Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: njNV6tG9X91ei38j6yrF89yaRa7LiAQAsAjaTYRZK7s=
Subject key identifier: AD:89:06:A4:B2:77:AF:F3:81:0B:08:AD:48:91:85:AD:20:7C:2A:18
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019FA0E0A96BF55820840ED72CDD0DE55633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 0202
Signing time: Mon 27 Jul 2026 00:01:45 +0000
Manifest this update: Mon 27 Jul 2026 00:01:45 +0000
Manifest next update: Tue 28 Jul 2026 00:01:45 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: zFT9hg0iU2g3fFoDQbB/7AvbEKtuq7H7timAH124E7U=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a9:6b:f5:58:20:84:0e:d7:2c:dd:0d:e5:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Jul 27 00:01:45 2026 GMT
Not After : Jul 28 00:01:45 2026 GMT
Subject: CN=ad8906a4b277aff3810b08ad489185ad207c2a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:6a:05:73:5f:fd:19:8f:3b:46:b0:d5:44:
60:21:f2:cc:20:5e:49:0e:95:38:40:bc:80:45:f3:
b0:e2:cf:76:57:53:1f:8c:04:3c:da:ad:69:64:f2:
24:bf:f1:f1:06:90:6a:4c:d8:41:15:b1:e5:29:ff:
90:03:3c:5d:63:91:74:c4:82:9f:32:6a:b0:21:84:
bc:83:b4:b8:d7:c8:55:0f:22:6e:c0:b1:40:a4:be:
bc:c6:d7:9f:fb:5f:18:96:1a:bb:d3:2e:b6:7f:06:
f9:f1:c2:cf:7f:87:20:d2:33:d2:0b:70:75:bb:d2:
ac:b2:19:60:6d:b3:e1:eb:bb:a0:4d:57:f7:e0:af:
26:6b:c1:64:ec:a7:56:5b:ac:9d:b4:02:7d:de:3e:
7d:a2:2d:b5:54:a2:14:0b:9e:ca:2c:3a:bf:44:eb:
e0:b3:85:eb:0c:36:d0:6e:c1:de:bd:e0:fe:0b:1f:
cc:ee:35:9c:33:83:3d:45:e0:95:cb:6a:3f:9e:8c:
42:01:50:a5:12:2e:20:44:08:12:20:ea:9c:12:26:
9a:05:84:89:6b:82:34:b7:7c:27:d1:4d:c0:ac:b5:
6f:bd:8c:e6:ce:6b:d5:14:36:b8:dc:76:4e:95:cc:
9d:77:4a:5e:39:8b:07:cf:f0:cc:56:af:51:60:10:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:06:A4:B2:77:AF:F3:81:0B:08:AD:48:91:85:AD:20:7C:2A:18
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:81:48:43:9c:90:18:f8:dc:72:6b:fc:43:ed:ec:cc:16:
61:4c:45:9a:36:d2:2a:3c:8d:5e:4b:a3:da:aa:a0:15:4b:b5:
83:7f:11:80:2a:fb:10:c5:bb:52:47:37:63:cb:51:34:52:00:
e9:d9:11:bd:ad:d7:63:0e:ff:02:fc:d0:e8:cb:70:36:ba:20:
32:db:9d:8e:bc:18:56:08:4a:ad:0a:27:fa:f1:71:fc:17:20:
fa:a1:8c:eb:f9:13:ed:15:d0:b0:1a:be:b1:a9:d5:b7:33:fe:
d0:46:9c:85:a5:c7:ca:12:0d:b5:ea:2e:b5:89:11:0e:e0:c9:
2a:90:94:50:72:0c:f3:4d:be:4f:d3:9a:6d:02:bf:81:fd:6b:
d3:3c:a2:66:bf:f4:e6:6f:33:05:3e:47:06:71:79:ec:79:d2:
45:c7:a2:1b:6e:80:fb:87:d4:92:4e:a4:4c:81:f4:40:4f:c8:
b8:f3:ff:6a:fc:99:82:cb:a9:62:ae:4d:f6:87:77:b8:21:65:
0b:17:de:90:a9:70:3d:80:62:7b:9d:0c:52:85:42:c5:54:1d:
85:14:90:4d:d8:46:6e:e7:73:9d:f9:72:53:a0:28:54:39:e6:
ed:9d:43:3a:43:65:37:f0:6e:62:25:ce:f7:79:50:5a:c0:f2:
35:4e:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:07:26 2026 by rpki-client