Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: BbTCusrdyiA+x9Iv9vDJ4H0t77tOSSCHL9Mjlh2o0bQ=
Subject key identifier: 9F:97:7D:9E:66:6D:0E:38:F5:2E:08:6A:0E:17:64:F0:B0:19:55:D4
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019FA9E2F290BBBFC024F8D46A998CDE5045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 11D1
Signing time: Tue 28 Jul 2026 18:00:50 +0000
Manifest this update: Tue 28 Jul 2026 18:00:50 +0000
Manifest next update: Wed 29 Jul 2026 18:00:50 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: KjnDxU2QuPn8/152Bou5axpjY3ZUwo/iKqrD4JpYpJs=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f2:90:bb:bf:c0:24:f8:d4:6a:99:8c:de:50:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jul 28 18:00:50 2026 GMT
Not After : Jul 29 18:00:50 2026 GMT
Subject: CN=9f977d9e666d0e38f52e086a0e1764f0b01955d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:f9:58:7b:9e:91:82:a6:9b:b7:f2:bb:60:
d5:19:34:52:db:65:e8:a7:76:02:fc:4c:2d:9a:70:
96:a6:64:ba:6b:a3:fc:44:12:9c:c3:47:d4:8e:84:
37:8a:ab:ce:ab:81:5a:26:40:b7:81:7f:dd:46:ee:
a5:13:1f:d3:0f:6e:d8:9c:c4:ef:c9:3d:71:dc:34:
74:bb:e8:f6:d7:a0:5b:f7:31:34:a4:fc:c9:3e:26:
d1:b2:59:f9:c2:ee:eb:86:2d:49:ed:39:5f:a9:db:
b1:ed:e8:0a:86:74:58:8f:6f:5c:c6:37:83:85:8a:
5a:1a:7c:e4:3e:91:3e:76:27:77:19:27:6a:32:37:
6c:af:3d:ec:1b:21:17:6b:f5:76:23:c7:24:e3:e3:
fb:c5:59:11:77:29:a0:43:f1:57:91:38:f2:a8:a0:
eb:66:0d:92:ff:9c:d2:90:d2:fd:cd:70:b5:8d:27:
08:04:e0:92:14:cb:03:ff:cc:4b:68:5f:4b:57:a3:
03:86:f1:73:df:61:18:c1:f1:48:02:ac:93:25:5b:
ab:68:18:a8:f5:fc:bd:53:e5:27:21:0e:13:23:65:
1e:2d:9e:da:0d:36:83:da:1e:f5:de:4f:6a:ed:36:
5c:c8:fe:08:58:9a:bc:32:0b:30:e6:9d:28:dc:cd:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:7D:9E:66:6D:0E:38:F5:2E:08:6A:0E:17:64:F0:B0:19:55:D4
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2d:6f:5f:13:de:5c:57:ab:f9:97:79:64:ef:cd:0c:fc:fb:
80:95:6f:1b:08:0c:82:69:aa:5d:0c:16:66:d7:cb:0f:ba:6b:
03:97:38:ac:5f:71:32:a9:b8:0e:01:dc:9c:a6:e7:14:68:6c:
5b:3b:85:45:45:d9:b0:67:0f:9f:72:42:8f:9f:bb:b3:e9:ce:
eb:4b:63:be:86:d4:49:61:a6:0c:79:4c:4f:9d:83:58:90:dd:
48:7d:15:6b:12:d2:3d:77:ac:8e:29:e4:e0:cf:27:52:f1:5d:
47:78:a8:52:c6:43:54:72:c4:16:19:f4:f8:0b:43:9c:5c:fe:
16:d3:a3:38:5d:5f:4b:27:e5:79:3a:f7:1d:c2:dc:36:8a:80:
20:10:91:67:c6:de:d9:51:1a:23:06:26:0b:a1:4d:2a:f3:9c:
37:21:0b:3f:51:fe:36:56:a0:0b:1e:9f:f6:f1:4e:62:5a:03:
9e:32:61:ac:f8:e0:17:84:8e:c2:16:ea:b4:5d:34:5e:76:c1:
06:b0:b9:90:5d:c3:e3:f4:10:53:c5:7e:32:eb:af:09:b0:e3:
53:92:2a:a1:b8:18:e0:fc:62:0b:ff:2e:af:3b:96:2a:bb:23:
73:a1:96:bf:90:24:1a:39:f7:2d:03:75:b9:dd:cb:e0:9d:39:
b2:29:90:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4vKQu7/AJPjUapmM3lBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjYwNzI4MTgwMDUwWhcNMjYwNzI5MTgwMDUwWjAzMTEwLwYDVQQD
Eyg5Zjk3N2Q5ZTY2NmQwZTM4ZjUyZTA4NmEwZTE3NjRmMGIwMTk1NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuer5WHuekYKmm7fyu2DVGTRS22Xo
p3YC/EwtmnCWpmS6a6P8RBKcw0fUjoQ3iqvOq4FaJkC3gX/dRu6lEx/TD27YnMTv
yT1x3DR0u+j216Bb9zE0pPzJPibRsln5wu7rhi1J7Tlfqdux7egKhnRYj29cxjeD
hYpaGnzkPpE+did3GSdqMjdsrz3sGyEXa/V2I8ck4+P7xVkRdymgQ/FXkTjyqKDr
Zg2S/5zSkNL9zXC1jScIBOCSFMsD/8xLaF9LV6MDhvFz32EYwfFIAqyTJVuraBio
9fy9U+UnIQ4TI2UeLZ7aDTaD2h713k9q7TZcyP4IWJq8Mgsw5p0o3M2WLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+XfZ5mbQ449S4Iag4XZPCwGVXUMB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOy1vXxPe
XFer+Zd5ZO/NDPz7gJVvGwgMgmmqXQwWZtfLD7prA5c4rF9xMqm4DgHcnKbnFGhs
WzuFRUXZsGcPn3JCj5+7s+nO60tjvobUSWGmDHlMT52DWJDdSH0VaxLSPXesjink
4M8nUvFdR3ioUsZDVHLEFhn0+AtDnFz+FtOjOF1fSyfleTr3HcLcNoqAIBCRZ8be
2VEaIwYmC6FNKvOcNyELP1H+NlagCx6f9vFOYloDnjJhrPjgF4SOwhbqtF00XnbB
BrC5kF3D4/QQU8V+MuuvCbDjU5IqobgY4PxiC/8urzuWKrsjc6GWv5AkGjn3LQN1
ud3L4J05simQkg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:03 2026 by rpki-client