Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: Xp5WKsz4U16hg4AQu7JbYNwK7gafTMvJtdkJRyrM1ZA=
Subject key identifier: B1:AE:F3:0F:00:91:73:DE:51:11:8A:64:95:93:B3:08:13:C0:9E:C1
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019D9AAB88191C993EEC346CBBC9A42ACFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 10C0
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: lL18IUHe1nZ+kaQE+nUum9DI6nGTxf8fenvi0FKVaU4=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:88:19:1c:99:3e:ec:34:6c:bb:c9:a4:2a:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=b1aef30f009173de51118a649593b30813c09ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:26:ae:a8:2f:0d:3f:3c:77:89:c8:bd:48:
b4:62:16:20:a5:3a:70:4e:65:96:f3:b5:71:03:33:
30:71:4f:01:35:b8:a6:a9:47:4c:18:10:6f:25:af:
5a:e8:bb:bf:9e:e2:74:50:65:58:df:7f:b2:43:bf:
d8:74:5f:d8:7c:0d:d2:b9:54:22:8a:07:d1:b7:9e:
42:38:f1:3b:41:6b:0f:03:ba:c4:14:c9:57:28:b4:
f4:80:7c:99:d2:e2:33:90:40:ba:2d:7c:2c:89:77:
bb:8a:b3:52:b1:81:78:46:07:c9:aa:37:d1:b0:76:
5c:a6:66:1e:83:c8:fa:de:21:f9:1d:af:59:b0:7d:
52:38:3b:de:8b:8a:4d:e4:48:8d:26:0c:bf:7f:f4:
57:29:e0:fe:b7:a0:d2:e1:29:07:3f:c8:b5:38:2f:
9f:a1:16:49:e1:d3:bf:65:85:a0:4d:9e:ea:dc:a4:
54:0c:1e:e8:11:80:13:2e:87:8a:03:e5:4f:b5:5b:
f1:3d:17:82:3a:fe:f9:2c:88:8c:bc:bd:8b:9f:7f:
b6:c3:eb:4b:ee:c8:b4:9d:79:53:36:e5:82:17:48:
cb:0a:6d:12:98:87:96:99:4a:4d:8f:10:a7:0f:b8:
80:91:96:e7:cf:8f:91:a2:10:31:e7:90:b4:32:1c:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:F3:0F:00:91:73:DE:51:11:8A:64:95:93:B3:08:13:C0:9E:C1
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c7:36:9c:42:22:1d:d5:ae:61:db:8f:3e:7f:92:bd:14:79:
d5:93:fd:b0:9b:a1:9d:71:25:01:94:19:d2:31:b6:ad:4a:43:
9c:16:13:27:78:d0:50:88:fd:19:02:fe:c4:7f:7a:d1:33:d6:
ca:9a:5b:a0:6d:db:62:90:ab:c7:8a:2d:0d:72:8d:d1:fd:a5:
b6:88:37:98:60:be:89:69:bf:a0:0a:b1:1a:50:8f:d1:ea:c9:
a0:2d:00:02:24:27:db:df:9f:eb:6b:81:35:d9:ff:31:85:2b:
44:48:a7:be:14:89:c1:83:a7:a4:82:5d:a2:52:0b:4f:bb:00:
47:ee:4f:4a:eb:de:5b:ad:74:ca:1e:23:44:74:06:dc:13:76:
64:f0:a7:94:16:cf:4c:00:ba:14:72:95:bc:16:12:19:36:fe:
0c:f1:b9:37:a4:56:8a:cc:30:37:b6:cc:a8:92:2a:25:77:52:
66:f2:15:70:3f:ec:40:03:41:cc:e8:43:1b:d1:fa:f1:a9:59:
86:fe:cb:65:0e:39:17:3e:e9:e2:96:89:4f:44:2d:ef:61:81:
8f:3b:1c:23:c7:9b:50:1f:7c:af:de:1b:aa:e8:26:4b:b7:9e:
a5:78:79:24:90:8f:aa:af:c4:1d:4d:5b:db:97:ac:24:20:4f:
2a:c7:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:25 2026 by rpki-client