Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: XF9qMIzsRchc4Xdpg6zmQ2JyjOpI3rLss4l97dwZ0No=
Subject key identifier: EB:0C:DC:1F:DF:78:C4:22:FD:73:BB:B6:DB:73:FA:D8:B2:93:41:91
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01A120F749F622CE0DCEDDC98569DC3576FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 069F
Signing time: Fri 09 Oct 2026 14:00:39 +0000
Manifest this update: Fri 09 Oct 2026 14:00:39 +0000
Manifest next update: Sat 10 Oct 2026 14:00:39 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: WraafBVfxf5q2bMHzHYpszffgGx2APMiXO7QRv7H6l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:f7:49:f6:22:ce:0d:ce:dd:c9:85:69:dc:35:76:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Oct 9 14:00:39 2026 GMT
Not After : Oct 10 14:00:39 2026 GMT
Subject: CN=eb0cdc1fdf78c422fd73bbb6db73fad8b2934191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:3f:e9:9d:a0:48:31:93:07:f3:97:9f:6d:
3d:cc:33:71:89:cd:f8:27:9e:e4:85:9b:01:35:d2:
f6:56:77:74:d5:b8:2b:6c:4f:d0:35:13:9b:e1:17:
3d:3b:94:02:4c:e1:8b:b2:74:1d:d3:53:29:60:3d:
0f:d7:c7:0a:59:c7:ef:e8:7d:42:3d:27:14:53:8b:
e0:b1:fe:2f:65:cc:75:65:73:5f:6e:32:1c:ca:66:
5e:85:3e:59:82:46:d2:0c:34:de:e4:71:92:54:7f:
3a:7a:95:05:a3:5d:d0:e8:0f:14:a4:69:80:ba:65:
06:d3:f8:bb:ee:86:cb:0a:82:32:f5:00:66:10:b7:
fe:30:1b:e5:6d:b0:e8:53:72:9e:b9:41:98:30:60:
04:db:ef:c8:6d:f6:6b:9d:fa:d1:35:5b:01:f4:81:
d8:34:d2:d2:ad:48:25:85:ed:8b:91:a7:ad:2f:3c:
54:0c:6b:e2:29:0e:c5:3f:c1:92:d6:46:71:10:cc:
96:a5:fb:0b:51:d7:ed:d2:0e:8c:2f:c2:91:2c:39:
96:c7:c7:36:10:b3:6e:e2:36:52:98:ed:89:c3:bb:
3b:ea:40:db:e9:9a:0b:7f:bc:db:43:4f:a3:7f:3f:
69:7e:d4:4e:f8:c3:df:d3:c3:fc:8f:10:6e:35:79:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:DC:1F:DF:78:C4:22:FD:73:BB:B6:DB:73:FA:D8:B2:93:41:91
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:40:da:e2:c8:d4:82:03:43:ca:57:3f:22:46:c3:2d:c9:92:
1a:be:4f:78:d6:0f:96:fc:53:68:67:61:b6:67:28:45:76:8b:
8a:b0:30:93:c2:47:a8:ab:69:3e:5c:a5:b2:1e:5f:ef:86:70:
f3:5a:60:96:b0:34:14:3c:67:74:e0:2b:9a:1e:7c:9f:2e:57:
96:e5:1e:c8:53:4d:1b:8d:52:16:1e:0b:19:8a:37:9e:1a:bc:
ca:1d:84:9b:9a:e9:93:89:05:3e:8b:f5:38:b1:0d:52:76:d8:
b8:fe:1c:3d:be:2a:23:43:fc:45:4f:a0:11:b3:ab:3a:b5:41:
50:c8:e0:e8:56:4b:10:fb:c5:91:5e:fb:1c:9d:f7:56:c6:0b:
0a:25:6f:0b:cd:cf:13:8e:fb:78:10:e5:f4:c6:1e:0b:3a:57:
51:cd:eb:fc:2e:c6:38:9c:d5:15:25:e5:15:cf:34:20:6c:f9:
55:24:97:c4:02:68:95:3b:3c:2f:da:7a:20:77:59:f7:23:4b:
0f:53:8d:a8:e7:86:60:8c:14:ed:2c:40:94:1f:39:c2:ed:40:
8e:18:d3:b4:62:ce:89:b1:5a:11:43:44:25:26:4f:74:bc:67:
aa:26:9e:59:2c:f2:c7:5d:83:8f:ed:f5:a5:b3:fa:a5:6a:fb:
71:12:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:43:49 2026 by rpki-client