Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: uREVHtegQXfU8J6BjAAtGg/NW4wP/3DJTB74Htgk7Eg=
Subject key identifier: 57:66:34:A4:2F:76:50:11:86:C6:A7:72:1C:D2:4F:FA:00:38:2A:03
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019DCD874CF20D1E72EDEE47070261070F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 0110
Signing time: Mon 27 Apr 2026 06:01:29 +0000
Manifest this update: Mon 27 Apr 2026 06:01:29 +0000
Manifest next update: Tue 28 Apr 2026 06:01:29 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: Zg7mYkUtw9j8Bkhb6/HW/LyYQI3QyxerlXI+2MZo11I=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:4c:f2:0d:1e:72:ed:ee:47:07:02:61:07:0f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Apr 27 06:01:29 2026 GMT
Not After : Apr 28 06:01:29 2026 GMT
Subject: CN=576634a42f76501186c6a7721cd24ffa00382a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:44:4a:57:da:da:0f:eb:4a:5a:1b:08:d5:
98:f2:4e:5c:b6:fd:98:51:21:69:91:b1:3f:40:e0:
56:83:e5:26:72:b8:26:20:49:be:03:2c:6f:4a:09:
31:a1:44:15:da:97:76:26:74:fa:bf:78:c1:53:47:
20:ec:99:b1:a5:17:55:bf:5e:32:b0:1e:04:2c:24:
51:76:1d:fb:63:14:ef:9b:d6:f0:51:c6:16:b9:4e:
79:bb:4e:52:b1:b7:a7:11:4e:bf:cd:ea:9e:2c:65:
12:28:97:77:65:73:75:34:b8:c3:4f:be:03:b7:c0:
c3:40:b1:29:0c:9e:c5:78:3f:3f:d9:6c:6c:45:a0:
ce:0b:07:b4:d5:f5:67:59:11:d7:8d:7e:20:12:0a:
46:ce:da:4c:9f:2c:81:b5:37:83:33:da:fa:0e:d3:
9c:d8:12:34:37:4a:1a:da:1f:a8:55:11:d0:b5:62:
d6:83:ba:5a:54:96:49:f7:5d:7b:27:8a:18:4a:18:
ab:b9:be:b3:f3:a8:a2:97:85:d5:e0:fc:8a:e1:f3:
8e:20:1d:6b:4a:2b:b8:1f:e6:f4:18:0c:c3:03:57:
1c:6b:3b:e8:b9:9c:91:7e:69:29:3c:ef:35:a7:94:
76:21:03:91:66:d8:31:62:8a:ef:0d:e9:fe:4d:b1:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:34:A4:2F:76:50:11:86:C6:A7:72:1C:D2:4F:FA:00:38:2A:03
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:bc:ae:f3:1c:dd:a2:b2:ce:fb:7e:b1:58:8e:e5:ee:12:
e8:c5:9a:cf:71:b3:c3:3b:77:67:bc:a1:fd:da:f0:62:79:96:
2c:24:96:36:77:39:bb:38:2d:54:4a:80:57:bb:7a:a7:a5:9c:
0b:87:53:5b:4c:26:50:42:58:fe:37:6a:45:fe:7b:98:96:fc:
60:a6:1f:23:d0:55:14:24:2f:ae:20:d6:17:d8:79:c6:f4:d6:
21:c5:60:d0:e1:a4:61:d8:4b:ef:4b:67:25:fd:2d:d6:35:fd:
fd:34:b6:36:3b:00:a7:41:62:52:be:da:dd:25:39:9f:0e:ab:
ee:b4:0b:07:5e:2e:7c:d0:a2:df:70:50:24:cc:97:a9:94:8b:
b1:44:86:a4:31:c2:9c:80:c7:a7:56:fe:cd:50:d9:69:4a:ee:
df:e2:24:71:54:c0:92:f5:bb:d7:76:25:25:9f:ca:56:2f:3a:
b8:10:6a:3b:a8:94:f9:bf:ed:35:78:52:2f:f7:4c:f6:95:83:
b3:48:3b:e6:30:e7:79:ef:89:36:86:77:65:2e:43:59:f5:37:
99:20:f8:6e:fc:ae:38:14:4c:fd:17:38:b3:50:11:1c:e1:31:
42:ff:c1:55:d9:59:4e:7f:7f:cc:51:ba:30:a9:ef:b4:7d:8f:
c0:6e:74:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh0zyDR5y7e5HBwJhBw+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDg2NDdlZmI4ODIxMGYwMTZiNjc1NmQzNzY2ZTkyOTU5
NDRhYTMwHhcNMjYwNDI3MDYwMTI5WhcNMjYwNDI4MDYwMTI5WjAzMTEwLwYDVQQD
Eyg1NzY2MzRhNDJmNzY1MDExODZjNmE3NzIxY2QyNGZmYTAwMzgyYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJFESlfa2g/rSlobCNWY8k5ctv2Y
USFpkbE/QOBWg+UmcrgmIEm+AyxvSgkxoUQV2pd2JnT6v3jBU0cg7JmxpRdVv14y
sB4ELCRRdh37YxTvm9bwUcYWuU55u05SsbenEU6/zeqeLGUSKJd3ZXN1NLjDT74D
t8DDQLEpDJ7FeD8/2WxsRaDOCwe01fVnWRHXjX4gEgpGztpMnyyBtTeDM9r6DtOc
2BI0N0oa2h+oVRHQtWLWg7paVJZJ9117J4oYShirub6z86iil4XV4PyK4fOOIB1r
Siu4H+b0GAzDA1ccazvouZyRfmkpPO81p5R2IQORZtgxYorvDen+TbEj0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdmNKQvdlARhsanchzST/oAOCoDMB8GA1UdIwQY
MBaAFNkIZH77iCEPAWtnVtN2bpKVlEqjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFoa2Z2dUlJUThCYTJkVzAzWnVrcFdVU3FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMTlkNWUtMGQ1Yi00MjMxLWJkYWQt
NDMyNjVlZjk1ZDkyLzEvMlFoa2Z2dUlJUThCYTJkVzAzWnVrcFdVU3FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMTlkNWUtMGQ1Yi00MjMxLWJkYWQtNDMyNjVlZjk1ZDky
LzEvMlFoa2Z2dUlJUThCYTJkVzAzWnVrcFdVU3FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6u8rvMc
3aKyzvt+sViO5e4S6MWaz3Gzwzt3Z7yh/drwYnmWLCSWNnc5uzgtVEqAV7t6p6Wc
C4dTW0wmUEJY/jdqRf57mJb8YKYfI9BVFCQvriDWF9h5xvTWIcVg0OGkYdhL70tn
Jf0t1jX9/TS2NjsAp0FiUr7a3SU5nw6r7rQLB14ufNCi33BQJMyXqZSLsUSGpDHC
nIDHp1b+zVDZaUru3+IkcVTAkvW713YlJZ/KVi86uBBqO6iU+b/tNXhSL/dM9pWD
s0g75jDnee+JNoZ3ZS5DWfU3mSD4bvyuOBRM/Rc4s1ARHOExQv/BVdlZTn9/zFG6
MKnvtH2PwG50fA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:50 2026 by rpki-client