Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: rBRyhZ5PwQ3bHIFFxApijdVpiNQ/CKwCR8Ta6+RICn4=
Subject key identifier: EB:7E:5C:44:E4:AA:98:B5:BD:1A:4A:CC:89:14:1E:D6:57:9A:C3:18
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 01A1DE715059954891FD9E684760787F6697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 032B
Signing time: Sun 15 Nov 2026 09:02:10 +0000
Manifest this update: Sun 15 Nov 2026 09:02:10 +0000
Manifest next update: Mon 16 Nov 2026 09:02:10 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: rnIqwAChuKF6ILk8M/IGWcZdBJ73nFambC/zqmp/urY=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:50:59:95:48:91:fd:9e:68:47:60:78:7f:66:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Nov 15 09:02:10 2026 GMT
Not After : Nov 16 09:02:10 2026 GMT
Subject: CN=eb7e5c44e4aa98b5bd1a4acc89141ed6579ac318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:69:d8:59:15:50:4d:f4:20:79:3e:41:d3:
51:8f:19:59:15:72:bd:17:a0:e5:8c:22:73:1a:e7:
0f:68:2e:d6:9c:b3:45:04:d4:52:f1:ef:c4:01:f3:
4b:af:35:4b:82:47:92:15:d8:76:45:86:d8:d1:83:
e6:d4:25:1f:40:e9:85:85:64:23:ad:ce:19:41:67:
36:d9:4d:f7:78:ea:01:26:4d:2e:33:fb:87:b2:ac:
57:a5:00:20:c1:23:96:09:82:12:ce:7b:b3:04:13:
41:e4:b0:7c:20:24:45:30:5c:0e:3c:d7:cf:72:e5:
c6:a4:3e:bb:ee:1d:c0:89:8d:71:ba:34:4b:b3:d3:
3d:9d:85:97:77:ad:d6:a2:e2:09:4b:cf:74:34:a4:
ed:34:2f:c5:fd:c1:84:fd:ac:5a:af:b3:0c:1d:91:
6e:68:5b:11:cd:9d:4c:7d:9f:14:fc:92:f5:07:a8:
95:ea:a3:be:a6:ac:50:aa:09:ef:1f:87:fa:87:bb:
16:bb:ea:4c:ea:43:fe:7b:b4:b1:e3:6d:74:9c:4f:
7e:f5:12:a9:b2:6e:1e:bb:41:bb:e1:0d:72:31:09:
61:5c:d6:d7:b2:a5:02:8c:54:4d:fe:bd:54:3e:d6:
79:90:6b:ab:82:8a:79:d2:44:34:d4:97:c1:1e:7e:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:5C:44:E4:AA:98:B5:BD:1A:4A:CC:89:14:1E:D6:57:9A:C3:18
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:05:d0:e4:da:f3:a1:28:95:ef:4f:de:d3:26:8e:a4:aa:
f3:2f:e2:72:9c:89:fd:83:85:45:35:e9:ad:8f:53:53:34:73:
01:26:34:f6:4c:10:da:24:1b:01:e3:da:5f:37:e1:50:43:23:
72:3e:42:c7:97:ed:fb:a1:17:fb:8a:6b:2c:45:e4:01:31:00:
53:53:64:58:08:ca:08:8e:41:a4:0a:ae:f4:95:07:ee:3a:1e:
13:7e:cf:20:64:f9:75:87:74:63:05:97:7a:6e:95:b4:82:a9:
b8:3f:05:9c:21:d1:85:e0:cf:4e:c6:ad:af:18:86:87:d9:5f:
5e:21:20:2d:66:2a:cd:88:f6:77:8e:6c:58:03:13:af:66:a2:
dd:d4:b5:fa:da:fd:90:7d:3d:74:5b:fe:1b:a1:13:dd:81:f0:
44:01:5c:22:ec:6a:7a:57:0b:47:a5:c5:9f:f2:11:96:81:5c:
a5:8c:12:45:ec:8a:f1:b0:07:8c:ce:57:ba:7d:e3:87:ca:a4:
3b:95:a4:b5:39:0b:58:4a:ef:50:4d:6c:5d:b1:43:52:bb:88:
3a:79:cf:f6:03:d0:c9:9c:bc:7d:b4:c0:9e:c3:f0:57:b9:40:
f7:4a:0d:b9:fa:ba:b5:5e:2c:52:68:6e:9f:fa:95:3a:46:33:
1f:6f:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:20:30 2026 by rpki-client