Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File: 2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier: DPvA5/dhB/sAztWDUajykPvw3HxMdLZAa8o11TT2fmM=
Subject key identifier: CE:95:43:33:D0:B9:FC:9C:34:93:D3:F5:45:C0:5D:CD:5D:63:FD:B3
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 019DA48A9568E0E38779B8B529F20EACB312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number: 0973
Signing time: Sun 19 Apr 2026 07:00:38 +0000
Manifest this update: Sun 19 Apr 2026 07:00:38 +0000
Manifest next update: Mon 20 Apr 2026 07:00:38 +0000
Files and hashes: 1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: ljJOwf1MHNJmTLa9GW8n4m7XBq+cPKDEjGAlwvIOcHU=)
2: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (hash: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:95:68:e0:e3:87:79:b8:b5:29:f2:0e:ac:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Apr 19 07:00:38 2026 GMT
Not After : Apr 20 07:00:38 2026 GMT
Subject: CN=ce954333d0b9fc9c3493d3f545c05dcd5d63fdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:ae:d1:13:2a:24:7d:b6:d9:85:71:b1:0c:
1f:51:52:9b:8e:b7:7b:3b:18:90:a1:9d:58:e6:b3:
96:3c:96:db:2d:6f:6d:fd:af:30:6c:9e:ce:c5:a4:
ca:54:64:f0:5b:66:d9:b2:ca:73:22:9b:52:d4:65:
32:33:14:c1:f1:25:e3:4c:fa:e9:03:2d:a1:93:e0:
09:f8:d4:59:f3:bb:62:56:65:9b:4c:e4:a0:d3:c2:
f7:60:3f:c0:5e:e6:3f:9a:e8:db:a3:2d:ce:4c:df:
62:69:9f:c2:4a:b4:ff:57:72:7d:2f:0e:d6:78:92:
49:e5:bf:3f:f7:61:e0:4f:aa:26:91:f9:d1:d1:09:
b7:2a:32:1a:c5:24:02:6f:e3:ed:b5:7f:8f:05:dc:
c0:af:78:2e:e3:08:88:be:d7:c3:c6:40:92:e1:9b:
86:b6:cc:e1:56:b8:48:a7:b5:bb:b9:cc:0f:4f:06:
ff:5d:9f:88:ba:c6:96:a6:98:4f:9e:0c:9e:c2:1d:
83:1f:9c:65:68:0d:b3:53:b9:38:75:84:5e:36:e8:
ac:53:58:2e:5e:29:c6:00:3a:c5:20:78:0f:aa:4e:
bd:3f:ec:53:6b:98:a6:63:59:f3:99:1f:6d:24:51:
1d:a6:26:d3:df:32:6f:4f:ce:d5:08:75:6a:cd:5b:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:95:43:33:D0:B9:FC:9C:34:93:D3:F5:45:C0:5D:CD:5D:63:FD:B3
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e2:31:e9:93:0b:d1:d4:30:25:5d:10:d1:12:42:26:c5:2e:
3c:65:6d:e6:69:da:7e:16:af:a5:8f:c0:d0:ef:63:a3:d7:0c:
1a:85:c4:cb:98:c5:b5:b4:12:f7:aa:c1:75:e6:f8:8c:11:7c:
77:00:2f:88:e2:27:8a:02:39:4a:74:c4:0e:4a:c0:83:5b:47:
d7:43:2c:dd:7e:37:03:f9:ae:55:99:b6:7c:99:33:06:a1:bf:
ff:fa:42:0e:10:00:1c:62:69:cb:9e:36:60:3e:05:c0:ed:fa:
1d:4b:1b:c5:6d:ee:2d:af:f6:8c:8e:46:0e:2c:c5:cd:35:48:
00:fd:76:1f:4e:4c:af:9b:af:a6:17:ac:72:47:f7:a6:62:23:
92:87:be:f9:91:cc:cd:07:25:7d:a2:9c:8c:df:68:a6:b7:da:
18:ce:5e:53:c9:b4:31:7b:21:ca:a9:f1:ff:e3:c6:9a:84:ab:
64:71:79:fb:86:16:b3:c2:79:a6:fc:6d:bd:c9:83:5a:16:de:
ca:bf:46:a9:d7:df:78:11:16:cb:87:b9:db:ba:5f:48:5e:78:
30:f4:9b:81:33:00:4b:5b:05:2a:2b:b9:36:23:40:ca:da:bf:
59:fc:6d:c1:38:cc:aa:24:18:d1:79:d6:ec:e5:a6:d5:3f:a4:
c0:b8:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:36 2026 by rpki-client