Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: ip7K4y5HxXHFOBtJ3pbEk0JhVKkEt4X29FqJfDnWUAI=
Subject key identifier: 9A:95:2E:D2:B5:9D:43:F3:E2:E1:5A:04:D8:CD:59:CD:D3:3F:98:9B
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 01A08A8D56A76EA68E373D8F83581526A1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 027B
Signing time: Thu 10 Sep 2026 09:01:53 +0000
Manifest this update: Thu 10 Sep 2026 09:01:53 +0000
Manifest next update: Fri 11 Sep 2026 09:01:53 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: vg1NHfksj4ZO0dVHj9Jzbdly+nUOnMF9eaLqgeZx/6E=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:56:a7:6e:a6:8e:37:3d:8f:83:58:15:26:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Sep 10 09:01:53 2026 GMT
Not After : Sep 11 09:01:53 2026 GMT
Subject: CN=9a952ed2b59d43f3e2e15a04d8cd59cdd33f989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:70:27:6a:c5:8d:6e:ba:de:06:b5:38:e6:
05:bb:f7:0a:6a:c0:02:eb:db:e0:40:b8:d5:13:90:
ba:fd:f8:29:60:6c:5c:c8:31:ef:c7:40:e6:75:c6:
36:9e:4b:ac:2d:66:6a:d4:59:ae:c1:ad:07:df:90:
d0:e3:51:94:7d:d5:59:17:a4:ca:f6:d0:6a:f0:b3:
73:e2:d2:e7:f3:be:12:e8:3c:95:66:d8:f7:37:23:
54:22:d1:2e:1b:a5:0b:a2:f0:d5:2d:b1:85:23:9e:
6a:a9:85:f8:38:64:32:05:b4:ca:14:5d:b5:2e:13:
4f:53:28:12:5d:ff:80:e8:1f:e9:72:ce:b7:52:2d:
f4:d6:0f:5e:0b:8c:40:a1:d5:33:b9:f0:e9:f6:a7:
60:7a:49:fa:ac:19:de:18:05:07:d8:e0:92:f6:32:
1e:5a:20:dc:54:55:53:17:0f:07:27:e8:48:fd:e4:
a5:22:ce:23:d3:a2:af:e4:4c:89:e8:16:a3:d3:56:
d1:4e:bd:38:40:ff:14:c7:19:50:70:6d:d8:b5:43:
7f:b2:32:62:5e:19:e8:82:d0:55:75:d3:a2:59:a4:
ed:f3:c7:17:68:79:5b:13:df:ca:53:63:e2:1e:51:
4d:e0:fd:0f:b5:e9:8d:45:26:69:e9:6d:35:5c:7d:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:2E:D2:B5:9D:43:F3:E2:E1:5A:04:D8:CD:59:CD:D3:3F:98:9B
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ab:85:8d:f4:85:4c:52:f1:a7:ea:50:09:18:9d:1b:7a:67:
92:b5:01:ef:e5:66:ed:19:e6:31:a8:05:65:fc:4b:87:07:96:
14:94:c8:10:0f:1c:03:d8:fe:86:07:78:a0:f6:a8:07:bf:ca:
8a:db:e3:e6:7d:5a:17:b0:e9:13:4d:fb:52:8b:ad:44:01:bb:
d2:5c:9e:3e:e4:bc:b4:51:3d:11:50:98:cd:30:cd:42:4a:fe:
25:7d:3f:4a:16:52:25:00:a1:0d:22:0d:e8:b9:06:7c:2d:76:
98:4e:51:b4:67:35:37:2b:83:19:0b:4a:ca:64:9b:02:97:5e:
97:3c:73:49:67:08:e0:61:e4:e1:68:72:2e:ea:90:09:b7:8c:
88:fd:91:89:0a:53:d1:c8:53:3f:a7:39:62:e3:88:57:fb:3f:
50:cd:ea:4a:0a:ca:63:05:e7:72:e2:5c:68:03:66:e9:94:be:
0c:ea:be:33:a9:9c:31:4d:21:8e:77:db:e6:6d:cd:fe:4e:05:
26:84:04:30:a0:9f:d9:46:df:82:d3:ad:0b:c0:ab:5e:30:80:
a2:44:18:ca:fe:18:bf:a7:e4:96:0b:9d:8a:10:5f:85:56:f0:
b6:3a:fa:82:2f:d4:6f:16:f1:06:d1:82:c5:8d:25:48:34:a4:
c2:d5:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:10:42 2026 by rpki-client