Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: rMYuhPC+A3Sk8Py6UEWC7axYoEBAxZC1ifQboYjcjzA=
Subject key identifier: DE:AF:81:82:06:90:22:D7:3B:3A:D7:E8:F1:BA:B4:19:30:61:27:66
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019CA9EB0456FD06230F7008FEF040E8405F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 79
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: wXC8S6WWPsO09tY5eCgYvNDUgvdup4ECRUAuda6Zj8I=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:04:56:fd:06:23:0f:70:08:fe:f0:40:e8:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=deaf8182069022d73b3ad7e8f1bab41930612766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:2d:e4:14:18:39:22:6c:d0:1a:a7:62:0e:
31:42:3a:e7:7b:23:4f:a6:ae:f5:f8:7d:bf:e1:5a:
f0:c8:bb:ef:ef:83:a5:e9:c5:bd:56:f6:35:8d:f2:
83:eb:f6:81:ea:1c:f9:e0:ee:07:49:4c:b2:a8:45:
8a:a1:85:3b:20:09:da:bf:bb:0c:1c:f6:8f:a1:e6:
f5:bd:5a:bb:74:5d:0c:0f:73:78:b0:7a:42:0d:56:
59:8b:20:6f:e4:d5:c7:29:7d:4d:ea:b0:a6:7b:3c:
da:c2:0a:33:dc:61:64:5b:a7:57:68:9a:3d:67:15:
d9:cd:b7:75:80:97:4c:e9:03:fc:35:00:91:18:18:
59:45:e4:01:09:d7:fc:17:a0:c7:a7:b0:c2:83:db:
ce:c3:34:7c:97:0a:bf:1b:50:48:3d:94:da:ec:1d:
b7:7e:e9:90:09:1f:86:f7:04:97:95:41:ba:a6:c2:
71:05:70:a3:5d:8d:6c:fb:45:5b:7a:74:62:aa:7f:
9d:e1:ec:89:fb:e9:a5:1e:0b:72:cf:49:95:26:52:
67:c3:df:83:1f:d9:f4:5b:6b:db:c0:03:5e:5d:d3:
62:db:e2:56:07:4c:9c:05:ef:a1:48:c4:83:d0:18:
4e:c3:72:bd:6d:25:47:e7:aa:86:76:93:c5:1a:1f:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AF:81:82:06:90:22:D7:3B:3A:D7:E8:F1:BA:B4:19:30:61:27:66
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2d:2c:d8:35:b7:0a:00:c1:1f:63:c4:ae:94:9b:a7:54:7f:
79:7d:5e:63:4d:8b:46:3e:40:90:21:c3:3d:29:11:d7:7d:38:
f8:bc:98:4a:1d:c6:99:ab:fa:d2:58:2d:7f:0c:e6:67:98:f0:
6c:95:db:31:e4:c3:93:b3:9e:5a:c5:fd:46:76:4b:cb:b5:43:
90:b7:ae:cd:25:4d:f6:84:5c:c5:1d:e8:ca:eb:ab:36:3e:70:
53:d9:e3:bb:ee:27:32:aa:f7:80:e7:69:71:a9:2e:45:32:bd:
f1:04:37:77:9e:d9:52:81:aa:a6:32:19:46:37:3a:8e:d4:d2:
ad:1a:94:94:90:c6:97:07:ed:b6:64:bb:6a:28:b1:59:ef:b7:
b8:b6:aa:20:b8:55:0e:64:40:59:3a:f5:f1:45:a7:19:94:e2:
51:d0:1f:14:87:42:e7:db:03:81:48:e7:66:05:85:a7:3c:9c:
92:6e:a7:19:20:45:aa:17:12:24:c8:9f:22:9c:e0:43:9e:50:
7d:1e:51:d5:1e:cc:77:b3:26:2e:cf:67:74:77:d2:79:92:5d:
4e:4e:99:56:b6:a9:f0:a1:eb:2a:a0:58:3c:77:5a:fd:5a:56:
4f:5e:5c:a1:49:e3:dc:4c:99:57:8d:ac:d6:a4:63:e1:bd:45:
13:e4:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:28 2026 by rpki-client