Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
File: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft (raw, json)
Hash identifier: 01CaPOztj46z+uK7jqwH4Ru7QPuDOk54fsotONti0tE=
Subject key identifier: BC:36:DE:E2:B0:90:0B:9C:23:A5:BC:1D:C8:BD:E1:62:84:28:A4:6C
Authority key identifier: D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
Certificate issuer: /CN=d908647efb88210f016b6756d3766e9295944aa3
Certificate serial: 019FA8997A558608A82A043A00F272A332A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
Manifest number: 0206
Signing time: Tue 28 Jul 2026 12:00:58 +0000
Manifest this update: Tue 28 Jul 2026 12:00:58 +0000
Manifest next update: Wed 29 Jul 2026 12:00:58 +0000
Files and hashes: 1: 2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl (hash: LLwPnSLCjnV458imPEF/VP1cBz6t4NLLQo7gxd2mNkQ=)
2: rDV-HF7LJZhsd6a2pYtuqFyF2-0.roa (hash: WTgx+WW8HPCr9gNUjFMSj5I6ouN0hb4HGics98eX288=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:7a:55:86:08:a8:2a:04:3a:00:f2:72:a3:32:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908647efb88210f016b6756d3766e9295944aa3
Validity
Not Before: Jul 28 12:00:58 2026 GMT
Not After : Jul 29 12:00:58 2026 GMT
Subject: CN=bc36dee2b0900b9c23a5bc1dc8bde1628428a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:3e:48:23:bd:bf:d0:03:60:7d:72:d8:b2:
f2:86:d5:a1:b1:a1:65:c7:06:79:3e:61:da:19:bc:
b5:e6:a4:6d:27:70:ec:26:1e:65:9a:a8:2d:4e:08:
12:6e:d3:4c:ac:94:ae:70:15:64:01:1f:70:90:8e:
1b:f3:c1:63:f7:fc:1f:e1:7c:4b:f9:c2:97:aa:8d:
dc:8b:a1:e6:17:96:0e:3d:9b:76:f9:54:51:a9:1c:
47:04:8a:a8:b7:f0:9d:a3:6e:4a:ea:3d:6a:78:d2:
30:01:74:93:cb:bf:0c:fd:38:d5:1b:07:52:12:4e:
d5:ff:4c:90:29:b9:5d:44:3f:be:7d:30:03:64:45:
71:a4:7e:e0:76:0a:d4:5b:d2:57:34:bc:e4:24:25:
55:0d:58:0c:75:81:09:ab:43:d9:5f:36:54:59:d0:
a3:0c:a0:b0:90:ce:bb:50:81:02:92:54:76:e0:7d:
75:f6:64:45:29:93:b0:74:78:35:df:47:fa:7f:6e:
b1:dd:a1:bd:85:65:62:b5:de:86:bc:be:a9:1f:b0:
b4:e1:18:08:9f:3e:c8:6e:ab:d2:70:ff:3c:bf:b0:
62:02:43:65:de:c5:11:f2:19:dd:1d:6d:ae:87:75:
02:11:10:32:83:e1:48:0f:01:7b:90:a5:fa:16:0a:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:DE:E2:B0:90:0B:9C:23:A5:BC:1D:C8:BD:E1:62:84:28:A4:6C
X509v3 Authority Key Identifier:
keyid:D9:08:64:7E:FB:88:21:0F:01:6B:67:56:D3:76:6E:92:95:94:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/019d5e-0d5b-4231-bdad-43265ef95d92/1/2QhkfvuIIQ8Ba2dW03ZukpWUSqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:e1:e7:b3:08:a1:75:17:79:90:ec:ae:87:bc:c0:58:d2:
7e:64:b7:7c:a5:00:29:54:cf:b4:84:90:02:9b:8c:2e:87:f9:
05:49:05:79:82:e1:eb:98:eb:08:79:5e:31:97:0f:82:9d:d6:
da:92:18:33:54:e0:b8:2c:57:93:99:58:a4:b2:36:ae:46:f8:
b3:62:cd:51:0b:c7:70:e8:53:0d:1a:1d:be:44:27:45:ac:53:
e5:e1:09:5b:18:64:9b:26:23:27:e9:0a:a5:92:19:d1:a8:a6:
16:bc:aa:86:70:59:0b:05:69:47:44:17:eb:70:82:f6:42:f4:
7d:19:12:d8:99:c3:ef:d7:6f:fe:f4:03:34:a9:91:30:7a:7e:
0d:d6:9b:79:24:3d:5a:13:c4:82:62:bc:bd:33:05:ef:fd:1f:
89:f5:ea:36:7c:b3:ce:65:7a:f3:a4:9e:34:f2:b4:7f:a2:da:
b1:c7:5a:7c:a6:b7:0a:14:4f:67:f5:39:a1:92:07:7b:57:6f:
3f:a6:74:a9:70:d3:1f:85:8d:bf:da:6e:5f:fc:5c:81:ee:50:
88:1f:56:9c:f1:90:9c:72:f8:11:bb:29:54:66:94:99:a8:71:
d7:ed:4e:dc:ed:9d:b6:d7:da:d8:d6:8e:07:79:3c:83:9d:d7:
22:7d:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:49 2026 by rpki-client