Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: pPKGH5BKt31QrOszQ+9Rs8MC2lkx5c03sFjjJUZBOrc=
Subject key identifier: 2B:68:9B:35:85:73:A0:BB:BD:04:F6:A3:EE:02:B7:BC:D8:A2:4D:04
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 01A0C3D71CFA2E81C7D6778AD7120E9A25D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 0873
Signing time: Mon 21 Sep 2026 12:00:49 +0000
Manifest this update: Mon 21 Sep 2026 12:00:49 +0000
Manifest next update: Tue 22 Sep 2026 12:00:49 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: dsAXZVSXZ8DqCUW7hwcOs253/nwrHHYb3e9QqG5pijk=)
2: 6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa (hash: WXzY4f3u5JQjX40pGEpdB10HXKmkV5vsO5q3+OkfgwM=)
3: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:1c:fa:2e:81:c7:d6:77:8a:d7:12:0e:9a:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Sep 21 12:00:49 2026 GMT
Not After : Sep 22 12:00:49 2026 GMT
Subject: CN=2b689b358573a0bbbd04f6a3ee02b7bcd8a24d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:8c:47:aa:29:68:80:8c:03:60:75:a2:dc:
9d:39:0e:3d:63:7e:1a:cf:9a:f3:88:e1:1a:40:90:
4e:d5:37:e9:89:b5:5b:3b:cb:19:b5:a4:f5:33:5a:
5f:96:f6:3a:a7:86:f1:a5:d2:40:ba:e0:a0:5a:87:
d5:ba:ec:1d:25:fd:fb:2d:fd:e2:99:9e:8b:bd:97:
3f:76:ff:c6:48:4b:0e:08:34:67:25:77:51:48:98:
b2:3d:25:a5:33:4d:55:62:e8:ef:fb:0a:e2:8c:c1:
d4:79:fd:d3:7c:8e:65:a5:de:7e:8a:cf:fb:c0:3d:
7d:5d:21:c8:8b:ce:6e:a0:8a:49:75:71:74:07:5b:
97:d0:a2:ad:03:de:70:a3:b2:52:4a:90:29:50:64:
a3:27:f5:2b:a1:b2:53:d0:a4:48:76:51:cc:bc:e9:
d1:1b:a4:32:4f:f4:23:00:f2:01:7b:bd:98:66:f4:
f3:c9:e1:26:01:8f:96:7f:2e:03:92:11:6f:5d:97:
09:fb:9d:a8:6e:c8:95:7f:79:6a:e6:33:8b:d4:ed:
11:47:bc:f7:65:e9:11:6f:27:1d:5d:10:e1:6f:10:
88:08:ab:02:b9:56:39:db:cd:b9:d4:02:fb:db:61:
bf:50:26:fa:33:56:7a:3a:13:56:e8:7c:6a:9a:ed:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:9B:35:85:73:A0:BB:BD:04:F6:A3:EE:02:B7:BC:D8:A2:4D:04
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f1:ec:c8:76:eb:87:95:4e:1e:c9:ce:a6:2e:2d:e4:7a:69:
d2:7e:45:81:2f:e5:b1:8b:6c:1a:4d:9f:47:1d:de:5e:e0:b8:
cc:c1:ac:1f:75:bb:ad:bc:c2:13:11:01:e0:e0:22:aa:34:af:
6d:4c:a2:ab:ee:92:24:3f:6f:ab:22:2a:20:d0:d1:17:df:e4:
c5:47:66:be:1e:7d:aa:54:99:e8:9d:b9:0f:89:2b:bb:5c:26:
7c:bb:06:fd:d2:9b:5f:2e:93:e7:ce:cf:51:33:b5:47:e0:d1:
f0:3f:30:2f:8a:75:54:11:9b:7f:b8:fd:b1:cb:14:f8:59:19:
1e:b0:67:ef:f6:c4:1c:13:9f:a0:92:57:c4:44:d0:ee:3b:78:
0a:ba:d5:3c:dd:4d:c0:c6:78:0b:f6:9c:be:c9:3a:7c:e1:79:
aa:f3:d8:4e:55:2e:eb:5e:7f:af:b8:b6:9c:b4:52:ea:30:85:
35:c4:30:2d:2b:17:3c:f1:19:c6:39:fd:4f:0b:e7:ed:c8:9d:
bb:9f:4e:2c:73:32:a2:53:d4:6b:a0:ad:59:e8:40:28:4a:bb:
2a:85:58:f9:74:a4:0c:15:96:e1:f7:83:01:10:5b:48:f2:67:
6f:bf:83:a7:e1:0b:96:9d:a8:46:87:53:db:cf:5a:57:46:1a:
ba:5d:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:23 2026 by rpki-client