Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: pjV6kVNMNwbIFTpRmvAyygR2lDjiKzvCq1UHhiQ3XAc=
Subject key identifier: 38:C7:78:67:0C:3D:BD:D0:03:B0:FA:84:96:FA:50:AC:2E:FC:C4:A2
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 019FA93DE2CFE2F9E377829EA5BD714D1AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 02A9
Signing time: Tue 28 Jul 2026 15:00:32 +0000
Manifest this update: Tue 28 Jul 2026 15:00:32 +0000
Manifest next update: Wed 29 Jul 2026 15:00:32 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: t8R0o6YLehMdk7YcwTi7HizqMtuoNnl14ao8vYS0yZ4=)
2: hzlvDuEik5KewUtPDqrBpdd0iR4.asa (hash: 78MMyEGGhYv2n8lAIMHN69jmN3Yqiu304UwiKvSAC60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:e2:cf:e2:f9:e3:77:82:9e:a5:bd:71:4d:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Jul 28 15:00:32 2026 GMT
Not After : Jul 29 15:00:32 2026 GMT
Subject: CN=38c778670c3dbdd003b0fa8496fa50ac2efcc4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:c6:bf:92:33:a6:30:e3:7f:20:41:e3:2c:
44:1c:c1:82:c4:9b:03:1e:b9:7d:e5:d0:7e:c3:89:
56:b4:30:81:80:f2:70:df:8f:e8:d2:a3:69:2f:a8:
f0:ed:e7:eb:61:c3:12:7d:47:23:96:4e:40:8b:89:
1e:80:0e:7f:a5:1c:4f:0c:61:1b:a9:0a:c7:22:f6:
9e:76:1e:fb:60:6f:7e:95:9b:dc:f2:5d:74:21:6d:
1b:6c:f5:c9:ac:d8:fc:37:db:43:37:4d:07:94:63:
46:85:b7:34:a4:c9:be:ea:07:4f:c2:1a:dd:37:f8:
90:c3:4e:1b:79:b2:ab:c7:b1:f4:60:88:7c:b6:44:
c7:82:6e:57:90:f8:0a:c6:6e:b2:48:63:a9:7d:dd:
44:86:7f:f6:63:df:43:f6:f6:13:71:f3:9f:76:a5:
6b:a7:d7:cc:73:3d:49:c0:c8:22:8b:c9:e9:cd:be:
2e:64:a2:1e:d6:cf:db:e2:e7:0e:8b:df:6c:e3:27:
1e:3f:3c:28:a1:17:0e:7d:31:df:97:f6:24:4c:4b:
8f:95:a0:2b:c8:30:c4:f2:19:a9:42:2f:16:0f:7a:
c0:64:43:8b:5c:d2:b9:98:77:bc:4b:4c:c0:ff:f9:
10:95:1d:00:7b:56:fe:36:c8:81:d8:c2:7a:22:a6:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C7:78:67:0C:3D:BD:D0:03:B0:FA:84:96:FA:50:AC:2E:FC:C4:A2
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0f:f3:4b:0f:33:75:1e:e7:9b:12:7f:36:d2:a8:6e:cc:db:
19:80:40:04:5a:42:78:5c:5f:1f:c9:95:cf:4c:4e:dc:5f:93:
1e:81:db:c2:1a:ef:51:b7:dd:4e:cd:a1:21:38:94:6f:54:af:
7c:d4:6e:e3:1d:af:b8:f9:d3:5e:0f:74:ee:32:34:16:a8:ca:
7f:87:21:50:72:72:36:8b:99:6f:e2:db:15:cb:8c:df:2a:99:
54:c6:6c:d8:9c:fb:2a:c2:c1:96:2d:5e:79:b6:5e:82:9e:cc:
68:3e:18:7e:a7:68:8a:00:4e:e6:1b:05:53:62:b5:28:2e:4e:
dd:5b:8a:23:4e:33:d7:1a:ed:4b:eb:53:80:e7:64:eb:3a:48:
2a:a2:93:ad:3c:41:1b:91:7d:6c:b1:84:d9:e1:aa:72:e2:ab:
74:09:c6:7d:b1:6a:e3:35:b4:06:48:4f:5b:4b:ca:ad:45:45:
e0:6e:5f:60:18:e4:75:3f:d6:b0:cd:bc:96:1f:f9:11:d6:61:
ba:bc:2d:fa:49:7c:61:dc:d1:29:ba:98:d5:42:b8:39:f1:09:
f4:95:d5:6f:76:a4:b7:92:37:ac:ad:71:2d:e5:b9:7b:61:2e:
c2:b7:2e:a8:2b:6e:39:5f:f4:ee:fa:15:3c:03:f8:c6:01:00:
67:ea:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:48 2026 by rpki-client