ba:04:5c:22:4d:bc:0e:
29:37:ea:41:c6:d1:30:9a:4f:da:6a:21:1c:63:ef:
2a:70:3d:a8:78:b1:6c:9e:a0:65:9f:45:0c:b8:e3:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:48:5A:B6:50:4B:61:45:20:69:33:57:85:9C:A5:A4:4F:BF:67
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:8f:8d:b0:f3:ad:cb:d6:2b:ae:99:b7:2c:72:7b:fa:30:
0d:48:c4:95:9b:6e:92:96:24:f5:bb:ac:4f:61:e6:54:2a:b3:
f2:e1:24:8b:31:16:c1:cb:d0:63:7d:13:4a:41:af:f0:88:72:
26:7e:02:aa:27:4e:c3:3f:e4:7e:cc:f8:43:b2:82:57:da:67:
34:95:65:f0:ed:d8:65:b0:8f:87:b1:ed:1f:74:e0:6b:99:ff:
b3:45:c4:0f:82:27:9e:a7:d3:7a:ef:d7:dd:70:e3:ff:2a:d0:
e9:95:49:be:73:45:63:95:64:6d:24:c4:fc:a5:37:89:47:9c:
ce:77:4d:b8:54:31:eb:07:2e:09:ab:ab:e4:f9:75:92:4b:dd:
ba:92:3e:e4:7c:95:ca:de:ea:b0:bc:06:5a:71:eb:15:61:86:
59:09:33:e7:c2:a5:37:60:e9:89:19:59:a5:d5:e1:c2:b0:c0:
41:69:30:c7:33:cf:2e:b5:81:4e:47:39:67:50:e4:e2:f1:18:
0d:9e:89:48:6c:2c:5c:0b:d9:5c:91:4f:f7:9c:76:28:95:1d:
fa:fc:2c:2d:9f:70:16:89:5d:c8:da:de:4d:36:5a:e6:21:03:
db:d1:09:30:1a:02:a4:e8:13:53:d6:13:f3:45:1f:24:f3:65:
ca:7e:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:29 2026 by rpki-client