Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: 7vL78gZRzJYWS7jrC6QpS8zeIuP4Ar352FxgH3Es6Es=
Subject key identifier: B2:2E:91:F1:80:8C:DC:B5:88:67:5E:02:59:7F:5C:48:02:74:9D:D2
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019CA90EC8F33B762830BA6EEDA2C0A454D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 071B
Signing time: Sun 01 Mar 2026 11:00:44 +0000
Manifest this update: Sun 01 Mar 2026 11:00:44 +0000
Manifest next update: Mon 02 Mar 2026 11:00:44 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: cJ1gF7GO836Sh5nY2YUFZFuewH506nTFgTYH9afDnwE=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:c8:f3:3b:76:28:30:ba:6e:ed:a2:c0:a4:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Mar 1 11:00:44 2026 GMT
Not After : Mar 2 11:00:44 2026 GMT
Subject: CN=b22e91f1808cdcb588675e02597f5c4802749dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:90:3c:df:3a:6b:0e:75:fa:54:7b:d2:8f:
79:d0:50:9d:4c:2c:72:08:85:09:a9:c1:25:fc:f9:
d7:ee:c2:13:ed:0b:c9:87:8a:f1:13:5f:72:c6:cb:
3f:ca:55:d8:63:ea:01:51:95:6e:62:0e:c5:6a:91:
5e:bc:38:bd:42:91:96:a2:6c:69:6b:62:58:c1:1b:
5b:c7:8d:59:e7:e7:ef:ee:d4:f4:43:06:44:9a:ef:
f6:d9:ff:fa:9e:b0:f8:95:31:9d:50:61:ae:ab:05:
2a:35:ef:b2:ad:ec:d4:8b:1c:62:d9:ec:6e:bf:7b:
83:52:72:e9:f1:48:7f:61:af:26:00:8b:79:61:78:
db:f1:f6:f5:5f:a9:86:5d:b4:29:f9:48:b3:d1:d7:
0d:2b:78:8a:b7:b2:ca:cd:e2:ac:f7:a3:c5:dd:8b:
81:4b:8c:71:e4:7c:2a:60:00:8b:3d:cb:bc:21:d4:
06:1c:5a:5b:b6:06:ea:59:77:8e:71:af:b7:ab:7b:
42:47:67:5a:7e:ee:54:14:81:18:3c:b2:2e:fd:f5:
76:2a:da:d9:fb:92:64:66:c8:a6:0e:29:bf:a5:bf:
b2:8f:16:4b:c8:69:ad:a0:e0:71:03:e7:2f:b8:1d:
29:da:02:31:6b:31:45:be:aa:4e:3b:5e:d6:df:c8:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:91:F1:80:8C:DC:B5:88:67:5E:02:59:7F:5C:48:02:74:9D:D2
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:fc:ec:fd:1e:49:a8:bc:69:2e:27:ff:24:e7:d0:ba:5b:
a9:d9:ac:30:f2:c6:d3:fd:84:a4:ce:d1:03:33:82:db:e5:15:
21:90:db:f5:ec:64:d8:78:0c:58:3a:eb:83:d5:06:18:7a:36:
bc:1f:22:8e:8d:4c:d6:df:e6:cc:69:cc:5a:8e:e6:18:5d:67:
c5:72:07:30:c0:e7:f7:73:97:60:30:1b:b6:60:21:f0:94:e3:
6c:dd:4a:f0:8e:f3:dc:d0:51:9b:96:b1:09:98:19:1b:02:1a:
6e:41:81:8f:28:0f:42:0e:79:a2:ad:79:aa:94:22:c7:0f:08:
3e:50:0d:2f:f0:50:df:07:1a:be:dd:f1:dd:95:8d:e2:9d:30:
c5:2e:e7:10:78:8e:d1:57:da:db:20:9c:a7:e9:d5:b8:d0:0f:
60:25:6b:da:9b:7d:38:65:f0:af:cf:f2:93:d4:b0:b6:85:ea:
58:bd:ff:74:5e:e9:30:e0:86:85:bb:0a:96:2e:37:f7:85:fb:
d8:65:ff:6e:0d:16:4d:a2:79:0e:6e:65:ea:29:4a:42:0a:a0:
2f:40:63:ad:b1:7a:92:4f:86:b0:21:77:c1:23:54:bc:7b:b5:
2a:32:17:96:33:1d:6a:2a:9e:8c:e6:aa:e4:c5:9d:f6:8d:27:
39:9f:10:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDsjzO3YoMLpu7aLApFTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjYwMzAxMTEwMDQ0WhcNMjYwMzAyMTEwMDQ0WjAzMTEwLwYDVQQD
EyhiMjJlOTFmMTgwOGNkY2I1ODg2NzVlMDI1OTdmNWM0ODAyNzQ5ZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl6QPN86aw51+lR70o950FCdTCxy
CIUJqcEl/PnX7sIT7QvJh4rxE19yxss/ylXYY+oBUZVuYg7FapFevDi9QpGWomxp
a2JYwRtbx41Z5+fv7tT0QwZEmu/22f/6nrD4lTGdUGGuqwUqNe+yrezUixxi2exu
v3uDUnLp8Uh/Ya8mAIt5YXjb8fb1X6mGXbQp+Uiz0dcNK3iKt7LKzeKs96PF3YuB
S4xx5HwqYACLPcu8IdQGHFpbtgbqWXeOca+3q3tCR2dafu5UFIEYPLIu/fV2KtrZ
+5JkZsimDim/pb+yjxZLyGmtoOBxA+cvuB0p2gIxazFFvqpOO17W38iKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIukfGAjNy1iGdeAll/XEgCdJ3SMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcr87P0e
Sai8aS4n/yTn0LpbqdmsMPLG0/2EpM7RAzOC2+UVIZDb9exk2HgMWDrrg9UGGHo2
vB8ijo1M1t/mzGnMWo7mGF1nxXIHMMDn93OXYDAbtmAh8JTjbN1K8I7z3NBRm5ax
CZgZGwIabkGBjygPQg55oq15qpQixw8IPlANL/BQ3wcavt3x3ZWN4p0wxS7nEHiO
0Vfa2yCcp+nVuNAPYCVr2pt9OGXwr8/yk9SwtoXqWL3/dF7pMOCGhbsKli4394X7
2GX/bg0WTaJ5Dm5l6ilKQgqgL0BjrbF6kk+GsCF3wSNUvHu1KjIXljMdaiqejOaq
5MWd9o0nOZ8QLA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:25 2026 by rpki-client