Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: eAAP/dDA2h0OUT70wBIkbuX6o53BrOKgyNyGZhRyjfA=
Subject key identifier: 4B:C7:04:3F:62:65:BA:41:25:28:25:13:3F:3A:08:2B:F0:57:A6:F1
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019DA4F8506E9C57AB4C07D96CA7BF0A8FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: FB
Signing time: Sun 19 Apr 2026 09:00:29 +0000
Manifest this update: Sun 19 Apr 2026 09:00:29 +0000
Manifest next update: Mon 20 Apr 2026 09:00:29 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: /M/2pGYD852IkDIVgkYSR32pCsS1owPXE/MK3yQIkhU=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:50:6e:9c:57:ab:4c:07:d9:6c:a7:bf:0a:8f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Apr 19 09:00:29 2026 GMT
Not After : Apr 20 09:00:29 2026 GMT
Subject: CN=4bc7043f6265ba41252825133f3a082bf057a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:f3:01:fa:35:0b:41:bb:3d:d8:f5:47:b7:
35:31:d0:28:9d:20:31:34:4c:02:45:5f:68:05:91:
88:6b:12:df:08:24:54:54:07:9a:ed:d7:25:dc:be:
35:74:c3:c9:9a:01:9f:ae:c1:6b:1b:9d:b5:06:de:
99:1d:ff:d0:bd:a2:1b:81:71:f9:50:71:69:39:b6:
6b:37:21:4a:66:1e:16:e4:d3:bf:9c:42:d3:d3:e2:
80:42:a5:96:32:cc:3f:52:f9:a0:5f:3d:c0:43:ef:
0e:7f:14:41:a8:73:a1:1d:f0:da:c4:43:bf:11:e1:
e7:52:d2:58:ef:fa:02:57:2c:0d:89:b6:87:44:05:
43:b4:aa:70:09:44:f8:90:2e:07:68:46:8a:a3:eb:
bb:32:60:83:fb:9e:75:86:b3:d9:d0:de:ce:0f:bb:
30:3d:b4:1f:a0:e1:54:83:1b:68:79:c6:b6:ee:dc:
1e:8a:d6:bb:a5:38:41:66:8e:ff:fd:ea:57:4a:a0:
a1:9c:3e:6e:db:6c:51:cd:32:26:6b:01:e8:13:5a:
ca:7c:6a:70:5c:b9:86:d8:f1:77:6f:4d:e3:42:c6:
82:cd:63:28:27:9b:09:0a:30:49:27:4c:39:00:66:
bc:6e:66:33:af:6b:df:5d:56:a2:d7:ea:c2:4d:21:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:04:3F:62:65:BA:41:25:28:25:13:3F:3A:08:2B:F0:57:A6:F1
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:46:d1:6a:d4:29:04:07:4f:5b:b5:3c:09:1b:c9:bb:98:
d0:b5:9d:ab:73:6a:56:4a:dd:9c:75:65:31:76:c9:44:f7:39:
b7:d2:6e:18:30:f5:de:e2:a2:09:90:4d:a9:53:53:b1:20:76:
42:3f:fc:9b:5f:02:86:13:85:f5:ea:a6:70:44:13:3e:40:d9:
06:f8:c0:27:e1:49:50:a8:78:5d:9a:0b:c5:01:98:7a:29:1b:
9b:5d:0c:6a:c4:67:da:4e:31:83:c2:86:11:a4:d4:39:5a:91:
3d:f2:17:1f:d1:be:93:12:d0:15:4e:70:0a:a2:70:ce:df:2f:
87:38:2b:d2:06:f7:2a:a8:00:f1:54:a0:49:34:a3:58:94:a9:
9f:26:28:f9:79:cc:28:89:19:2a:33:8a:20:0c:b1:50:d4:9c:
da:ed:e8:e1:ca:26:b7:c5:2f:66:81:27:bf:9f:ee:de:c5:11:
4e:6a:93:4b:74:da:69:58:7f:e8:8e:b6:84:45:a1:f4:da:b1:
c7:d4:00:6d:88:b7:b9:19:42:7f:2f:4d:17:93:12:87:60:f1:
a2:6b:fc:70:f2:67:b8:57:67:80:d1:34:7b:0f:24:40:ea:08:
d4:da:8e:02:73:00:9c:cf:d9:8d:bd:79:9b:04:8a:17:5b:fc:
9f:d1:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:27 2026 by rpki-client