Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: w9+O/dg+a5Oz4IrKP5M/seXG3wcYNo/K/BtiizTfcOw=
Subject key identifier: 92:75:31:11:4D:D3:08:C2:87:7B:FE:51:49:07:ED:7E:11:D4:B4:A7
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01A0D8DE958849466C4308BDDD31976CB490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0946
Signing time: Fri 25 Sep 2026 14:01:00 +0000
Manifest this update: Fri 25 Sep 2026 14:01:00 +0000
Manifest next update: Sat 26 Sep 2026 14:01:00 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: BMlAI6IZJzBtXTl/E1xCCkURRMu9Dgy1NgHv40bhe7Q=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:95:88:49:46:6c:43:08:bd:dd:31:97:6c:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Sep 25 14:01:00 2026 GMT
Not After : Sep 26 14:01:00 2026 GMT
Subject: CN=927531114dd308c2877bfe514907ed7e11d4b4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:c6:8b:b2:7d:9c:31:37:97:f9:70:89:a8:
28:47:77:37:45:7e:78:d7:d6:f3:38:6d:e2:70:08:
33:b2:e7:a1:46:59:6f:6f:c1:15:32:7d:ec:19:39:
8d:7b:d2:92:45:a7:e9:c3:5b:d4:34:f2:e7:de:a5:
db:ec:ef:c5:05:a2:e7:c8:39:6c:a4:18:49:ae:6e:
10:39:a7:37:a2:a1:9b:c2:25:fa:d2:3d:ad:a1:73:
7f:69:4b:8c:3e:f3:f6:3d:20:4e:f6:2c:fb:29:33:
6c:27:f5:c4:71:22:4d:5d:9e:6b:50:c0:2d:f6:6a:
e6:cb:7a:14:0e:b2:28:ef:51:7d:dd:f4:aa:5d:cd:
28:c8:80:71:22:8b:be:f8:f7:7a:39:b9:84:9a:88:
7d:3a:d6:14:25:36:0a:b6:d3:be:4f:0e:2f:38:c2:
19:6a:d9:e5:0d:9c:60:74:5d:e3:41:eb:ae:dc:e5:
e5:24:dd:f0:c3:14:30:09:43:85:8e:2f:b0:be:95:
f6:4f:e7:05:be:7a:82:1d:00:95:6a:5f:47:37:c0:
42:42:75:85:8c:ca:77:83:70:35:90:18:35:94:57:
22:02:0c:32:12:6a:fa:3c:80:e2:e2:b4:68:51:1f:
9a:25:2d:e7:8e:e1:2c:67:3b:34:8d:4f:58:6d:06:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:31:11:4D:D3:08:C2:87:7B:FE:51:49:07:ED:7E:11:D4:B4:A7
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:c4:c6:66:0b:43:9d:20:a7:0c:0c:4f:56:bf:ed:6a:ad:
7f:30:ea:e7:06:bc:b9:43:fa:d8:4b:22:02:21:85:6e:40:db:
74:03:ad:ad:8d:21:14:ac:cb:31:6a:6e:36:99:bb:58:0d:88:
bf:a6:b0:d0:31:46:0e:68:3d:c9:c8:76:33:1e:87:3a:ec:3e:
37:d9:64:03:20:20:2d:9a:f2:7b:88:82:45:cb:0a:78:69:87:
d8:0d:5b:9c:11:45:02:0a:af:ac:96:9d:52:08:60:dc:69:64:
5c:05:1a:1f:c7:3d:17:d2:57:3b:3e:4c:2c:63:f1:f6:14:16:
95:4b:9d:a6:70:04:2c:0f:e2:ac:71:f7:1c:ac:c8:c2:f3:3e:
cf:0b:87:f5:f2:3a:7a:f0:1a:13:c3:bf:b8:89:62:b7:f2:9f:
f1:35:c8:3b:6b:a7:a4:28:04:81:81:73:58:9f:7a:ae:d8:1a:
58:c9:f0:b6:75:8d:d6:a0:ef:d5:c2:6b:f1:a6:c0:c5:65:a3:
19:17:9a:28:5b:9c:6d:76:dc:cc:d8:ea:43:1c:65:6f:b2:a0:
e0:03:35:53:36:dd:7b:be:e0:eb:b1:d5:27:29:da:80:f1:63:
4a:9a:c5:d8:81:9e:64:0e:47:cc:ac:2f:ac:25:68:dd:54:a4:
e8:fa:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:24:01 2026 by rpki-client