Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: 1GAq+GNXJZKAVGOINghyeLrhO1xfiAejOWo39krfNTA=
Subject key identifier: 65:11:4C:FC:20:77:F3:E6:25:01:D9:CF:55:AD:59:B4:BB:B7:CD:3F
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 01A0D7277E9CE3F85862FB69017E62F0EC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 087D
Signing time: Fri 25 Sep 2026 06:01:24 +0000
Manifest this update: Fri 25 Sep 2026 06:01:24 +0000
Manifest next update: Sat 26 Sep 2026 06:01:24 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: EfIvbDldwQTEEpoh8PsS+Td7pqSmZBP/8j6vJ2wEu5c=)
2: 6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa (hash: WXzY4f3u5JQjX40pGEpdB10HXKmkV5vsO5q3+OkfgwM=)
3: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:7e:9c:e3:f8:58:62:fb:69:01:7e:62:f0:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Sep 25 06:01:24 2026 GMT
Not After : Sep 26 06:01:24 2026 GMT
Subject: CN=65114cfc2077f3e62501d9cf55ad59b4bbb7cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:36:d8:94:f1:43:ba:99:01:70:85:ee:23:
f7:2f:48:8c:67:65:1c:43:27:c5:20:a8:ed:6b:c4:
2b:22:d2:5d:f2:f8:ab:5d:85:c8:18:f4:fe:64:08:
73:38:6e:15:87:08:83:c9:6c:3c:24:55:7e:15:c4:
d6:95:ea:df:d7:a0:6a:bd:51:7c:56:69:d5:64:30:
84:b2:fe:a8:68:b3:16:1f:72:82:6f:df:c0:56:e7:
51:18:09:2b:a8:8d:66:18:da:a7:15:05:7d:bc:a0:
50:60:70:96:1a:aa:e2:86:09:7a:a7:9f:af:d0:6f:
89:c3:84:5c:d7:09:5c:11:3c:e1:37:d6:9b:13:cf:
c0:5e:0e:c6:70:1c:72:91:5a:9b:c5:7e:c6:d1:42:
31:5f:9e:8f:6d:6f:41:9e:37:5e:bf:53:a2:52:2d:
1c:0b:e9:82:a1:5b:c9:ff:82:08:03:1b:c9:d6:76:
d2:00:9f:8f:ed:e6:d6:22:a8:11:19:52:ca:f7:58:
53:4b:38:8d:4f:1f:2b:8f:3e:47:05:26:bf:84:ba:
9a:1b:b7:76:59:4e:37:46:f4:21:ee:68:c7:e5:18:
fc:e2:27:ea:b9:84:b7:d8:91:40:01:da:48:9d:9f:
4d:b2:e9:0f:cd:7d:45:f5:5a:51:94:af:ab:06:5c:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:4C:FC:20:77:F3:E6:25:01:D9:CF:55:AD:59:B4:BB:B7:CD:3F
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:28:a9:db:d5:0e:e3:d0:4e:f3:7e:8e:73:ed:fc:a9:c5:d9:
7e:8a:21:59:88:c8:dd:ec:df:5c:9b:34:ea:c4:51:1c:01:e0:
1e:e3:6e:e0:83:bf:9a:f0:75:e2:8f:19:f4:10:85:47:4e:88:
b1:01:d2:38:4a:8a:14:cd:b7:ba:72:92:c3:b7:9f:87:57:85:
62:14:c9:d6:a3:5b:e0:c2:83:4f:65:b6:d3:7e:a4:42:86:e4:
e1:ff:b9:93:1a:a1:b1:83:68:ba:39:c8:90:b8:9e:39:c1:58:
18:fb:42:66:5a:e8:69:6a:e2:d3:81:55:ce:80:ad:1b:1b:9f:
a4:0a:bf:4d:58:8d:35:db:6e:83:8a:0f:78:59:ab:dc:14:de:
61:9c:81:0d:cc:83:57:6c:ef:40:57:85:d9:49:53:a3:66:9a:
9a:c6:92:95:4d:0b:51:74:3e:77:c3:42:4f:a9:8e:57:e6:65:
87:84:d8:1c:e8:56:11:50:fe:fc:d8:5d:b3:aa:5d:fe:51:31:
02:0f:d3:06:07:62:71:9c:e0:ed:8f:1a:d0:04:70:ae:98:4a:
cb:d5:d2:c5:1a:5b:b6:c5:90:6c:df:6b:d6:56:8e:63:77:be:
56:ee:c1:2c:28:1c:e9:c0:53:6a:4d:68:fe:de:41:ca:2c:ad:
f2:e9:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:23:19 2026 by rpki-client