
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: eO0PQVASa1VUwbEclf0mzSrdLIuXAeeeUy0HzpZ3wRc=
Subject key identifier: 84:44:9E:3C:D8:9D:80:C5:B4:EA:0F:45:D4:4F:C1:18:EF:C2:E4:70
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019FA8D098501EEC92CA33DB17F8BE924263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 07DF
Signing time: Tue 28 Jul 2026 13:01:10 +0000
Manifest this update: Tue 28 Jul 2026 13:01:10 +0000
Manifest next update: Wed 29 Jul 2026 13:01:10 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: aceOdHbKH+4jsyvCjXdiboHzVRlm8KkH04uonayzZj0=)
2: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
3: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:98:50:1e:ec:92:ca:33:db:17:f8:be:92:42:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Jul 28 13:01:10 2026 GMT
Not After : Jul 29 13:01:10 2026 GMT
Subject: CN=84449e3cd89d80c5b4ea0f45d44fc118efc2e470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:dc:ba:8d:30:90:e6:8c:8e:2a:b9:b9:6c:
59:16:de:25:19:d3:55:5e:fd:5d:f4:a1:46:7f:dd:
80:18:fb:e8:75:25:54:99:69:1d:6a:b6:d1:37:79:
4f:19:4e:a6:f3:bd:07:63:d5:66:46:68:4a:cb:d8:
6c:10:ae:b2:a9:a1:78:44:44:f6:11:b2:ed:26:4f:
35:18:9e:e1:c2:a6:bf:8f:54:e5:ea:fb:60:1d:9a:
e0:b3:b2:a5:db:55:b2:56:a7:1a:39:df:cc:48:2f:
12:12:77:47:af:cc:74:2e:ce:4b:a7:62:bf:45:2a:
dd:cb:54:9c:a9:49:cf:be:2e:22:54:da:64:71:e1:
52:fc:b2:dd:8e:f1:25:29:7d:57:a2:79:f2:7c:b2:
3d:16:5b:43:b7:8a:20:6b:d9:ff:90:44:e5:01:32:
2b:02:6c:1f:6d:e7:ab:8f:fc:b0:de:58:6f:7b:e3:
88:92:75:fd:7a:2b:dd:f0:66:ad:a0:fa:04:73:f8:
c1:b7:8a:e4:e1:41:88:0b:fd:c3:fb:0e:03:ce:fc:
cc:a9:a6:4a:d9:99:4a:45:c7:f9:9d:e0:d9:44:26:
d5:39:8d:71:c1:b4:aa:7e:87:2a:50:ef:fb:07:10:
f5:2c:d7:ce:52:da:fa:b5:d4:13:e6:af:29:22:35:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:44:9E:3C:D8:9D:80:C5:B4:EA:0F:45:D4:4F:C1:18:EF:C2:E4:70
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:6b:f9:93:ac:91:86:91:5a:9e:8c:85:eb:f5:b5:53:b1:
b1:6e:bb:74:21:de:62:53:86:eb:99:91:80:7e:b5:dd:46:36:
48:45:16:f3:04:13:15:3a:55:3c:35:66:bc:31:ba:7f:e2:58:
ab:a7:7f:41:1e:c2:86:6c:99:ca:83:7d:3e:bd:ca:11:53:7f:
f5:cf:35:25:b3:b2:f7:40:cf:9b:3a:31:dc:eb:dc:d6:a2:82:
a9:a4:4a:5b:64:3e:df:8f:08:86:1a:48:cc:58:3c:4b:4a:0b:
9e:67:ab:5b:b1:b4:89:24:5f:62:28:32:4c:9b:ae:47:97:03:
a5:12:8f:1c:3a:59:ad:ef:24:c7:f2:fb:2a:1c:1c:35:79:37:
fa:8d:9d:f9:57:af:bd:70:91:e4:7a:86:ca:85:5f:39:66:9f:
db:3e:6d:46:66:81:23:32:f4:2d:c1:74:9a:27:38:dc:d3:88:
8f:40:ba:95:31:93:f3:09:15:52:b7:f0:45:5a:2f:44:86:56:
d1:83:88:a9:15:37:87:07:c2:9f:6a:95:0b:a2:61:a7:df:d2:
0b:56:49:fb:0b:bb:18:cc:b6:1b:31:ac:91:94:b0:91:ee:2a:
d6:03:6a:fe:52:10:99:67:ec:40:e1:12:e3:b0:c9:d7:80:a7:
cf:fe:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:31 2026 by rpki-client