Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: ltzKsCpsp0ebzii6MPrANCn3WGs5jgVAgwxPdDedFQU=
Subject key identifier: F6:57:38:56:B2:CA:EC:9D:6A:09:AC:74:F8:21:D3:4E:DC:50:9D:7D
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 01A0BFFA6E3BF27591F890616C2FD46874A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 033A
Signing time: Sun 20 Sep 2026 18:00:55 +0000
Manifest this update: Sun 20 Sep 2026 18:00:55 +0000
Manifest next update: Mon 21 Sep 2026 18:00:55 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: 9JW7F9O7JXXpK4TDhW4esl7ywCvoHe28wa8XQdUfA8c=)
2: Q0jEdYQfiuBaGOGIDi6fxqkNu30.asa (hash: f7Pw5WF8TCRU0QwClTVBmnd+i1bv82uwZrEWnEkGYmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:6e:3b:f2:75:91:f8:90:61:6c:2f:d4:68:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Sep 20 18:00:55 2026 GMT
Not After : Sep 21 18:00:55 2026 GMT
Subject: CN=f6573856b2caec9d6a09ac74f821d34edc509d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:22:d9:c9:e4:af:5a:1d:78:25:06:76:c7:
36:1c:ae:1c:df:09:72:35:09:c8:a1:3a:fb:b6:4a:
27:6e:65:8e:c2:94:a0:8c:8c:12:fd:92:64:58:16:
e9:79:5a:5a:83:88:c9:97:6d:77:5c:f3:93:c3:a0:
d6:85:7d:37:96:e8:12:a1:e7:dd:39:7a:6c:b7:5a:
5e:5f:a5:50:d0:5d:38:fa:cb:14:0c:2f:a1:2c:4c:
4f:4b:c7:f9:f0:c4:b3:75:d4:99:55:35:e9:40:ab:
35:d3:7a:b2:24:be:6d:30:ec:26:b7:f8:8c:02:02:
c1:db:e0:76:54:f1:bd:3c:e9:a2:24:21:ad:ad:97:
a6:38:ea:f4:86:33:af:72:5d:41:89:0a:80:e0:fc:
25:30:cf:f3:4b:a4:4b:74:df:62:6b:2f:4c:12:e8:
e1:ca:10:62:b6:23:2e:77:e2:67:a4:d5:c9:a0:5a:
71:80:31:e5:53:02:60:8f:52:81:7f:e7:4d:82:12:
eb:ee:10:fd:08:2d:75:97:d2:36:ad:c0:46:88:e6:
e8:6d:c8:92:33:29:23:c6:d5:66:e3:74:b8:45:4a:
e3:f9:fb:43:24:94:e9:46:82:1e:e2:1c:05:b2:38:
39:a8:da:c4:ab:ec:31:4e:84:9b:e7:09:e2:5e:6d:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:38:56:B2:CA:EC:9D:6A:09:AC:74:F8:21:D3:4E:DC:50:9D:7D
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:60:b8:ce:96:ae:4f:a6:3a:d9:13:f5:b3:63:02:d9:fb:
bd:3a:12:b3:c9:92:d0:b1:10:fa:98:10:f9:15:30:37:b4:e9:
59:39:83:44:8b:af:5d:ca:c1:ec:8d:7d:ea:5b:8a:a6:d8:55:
35:db:8a:80:ce:c4:53:3e:09:cd:59:f1:9d:9e:a1:72:59:66:
12:7d:fa:08:8a:fd:44:fa:e3:6e:9f:b0:f7:97:c9:c6:7a:25:
b9:dc:21:f0:0e:95:00:7b:c4:0c:55:ae:72:ed:a7:cf:e6:0d:
fc:ff:d5:3f:88:ce:0d:1b:f5:73:9b:4b:c9:5c:6f:15:f3:ae:
eb:33:99:d5:cd:3e:4b:4b:f2:cc:8b:5a:ad:9c:ac:a1:85:d6:
10:a8:45:78:94:e0:83:41:31:e8:46:82:91:2f:9b:40:a5:e3:
7a:1d:a6:6d:8a:ed:8f:7b:53:52:3a:17:72:af:88:85:cd:9a:
80:a6:3f:0d:c0:7d:b2:cd:a8:21:ab:2f:db:dc:9b:f1:2b:72:
ba:8e:8e:d9:b5:cc:ff:ab:00:43:80:c7:49:74:3c:59:da:9c:
e5:68:c3:0d:d3:3d:43:16:94:f7:c7:0e:70:f7:06:f8:34:44:
28:6a:0b:5a:c1:94:66:62:5a:73:84:08:3c:ae:d3:f7:22:3c:
84:dd:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:35 2026 by rpki-client