Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: 3Ab2rRCKviu0d+Uq0nQspWS4DccyOKucr7f1QnOsh+E=
Subject key identifier: F7:05:BC:8E:38:34:91:B5:49:20:F6:F5:60:69:FF:1B:00:73:E1:27
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 019CAAC6668B355F292E307E560DFB1481DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 1043
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: 222gqC9oJifObQ9ZfKy7HGpwVoqUfYdTsc9O0JFP83Q=)
2: pKvOJm4n5sPhRA8ulxbp0fcdwlI.roa (hash: D5Xw6rzftd0rg3vZPJZf2WpziTWWuDu/9Tmy/JZh8qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:66:8b:35:5f:29:2e:30:7e:56:0d:fb:14:81:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=f705bc8e383491b54920f6f56069ff1b0073e127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:1f:03:ce:4a:67:56:92:6a:5a:e4:62:f5:
2f:9a:73:ea:54:52:bf:58:fd:82:51:02:af:49:e0:
32:ef:19:82:1a:d1:78:6c:66:b8:9b:ea:23:a4:fb:
29:a4:b7:39:76:46:49:8e:fc:1c:04:9f:81:50:50:
11:65:45:2a:86:77:72:e4:94:80:42:05:a3:02:ef:
86:53:06:fb:65:8f:87:f0:5d:57:62:e5:00:0d:e9:
be:44:f3:66:9c:ab:cf:8e:e2:8b:76:8a:ad:b0:ee:
12:37:3c:25:9b:df:de:5c:fc:52:58:27:df:24:0f:
cb:26:1b:6b:02:da:72:5c:98:fc:55:38:e1:04:b2:
f9:1d:52:31:d6:0f:0b:4e:b2:31:26:72:34:42:c9:
25:07:eb:d6:d1:b5:94:96:82:fd:29:d4:e1:3c:71:
0c:b0:ef:3c:dc:e8:dd:04:00:39:34:90:78:de:94:
59:85:ba:0b:72:e3:7f:5d:89:a7:60:f2:4f:21:32:
fa:cd:a9:ad:1b:02:eb:f5:1a:80:2d:ae:dd:91:c2:
f1:88:73:54:2e:47:9c:40:82:92:65:0b:82:77:e2:
04:db:3e:f7:29:19:a2:c7:cc:95:cf:76:16:0d:3f:
1f:36:40:21:f3:b8:de:e2:78:76:2e:da:ed:f3:14:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:BC:8E:38:34:91:B5:49:20:F6:F5:60:69:FF:1B:00:73:E1:27
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0b:0c:0a:17:ac:07:bd:aa:c0:ab:76:1b:2b:b6:c0:7b:23:
45:d9:11:0d:77:52:11:5c:73:3f:e1:77:d3:c2:b5:2d:d5:6e:
81:95:e1:3e:89:8f:09:8e:4e:59:23:ab:b1:0f:59:e8:49:a3:
7b:eb:c3:33:33:e1:58:84:f9:e0:0e:f8:7e:5f:65:c5:4d:c2:
45:dd:74:56:ad:57:ad:a9:7a:12:41:7c:c1:02:b1:c4:e9:f5:
50:d0:76:f6:d0:85:78:b6:66:fc:fe:2b:42:e1:b9:6b:ff:a6:
38:75:5d:ab:4d:37:7b:1e:e4:a8:0e:0a:53:11:5b:e1:65:88:
96:27:96:27:f8:64:91:1c:70:92:7a:25:07:43:23:b7:68:07:
82:54:b0:ae:6c:86:49:3e:21:1e:fa:39:e7:e5:eb:6f:8c:24:
61:7b:f2:18:71:05:da:7f:27:f6:7a:43:9f:20:12:82:70:90:
44:2d:de:c9:58:fe:08:aa:db:69:c9:a5:9e:19:40:74:65:64:
f8:ba:0c:3b:17:a5:6e:e9:82:43:c0:07:da:18:4c:ce:9b:d4:
c7:7a:10:d2:b2:83:4e:45:64:87:75:ad:5f:49:4a:66:4f:98:
b6:d3:9f:7e:4f:d4:a6:68:23:b7:99:c7:27:5d:14:25:64:84:
e8:37:3c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmaLNV8pLjB+Vg37FIHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjYwMzAxMTkwMDU0WhcNMjYwMzAyMTkwMDU0WjAzMTEwLwYDVQQD
EyhmNzA1YmM4ZTM4MzQ5MWI1NDkyMGY2ZjU2MDY5ZmYxYjAwNzNlMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt4fA85KZ1aSalrkYvUvmnPqVFK/
WP2CUQKvSeAy7xmCGtF4bGa4m+ojpPsppLc5dkZJjvwcBJ+BUFARZUUqhndy5JSA
QgWjAu+GUwb7ZY+H8F1XYuUADem+RPNmnKvPjuKLdoqtsO4SNzwlm9/eXPxSWCff
JA/LJhtrAtpyXJj8VTjhBLL5HVIx1g8LTrIxJnI0QsklB+vW0bWUloL9KdThPHEM
sO883OjdBAA5NJB43pRZhboLcuN/XYmnYPJPITL6zamtGwLr9RqALa7dkcLxiHNU
LkecQIKSZQuCd+IE2z73KRmix8yVz3YWDT8fNkAh87je4nh2Ltrt8xTOrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcFvI44NJG1SSD29WBp/xsAc+EnMB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgsMChes
B72qwKt2Gyu2wHsjRdkRDXdSEVxzP+F308K1LdVugZXhPomPCY5OWSOrsQ9Z6Emj
e+vDMzPhWIT54A74fl9lxU3CRd10Vq1Xral6EkF8wQKxxOn1UNB29tCFeLZm/P4r
QuG5a/+mOHVdq003ex7kqA4KUxFb4WWIlieWJ/hkkRxwknolB0Mjt2gHglSwrmyG
ST4hHvo55+Xrb4wkYXvyGHEF2n8n9npDnyASgnCQRC3eyVj+CKrbacmlnhlAdGVk
+LoMOxelbumCQ8AH2hhMzpvUx3oQ0rKDTkVkh3WtX0lKZk+YttOffk/Upmgjt5nH
J10UJWSE6Dc86Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:13 2026 by rpki-client