Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: E9TpxteaE5D1OltZaSxyabDeFHYDzX+CDIIlDihwbB8=
Subject key identifier: F7:93:98:C9:7F:63:7F:3E:EE:DE:96:0A:37:11:DF:5F:3B:39:8F:47
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 01A0D538DFA97A71A11E7458E53516FA3236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 087C
Signing time: Thu 24 Sep 2026 21:01:09 +0000
Manifest this update: Thu 24 Sep 2026 21:01:09 +0000
Manifest next update: Fri 25 Sep 2026 21:01:09 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: qsiB4dU3cHPxDgEceZojh14El9xw3hUBP0LKkcO1zrc=)
2: 6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa (hash: WXzY4f3u5JQjX40pGEpdB10HXKmkV5vsO5q3+OkfgwM=)
3: 7pzFf_iNoDngDs0Av_ZSMgawRG4.roa (hash: 9rYKYzez5K3YGGCA+xWy6+JbqzejGQR6adseKr3AGNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:df:a9:7a:71:a1:1e:74:58:e5:35:16:fa:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Sep 24 21:01:09 2026 GMT
Not After : Sep 25 21:01:09 2026 GMT
Subject: CN=f79398c97f637f3eeede960a3711df5f3b398f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:66:ac:b6:30:93:6c:ad:88:28:7a:f3:83:
0e:8a:88:17:e6:95:38:6b:ab:db:ea:ad:8e:dd:55:
ff:9b:d3:e1:b4:77:ba:ac:1b:47:31:0d:1b:dd:b3:
02:a1:db:bb:85:9f:cd:65:d7:9e:bb:9b:b1:b1:04:
88:2a:52:12:0d:8f:6b:c0:ea:f9:85:29:3f:b5:64:
9c:3c:88:34:31:48:d7:0d:dd:1f:e4:aa:1c:4d:d8:
b8:1f:de:7a:8e:89:c3:6f:26:75:b2:34:04:3e:dc:
9f:12:a4:13:13:0d:ab:9c:85:1e:dd:42:6e:21:ed:
ca:ee:54:29:71:f0:13:e3:c6:c4:cd:00:02:2d:b1:
16:57:d8:ca:76:8c:f7:d0:86:08:66:f7:71:ee:94:
f6:f9:5c:5d:05:6c:db:e0:68:8b:32:fd:82:38:8b:
f6:95:a1:0b:e0:0a:24:f6:55:b5:12:5b:4e:28:09:
69:da:02:4a:a3:9f:e9:6c:55:72:f4:eb:64:57:c4:
60:45:79:e9:06:11:68:ae:fe:91:ef:c9:02:a5:5e:
11:47:0c:14:34:23:c9:0a:fd:88:08:48:d4:0c:29:
dc:35:8b:73:40:66:97:61:a9:53:3f:00:6d:ed:94:
f5:3c:fc:75:9d:c7:99:58:b8:ff:93:36:a4:10:47:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:98:C9:7F:63:7F:3E:EE:DE:96:0A:37:11:DF:5F:3B:39:8F:47
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:3a:f5:8d:39:a8:43:95:6f:f6:ee:7d:74:a2:86:28:3f:4f:
36:87:dc:f5:a5:3a:e3:81:a0:eb:16:1e:ff:0b:94:64:20:7b:
b8:6d:1c:2f:ab:6c:6d:12:c7:ea:f5:80:ea:67:98:34:fe:b5:
15:d2:a5:9b:99:76:8a:16:48:be:88:d6:fc:0b:70:56:a6:b3:
2a:d8:5e:a8:aa:bd:97:8e:c2:1a:d4:b8:c5:00:d1:a4:e5:38:
6f:4c:40:5f:bd:b4:51:ba:14:3c:0e:85:fb:1c:bc:af:04:c1:
4f:c4:17:df:cc:d0:78:ec:42:4b:33:3d:c3:22:24:b7:79:62:
6b:b5:d7:ac:3e:57:78:e6:3d:93:35:be:3b:31:ef:6d:98:e1:
40:e9:43:d7:b0:9e:21:1b:1f:88:2e:4d:37:6a:6d:a0:33:95:
a3:26:8d:01:31:d8:4c:05:b9:cb:4c:df:98:d8:c2:31:7c:06:
cb:97:15:2c:f4:74:af:25:5a:fd:2c:8d:ff:26:69:ea:64:8d:
37:26:c6:eb:f4:41:fa:39:cd:b7:10:97:43:2d:d8:9e:d8:75:
87:33:e2:96:8f:90:ce:47:97:2b:66:be:67:bd:c8:49:fd:ed:
e4:a7:a4:8b:c8:40:08:9e:76:46:ba:bc:d6:48:7c:e7:fe:5b:
60:01:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:22 2026 by rpki-client