Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: eMUiEPvKfFxFz8EPJBODSvPdL625y7h8K8Sn9dBKIiM=
Subject key identifier: D2:5D:0A:FE:47:71:09:D7:47:18:D3:5B:75:96:B7:AA:AA:82:22:27
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 019EC2922AAD368675642FB1325D1FCF6B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0565
Signing time: Sat 13 Jun 2026 20:00:19 +0000
Manifest this update: Sat 13 Jun 2026 20:00:19 +0000
Manifest next update: Sun 14 Jun 2026 20:00:19 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: tFmHEcDMc9Edi4a0wHktpM6rlAVmJNifqGMumPJ6NvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:2a:ad:36:86:75:64:2f:b1:32:5d:1f:cf:6b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Jun 13 20:00:19 2026 GMT
Not After : Jun 14 20:00:19 2026 GMT
Subject: CN=d25d0afe477109d74718d35b7596b7aaaa822227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:d1:6e:62:0a:95:ce:e0:3c:ed:df:3c:e8:
43:51:7b:37:82:ee:c8:f8:ec:e9:e1:8b:10:71:ad:
91:3d:1f:fc:25:cd:27:2c:4e:c1:2c:c0:c7:1b:2a:
fc:b7:a1:fe:d5:85:5b:80:72:fc:5b:29:95:f2:76:
d8:93:cb:f8:7c:06:b3:57:b5:de:d1:ed:c8:5b:86:
8e:ca:e3:e2:a3:00:46:cc:ad:90:2b:42:e8:16:a7:
79:17:e2:eb:8d:be:a5:13:d7:67:a7:0b:ce:99:86:
cd:a2:32:5e:20:7b:8c:0b:2b:cb:20:30:ff:c7:8c:
ea:23:3a:1d:92:42:ea:66:b3:30:73:50:1f:41:75:
cb:4e:54:63:36:7a:62:ec:66:e4:26:5d:0e:7d:1a:
5c:78:25:09:5d:3f:8b:84:19:86:80:a3:33:6f:f8:
4f:74:43:92:87:cd:96:82:94:60:e4:d1:7d:ab:37:
3f:ea:16:21:7e:60:a8:cd:9c:75:fc:c1:98:48:be:
ab:32:27:7d:61:c0:2e:2f:e5:be:42:1e:7c:fd:dc:
bf:dd:ab:e8:85:be:3a:5f:09:ee:13:3b:3f:37:f1:
37:fb:f9:45:1b:5b:35:44:48:e8:78:29:d4:d0:27:
d1:14:64:e7:22:79:ee:0d:61:f0:52:99:c2:fd:84:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5D:0A:FE:47:71:09:D7:47:18:D3:5B:75:96:B7:AA:AA:82:22:27
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ea:98:11:db:9a:c9:35:be:1a:57:53:44:0f:a3:0e:8f:7a:
42:cc:0b:66:6a:0d:a4:31:e2:10:f3:df:10:eb:d7:05:00:9e:
ff:e1:38:8f:30:4e:28:7f:f6:61:1a:ca:f5:38:a4:58:07:65:
ed:d9:9d:4c:ed:07:42:21:e0:ac:43:88:6f:dd:80:0d:71:8c:
af:d8:2f:97:13:91:0e:14:46:d4:80:52:c6:26:62:76:b7:f9:
b9:14:df:df:1e:e8:99:5f:39:ea:51:be:da:87:c4:e6:15:de:
85:a1:ee:50:22:6a:c7:c2:d3:6b:e1:98:5b:b0:a7:6c:8b:d4:
50:af:f9:04:d1:f4:e4:79:39:0b:ae:fa:70:11:3d:a7:47:e5:
4e:4c:d4:d1:0c:d2:50:fa:20:96:aa:ea:20:60:0c:03:38:62:
42:33:cc:af:46:7c:3f:d6:9c:39:23:55:76:f4:32:af:ce:7d:
fb:32:62:e4:35:0e:34:a1:b9:a8:9b:34:67:1c:81:ad:aa:f2:
74:2b:7e:62:cf:cd:95:94:63:04:03:8d:cd:f9:62:89:dc:02:
d0:f8:43:fe:f8:f9:81:e0:9b:48:4b:59:8e:62:cb:77:c5:ab:
46:54:f1:c4:c1:3c:34:36:54:ab:1c:5e:d4:c4:42:14:d1:bc:
e7:5c:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:31 2026 by rpki-client