Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: 0Hs2D0vX4L/pH79EYDyPEKGsZ3X46IO2/43LfIeD794=
Subject key identifier: 45:73:E1:4D:F8:DA:33:4C:37:27:C6:9F:AE:7A:20:15:23:20:F7:74
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 019CAD90843523D46A6982A972828105C1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0451
Signing time: Mon 02 Mar 2026 08:00:55 +0000
Manifest this update: Mon 02 Mar 2026 08:00:55 +0000
Manifest next update: Tue 03 Mar 2026 08:00:55 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: o6L0SAD9HZidhLlTfWRVnhKzBPFk/RFw4JjJDYp6l5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:84:35:23:d4:6a:69:82:a9:72:82:81:05:c1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Mar 2 08:00:55 2026 GMT
Not After : Mar 3 08:00:55 2026 GMT
Subject: CN=4573e14df8da334c3727c69fae7a20152320f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:1a:e9:f0:1f:bf:5a:97:27:34:41:11:71:
6d:44:da:43:51:31:ac:11:27:30:5d:34:7f:e8:17:
ad:f8:f5:b2:d7:22:2e:4a:fd:a7:d7:95:aa:04:0c:
99:2e:ce:3f:9a:38:73:bd:30:36:bd:81:a5:6f:ee:
59:c3:fc:1d:3c:a6:a5:8f:3b:16:b4:9c:a8:10:92:
87:10:d6:b7:cc:ed:70:31:78:5a:eb:d5:41:3d:7f:
f5:23:58:7f:73:85:54:c0:88:42:ed:71:5d:4e:41:
33:23:47:62:6f:1b:1f:84:c4:9a:74:2c:0f:b8:e4:
b7:31:6b:64:3b:36:bb:00:e9:62:72:69:3e:b3:2d:
de:2a:85:03:8c:c9:10:7f:92:11:e0:c9:5a:6b:86:
29:d4:a4:8b:38:fe:3b:9a:a1:dc:40:ce:bf:eb:dd:
6b:cf:8d:f4:26:c7:bc:b0:5b:d9:ba:f7:76:17:e2:
cf:a4:8b:3b:da:63:d9:1b:32:ff:f6:06:e0:87:fb:
30:73:02:5d:f2:b5:fa:68:ad:97:5e:a1:49:b4:53:
1e:93:2f:8a:25:d7:fa:d6:25:d7:8f:80:fd:9e:14:
33:a0:fd:28:04:8c:ee:d3:84:06:66:29:66:e6:4b:
96:2e:f1:de:c4:7d:50:66:c6:5e:53:16:28:91:29:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:E1:4D:F8:DA:33:4C:37:27:C6:9F:AE:7A:20:15:23:20:F7:74
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b6:31:66:0a:ed:00:9f:b9:53:39:4c:b4:47:a4:8b:2a:7d:
58:da:22:29:36:02:79:32:99:08:69:d9:10:6f:53:dc:0c:72:
8a:51:8a:df:f5:68:d1:17:35:a2:84:55:64:e8:8b:76:d8:22:
74:89:66:43:97:42:af:35:ac:e9:8e:12:87:33:ed:32:75:47:
61:74:83:7e:06:92:c5:15:64:57:e5:03:7a:7a:74:c1:12:f9:
42:23:2e:9d:62:8b:ea:a1:7c:0b:55:59:61:7f:d5:fa:19:07:
95:f5:a1:86:7c:45:16:22:4a:68:0d:c1:cd:fc:7a:39:a1:e7:
22:17:28:76:e0:17:fa:d7:ee:3b:a1:b5:6d:93:88:ba:a4:1f:
04:9a:45:ce:2a:47:b9:7f:29:60:09:70:bc:de:01:e3:de:ef:
f5:2d:05:08:da:5c:5d:ff:41:de:88:7c:ae:95:5e:b3:8d:76:
36:6d:74:9a:92:73:8f:6d:33:83:1f:53:66:fa:db:63:e1:b6:
4f:c4:b1:e8:ed:ed:af:e8:51:70:7d:9c:ab:5e:e6:4a:50:30:
da:06:cc:9a:30:fc:e7:31:af:fd:81:b1:f9:e5:72:fa:e6:d1:
cb:0d:24:5c:bd:0b:ca:eb:76:93:dc:e3:2d:98:fe:35:e5:50:
d9:91:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:57 2026 by rpki-client