Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: 22q2IUnldpVY0UhV4OsnLpnqjZQcBpWc2CGlmJTCWq8=
Subject key identifier: 0A:63:E8:12:21:16:A9:83:48:C1:28:AE:28:F7:09:0F:0E:96:8A:1D
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019D9A74A4267E4CA4D04FFBC55846D25D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0798
Signing time: Fri 17 Apr 2026 08:00:28 +0000
Manifest this update: Fri 17 Apr 2026 08:00:28 +0000
Manifest next update: Sat 18 Apr 2026 08:00:28 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: 7Arcuk0HFxm1brwfw6KSKzTz9oyhUtM2PubTTb5bDS0=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a4:26:7e:4c:a4:d0:4f:fb:c5:58:46:d2:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Apr 17 08:00:28 2026 GMT
Not After : Apr 18 08:00:28 2026 GMT
Subject: CN=0a63e8122116a98348c128ae28f7090f0e968a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:15:eb:ab:78:90:f3:cb:6d:f5:c9:10:33:
7f:e1:a2:79:a6:5c:9e:7e:f0:91:9f:de:81:fb:53:
f5:df:7a:92:a0:d7:9a:fb:bf:26:66:3a:48:f3:ac:
9b:d6:c7:9e:41:e1:c4:fa:ca:cd:b2:28:dc:48:37:
b7:37:87:aa:3e:07:dd:76:89:7a:ea:81:d6:31:ce:
21:a0:6b:dc:29:db:51:c6:32:66:39:79:27:72:62:
8c:60:da:42:ef:2f:e3:87:53:80:8c:e8:36:5f:76:
9f:72:d9:f7:0c:96:b8:15:fd:f7:a6:03:aa:5b:f2:
2d:e6:e7:a2:da:c8:0a:43:e9:f3:91:e8:71:d5:ba:
c0:27:d0:f7:29:59:4f:c7:c5:1a:a1:7a:21:98:f5:
ea:40:f5:f3:8d:34:f1:54:7e:de:48:08:14:cc:9d:
37:e6:e3:02:d8:db:cb:d0:08:94:5b:1f:36:fe:4d:
25:88:46:2e:f7:6d:03:81:70:31:79:e7:95:dc:45:
5b:d7:27:d4:db:79:79:e0:f7:bc:16:08:99:25:98:
cb:93:66:0a:03:2d:94:90:3a:5c:30:bc:e3:53:96:
1e:c8:ac:ff:0b:db:66:49:00:23:5f:f7:98:b0:92:
40:1d:a5:df:8f:63:4b:04:23:cf:40:7a:e8:71:ec:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:E8:12:21:16:A9:83:48:C1:28:AE:28:F7:09:0F:0E:96:8A:1D
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c6:37:bd:5a:dd:82:a2:d1:3f:83:8d:69:f4:95:25:12:2b:
25:ed:4d:3a:a9:7a:55:95:94:0e:4a:5a:5a:b0:aa:cb:67:be:
58:d0:83:73:4d:58:43:c3:36:f3:c5:27:05:18:97:24:16:05:
0b:b2:45:29:d9:39:de:80:d6:bd:ac:8e:4c:58:1c:9f:71:6b:
c5:f0:45:3b:b4:e3:aa:77:4d:7a:c6:a5:70:43:c8:83:aa:f0:
f8:2c:e4:85:ea:c1:8a:04:82:1b:38:cc:89:91:90:ae:fd:ed:
5e:6a:17:e0:f6:97:96:38:7a:f6:b2:58:cc:b2:3f:4f:b0:80:
61:a6:8b:81:16:02:84:14:18:ca:2a:97:1b:88:c4:d3:29:34:
90:17:9d:e8:0a:b4:79:97:40:9b:ba:a3:d1:b6:84:c2:f7:77:
fa:9d:68:7b:dc:46:ba:6a:b5:b1:26:23:98:d4:0c:c2:10:33:
21:ac:b6:1a:a7:33:c3:72:d8:d8:05:65:6d:dd:c7:fd:7f:bd:
b3:fa:f6:99:e8:08:fe:eb:0d:72:5e:c5:39:77:b0:c8:2f:e8:
00:24:74:3d:e3:53:0c:59:77:58:d1:ba:86:71:e7:91:3b:07:
2e:a4:be:cc:f4:79:d0:ed:61:9e:fd:14:0d:f2:23:79:ad:a6:
4c:20:3c:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adKQmfkyk0E/7xVhG0l1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjYwNDE3MDgwMDI4WhcNMjYwNDE4MDgwMDI4WjAzMTEwLwYDVQQD
EygwYTYzZTgxMjIxMTZhOTgzNDhjMTI4YWUyOGY3MDkwZjBlOTY4YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSwV66t4kPPLbfXJEDN/4aJ5plye
fvCRn96B+1P133qSoNea+78mZjpI86yb1seeQeHE+srNsijcSDe3N4eqPgfddol6
6oHWMc4hoGvcKdtRxjJmOXkncmKMYNpC7y/jh1OAjOg2X3afctn3DJa4Ff33pgOq
W/It5uei2sgKQ+nzkehx1brAJ9D3KVlPx8UaoXohmPXqQPXzjTTxVH7eSAgUzJ03
5uMC2NvL0AiUWx82/k0liEYu920DgXAxeeeV3EVb1yfU23l54Pe8FgiZJZjLk2YK
Ay2UkDpcMLzjU5YeyKz/C9tmSQAjX/eYsJJAHaXfj2NLBCPPQHrocex6aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApj6BIhFqmDSMEorij3CQ8OloodMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8Y3vVrd
gqLRP4ONafSVJRIrJe1NOql6VZWUDkpaWrCqy2e+WNCDc01YQ8M288UnBRiXJBYF
C7JFKdk53oDWvayOTFgcn3FrxfBFO7TjqndNesalcEPIg6rw+CzkherBigSCGzjM
iZGQrv3tXmoX4PaXljh69rJYzLI/T7CAYaaLgRYChBQYyiqXG4jE0yk0kBed6Aq0
eZdAm7qj0baEwvd3+p1oe9xGumq1sSYjmNQMwhAzIay2Gqczw3LY2AVlbd3H/X+9
s/r2megI/usNcl7FOXewyC/oACR0PeNTDFl3WNG6hnHnkTsHLqS+zPR50O1hnv0U
DfIjea2mTCA8Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:37 2026 by rpki-client