Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: q5m8rKF60Bx9LEUz0KndfSwEOWyI7A6WdDvVl6t1dl4=
Subject key identifier: B3:C7:50:4E:F9:3B:6C:75:E8:59:F1:81:2B:76:58:CB:95:AC:08:4A
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019EBF91B5DB8243296601B6651CA9B15BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0679
Signing time: Sat 13 Jun 2026 06:00:57 +0000
Manifest this update: Sat 13 Jun 2026 06:00:57 +0000
Manifest next update: Sun 14 Jun 2026 06:00:57 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: qXhBlTd6+1WIf0pGvxFydIRwnsfHniU4XcwKdYI32b8=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:b5:db:82:43:29:66:01:b6:65:1c:a9:b1:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Jun 13 06:00:57 2026 GMT
Not After : Jun 14 06:00:57 2026 GMT
Subject: CN=b3c7504ef93b6c75e859f1812b7658cb95ac084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:4e:de:01:fb:a4:9d:ac:fa:ae:4f:10:e5:
f3:bd:43:eb:b8:02:17:34:c8:cf:dd:a9:b1:3d:0b:
61:1f:a8:99:82:4e:58:60:42:aa:66:28:d6:4a:2f:
8e:7f:81:02:3e:60:e2:2b:c8:08:2d:69:49:be:46:
1d:dd:55:f7:a6:b3:80:01:15:af:e3:7f:a4:04:dd:
31:54:50:82:53:00:f9:12:e5:0f:1a:c6:f8:ad:1b:
c2:a1:fe:45:ff:00:f0:55:1b:49:5c:d6:c5:9a:65:
3f:87:ec:f4:ef:aa:6a:f1:95:c6:cb:54:14:0d:10:
0c:c2:e4:c4:db:67:6a:9c:40:88:5c:62:1e:63:69:
87:aa:f3:09:22:1f:23:58:97:f5:69:c4:ee:40:a3:
49:c4:d6:ac:92:cd:c0:97:81:b6:44:4c:28:a4:64:
e6:77:35:c3:24:f6:01:18:b6:37:1c:16:88:be:5a:
27:23:7d:35:51:35:bb:e8:14:04:04:30:e0:65:d8:
2f:fc:82:9d:44:7c:6c:02:27:c9:79:be:cf:cc:58:
7a:91:a4:85:13:e9:91:ad:dd:7f:36:2d:39:43:62:
e2:8d:ea:1e:21:09:cf:cb:08:cb:a2:ee:50:48:ac:
30:fc:0e:c1:6c:22:69:5c:a2:c2:64:3d:4f:44:e7:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:50:4E:F9:3B:6C:75:E8:59:F1:81:2B:76:58:CB:95:AC:08:4A
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:50:7a:33:84:88:58:be:60:52:ce:83:91:71:24:df:8f:60:
f5:88:d3:45:63:47:52:5c:5b:8b:44:b9:92:36:0e:ef:70:a9:
75:b2:04:ce:c5:1c:62:b2:01:35:d5:d5:4b:87:d3:97:ae:1f:
9b:e3:3e:f3:83:49:6f:07:7e:ed:bc:d8:28:8e:f1:c1:b8:af:
3b:bf:92:06:e1:cd:2a:d5:45:f7:86:7b:9e:42:71:e0:b4:a0:
1e:49:27:2d:ee:f9:1a:84:16:af:22:dd:27:84:08:c0:20:0c:
9a:c1:34:0a:5e:18:d3:c9:ad:df:c1:47:9f:29:de:ae:b3:f6:
fb:c9:f1:d5:e8:55:a8:64:44:bf:cf:21:e6:a3:18:3c:98:d0:
dd:ca:f7:de:33:03:55:d8:73:72:ed:33:3e:c8:62:f5:d5:e0:
11:97:5d:b5:d7:d7:f8:a3:ed:f4:ec:cb:29:01:7d:45:f2:95:
98:51:14:3a:e8:f3:6c:0d:57:9f:15:23:48:6d:74:ae:1d:0a:
02:27:02:50:12:2f:48:d9:e4:79:dc:47:bf:89:67:6f:c6:30:
8d:fe:8e:e2:55:96:3c:5d:50:13:48:50:96:55:db:90:df:07:
6c:18:09:00:37:d2:c8:1f:4d:93:2e:bd:7f:f4:90:23:8a:d6:
95:bb:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:18:00 2026 by rpki-client