Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: kqOzqgmbCPLrOIVWOXDoZdS2Ap9lfbxJ8ojx2na/Upg=
Subject key identifier: 06:72:6F:31:F9:AE:7A:45:3B:0F:58:BB:DB:83:74:E6:92:68:1F:8F
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01A0C7B3B33C0F4671AB4BAD5998A3C86EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1265
Signing time: Tue 22 Sep 2026 06:00:37 +0000
Manifest this update: Tue 22 Sep 2026 06:00:37 +0000
Manifest next update: Wed 23 Sep 2026 06:00:37 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: A31aUgIQSPUATUvKYQdB5IOwOV4c5/xhLDzPNJKnfDw=)
2: O3fR56dqfHik9Xe0cH6HKim6TKY.roa (hash: 5jIvT1o2gnH7JBF0Cx/Aj9BJ5CVIKBgiPASB9rf2KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:b3:3c:0f:46:71:ab:4b:ad:59:98:a3:c8:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Sep 22 06:00:37 2026 GMT
Not After : Sep 23 06:00:37 2026 GMT
Subject: CN=06726f31f9ae7a453b0f58bbdb8374e692681f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:83:9b:b0:94:e6:ae:c5:af:ef:fd:6e:a6:
90:45:6c:1d:dd:e7:6d:2b:81:eb:6e:f6:9b:44:78:
85:e1:33:69:c9:79:8f:c7:8f:9c:36:ac:54:18:9b:
a8:76:84:4a:f7:56:2e:e4:60:d7:ee:39:71:61:cb:
09:6f:0d:1a:d1:bb:54:a6:1d:f0:93:75:86:9a:a6:
e8:17:21:ca:61:cb:47:cf:cd:ec:bd:95:74:3b:a0:
3c:17:67:ed:63:15:b5:b7:83:5f:83:dc:f2:e7:c1:
07:02:a6:41:94:40:7d:b2:8d:46:84:b7:7e:45:d2:
ae:01:81:04:07:cb:cc:7a:36:c2:8f:7f:b9:a2:3a:
09:34:48:3a:4e:3a:f0:37:4f:67:ad:83:a0:46:e1:
e9:ff:02:0b:4f:14:41:e5:90:9f:e7:dd:f1:f3:80:
d4:e1:ed:bc:12:7f:fb:f8:1a:aa:fe:d9:01:19:b3:
57:cf:49:4f:a0:1d:7e:1a:bb:42:d9:83:34:43:82:
0e:66:e1:2e:a5:84:ef:a5:0e:6c:9d:ab:b7:75:3a:
99:4e:8b:04:d8:dd:65:95:cb:22:dc:58:af:32:8c:
6e:fd:06:23:e2:f1:34:b4:d0:b9:c4:ed:1d:62:e3:
c4:a9:17:a9:7a:27:39:f2:5b:7a:a4:90:ad:f7:0b:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:6F:31:F9:AE:7A:45:3B:0F:58:BB:DB:83:74:E6:92:68:1F:8F
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6c:7e:df:b7:86:a4:93:7f:f9:0b:78:3e:7e:b2:06:ef:b7:
a7:7a:d3:b5:ae:2c:b4:68:d6:f1:c9:0f:8e:e7:d3:fb:7d:54:
d0:b6:fc:b8:b4:10:14:36:b1:f6:0d:f5:31:56:d9:88:1d:a3:
f9:6b:b8:3b:9f:84:d6:45:44:ee:9e:72:a5:5b:ce:b6:0b:ac:
03:12:26:86:5d:41:28:1c:ec:c5:a3:fc:19:32:86:c6:4e:e3:
01:d4:7f:29:ff:e2:3a:32:8f:d0:b2:83:35:28:33:02:aa:bf:
9e:64:16:f4:11:0b:da:07:9f:64:6f:83:06:22:dd:d7:14:ad:
21:f2:14:e0:71:27:c1:28:d8:67:6f:0b:e9:45:cc:a3:8d:de:
c8:81:1c:71:76:1a:83:8e:3f:27:79:d0:d8:79:0a:61:75:74:
c6:4f:8b:60:98:ca:d4:82:c4:4f:14:5d:0a:33:1a:75:82:4d:
9f:8c:01:d1:d4:f5:6c:3f:8e:46:e7:9d:83:f9:51:42:c7:79:
a3:0a:92:d2:71:49:37:a9:28:ea:1f:ab:41:fa:99:9f:aa:8c:
70:4a:ea:64:f1:ff:da:cf:07:42:ff:1d:63:fb:53:c3:12:99:
1c:7f:17:65:1f:a4:eb:91:98:e0:e9:40:0c:a6:6f:f9:03:98:
0e:5b:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:34:42 2026 by rpki-client