Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: ZzK0cYVgeuVusao6axEOMtqg7gNInUnLuxdXK+PurSM=
Subject key identifier: 44:EA:4D:1E:E6:82:C6:AD:44:A1:1F:58:80:B4:72:A1:8D:60:C5:5F
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 01A0C47C8B6E5D38B4E7F093B2A6139E9DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 0299
Signing time: Mon 21 Sep 2026 15:01:31 +0000
Manifest this update: Mon 21 Sep 2026 15:01:31 +0000
Manifest next update: Tue 22 Sep 2026 15:01:31 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: IA+FBO3JJlvqbHxUWgaHWoWe+P6sVDuwl9sfZBpJfMk=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:8b:6e:5d:38:b4:e7:f0:93:b2:a6:13:9e:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Sep 21 15:01:31 2026 GMT
Not After : Sep 22 15:01:31 2026 GMT
Subject: CN=44ea4d1ee682c6ad44a11f5880b472a18d60c55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:da:a8:b4:db:d7:9a:2a:23:1e:58:73:04:
9b:94:24:69:33:01:15:d9:7c:30:23:6e:18:2b:1c:
1d:a3:88:8e:37:f8:6f:60:44:1b:2d:7c:d0:ca:4c:
48:b0:bf:6b:79:bb:79:8d:66:c9:9a:31:ea:96:cd:
de:e8:f8:ee:be:15:f3:37:fb:44:67:6c:66:0d:70:
0e:50:16:59:01:a6:a6:06:59:37:5d:25:31:5e:87:
19:78:99:2e:f1:d3:1b:a0:ed:71:6b:6a:27:77:92:
55:df:5d:04:2d:b1:11:91:47:fd:51:4b:38:cd:8f:
8b:5a:5d:5b:f6:1a:8d:c7:76:26:ab:11:ba:0a:8a:
48:65:f5:ee:69:c2:ca:d2:e5:b2:59:6b:f6:81:5f:
49:8e:9f:51:cb:05:a7:1c:85:07:53:75:93:0d:60:
53:53:29:60:37:72:b7:dd:47:de:d6:e4:03:81:52:
f9:58:30:3b:b1:85:7a:14:7f:8f:ca:f0:00:73:ed:
9d:7d:02:c4:46:00:94:38:99:1c:76:1a:34:70:18:
f0:8a:3f:4d:bb:d4:a8:61:d6:b5:fe:42:4d:45:d0:
1c:b1:f0:b9:5f:69:df:0c:63:a5:09:9d:91:46:46:
b5:e3:7c:51:f1:76:f7:7f:45:be:14:d1:90:04:dc:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:4D:1E:E6:82:C6:AD:44:A1:1F:58:80:B4:72:A1:8D:60:C5:5F
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:45:34:f7:f7:43:e2:2e:b3:63:7b:36:08:d1:9c:ac:4d:6b:
40:13:4a:23:92:9b:cf:3b:5a:59:60:24:68:cc:07:a1:38:b6:
4f:fe:b7:2d:6e:d9:33:0a:51:34:96:25:b1:37:83:30:b7:ae:
c0:61:8c:ff:5a:55:27:e4:8f:74:d0:61:ed:6a:5d:e3:b3:ba:
c7:aa:2b:aa:79:8e:8c:b7:bb:c5:0a:42:45:c7:93:64:31:48:
86:11:b9:c7:87:d8:b9:b9:9f:2b:59:20:40:54:18:25:f3:29:
33:f5:40:43:6f:42:45:2d:8a:60:86:86:a9:b1:85:48:10:f9:
99:09:f6:c8:61:95:fd:c1:49:6d:c0:2a:f9:04:e1:18:02:1d:
cf:b6:64:f1:5f:d4:34:ce:11:39:22:f2:a7:e7:b9:67:a9:52:
d6:1a:95:e0:29:4c:ef:5c:92:73:d2:ed:d8:60:ab:1c:53:f8:
de:88:ed:e9:19:d9:be:fc:35:b6:a5:3b:7d:17:02:01:83:7d:
3d:1e:3f:de:6e:47:ea:ee:92:9a:2d:32:e3:8e:c7:aa:8a:b2:
1e:bb:90:c9:9b:11:0c:45:63:0b:6d:b9:95:3a:b2:8b:4b:77:
46:31:d9:93:99:01:e7:81:d0:1e:4f:34:74:f6:29:d8:e2:7a:
59:64:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:35:01 2026 by rpki-client