Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: tFP61HqLQg/PKi1g4qznOvqMnxcP/cFvuFI5/xthASU=
Subject key identifier: DA:24:56:39:2B:56:49:C2:61:B1:4C:5D:70:57:C9:7B:1A:A8:D2:C3
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019EC03616F9117676E5194BF6373E6F5303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1158
Signing time: Sat 13 Jun 2026 09:00:30 +0000
Manifest this update: Sat 13 Jun 2026 09:00:30 +0000
Manifest next update: Sun 14 Jun 2026 09:00:30 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: dbrjg7sKIrGgl0l95GgYtsyiRwSh0iNrNy6wu72FKZU=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:16:f9:11:76:76:e5:19:4b:f6:37:3e:6f:53:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jun 13 09:00:30 2026 GMT
Not After : Jun 14 09:00:30 2026 GMT
Subject: CN=da2456392b5649c261b14c5d7057c97b1aa8d2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:55:68:98:d3:3f:51:5e:40:e0:12:6b:5a:
81:87:af:32:df:4a:58:fe:40:3f:c6:26:c8:c7:96:
84:35:6f:af:91:2b:6d:de:a5:95:bf:02:ea:18:24:
13:66:da:d8:90:fb:0a:4f:1b:73:58:cd:ff:80:5a:
fc:e6:e6:26:16:46:fa:65:eb:f7:b3:2b:5d:a2:df:
16:33:e5:05:bb:4b:61:26:7a:e8:b4:bc:44:90:f1:
ca:4e:25:73:51:ff:22:a6:9d:68:4c:55:ea:96:f7:
da:3c:ee:d6:01:30:a1:0b:69:22:8d:10:c5:3f:a4:
be:73:02:cf:8e:25:de:4f:92:72:40:17:52:94:bc:
d4:16:ea:fb:b6:a7:7a:ec:a5:5d:82:b9:8d:84:94:
bf:45:c9:a5:90:c2:ef:4e:94:0d:16:97:11:a1:b0:
3b:91:67:21:f1:52:67:16:2c:c5:f2:ef:7a:07:64:
2d:74:4c:6b:d2:6f:1c:c5:fe:c9:84:da:05:fc:7c:
6f:ab:a2:d7:9e:88:77:05:48:c7:6d:a4:68:50:5e:
74:e0:23:6a:ed:bd:db:7b:1c:e8:2a:27:f1:4d:19:
91:0a:1b:12:30:cb:83:2d:f5:d5:a7:ba:ad:5f:af:
6b:11:81:04:ba:2b:79:51:91:ce:9b:f4:2e:ed:d1:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:56:39:2B:56:49:C2:61:B1:4C:5D:70:57:C9:7B:1A:A8:D2:C3
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:54:65:d1:78:56:88:fb:3c:bb:9d:53:b8:b5:29:53:6b:86:
b5:d6:b5:90:1d:6a:dd:ea:63:00:cf:5b:c5:cc:41:c3:62:90:
b2:31:6a:b7:0e:40:cd:f2:b7:da:f3:fc:e8:a3:1b:ef:4c:c4:
f6:65:08:fe:0c:f3:21:77:ed:e6:d6:16:73:ba:82:10:25:2d:
b2:7b:3c:f1:b6:c3:47:0b:58:d1:47:5e:c6:25:9f:cc:05:e6:
2f:c1:f5:37:0f:35:b7:9f:30:14:90:9c:ab:d9:f6:fa:1d:54:
c5:d2:66:dd:e3:df:2d:21:53:13:b9:72:8c:dd:b9:29:ad:66:
71:b9:e3:b5:cd:1d:fa:91:d6:88:da:13:43:6e:a8:30:65:8f:
f7:02:23:b8:3f:73:4e:23:b0:00:bd:03:cf:d7:ef:7e:6a:00:
8c:49:92:44:56:75:79:f4:f1:e3:7e:17:f0:b2:3c:62:a9:f0:
d3:68:f3:b1:81:73:7b:0f:bf:34:11:5b:61:7a:a9:55:be:92:
9b:86:5c:bd:9e:4e:43:d7:0b:1d:8a:99:ea:34:08:68:5d:ef:
19:bf:84:a7:a1:d8:8c:91:fe:92:09:3a:42:67:f2:6e:6d:f9:
ed:c0:13:6d:cb:28:c2:8b:6e:41:e7:db:b1:cb:35:66:c6:9c:
e3:68:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:59 2026 by rpki-client