Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: i/99ICO4YG3SJT5UjMmSkoayqUSQi7CZJRTccswMKQg=
Subject key identifier: EF:18:7D:52:60:F9:86:35:17:61:7E:7A:5D:27:0A:67:F8:E1:97:63
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019CAC7DD01FC7510722D2B420712D019843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0566
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: oEpVtfLJHUWQiSxHIZHkcwHOqVALX2MypChR8DMbUJ4=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d0:1f:c7:51:07:22:d2:b4:20:71:2d:01:98:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=ef187d5260f9863517617e7a5d270a67f8e19763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:90:e4:c0:3d:00:4d:ee:c4:c8:2b:57:dc:
60:39:26:3c:e8:55:81:27:59:4c:60:66:a0:e6:88:
30:cb:ad:2a:65:3f:fa:45:60:c0:65:56:80:99:35:
bc:30:d7:a0:66:60:03:b2:92:9f:73:54:5d:83:a1:
58:f1:2b:3c:6f:42:05:0b:59:b7:c4:e9:e0:6a:e2:
d1:a5:d9:8f:b2:25:ce:24:8b:9c:63:e8:02:6b:3d:
36:d4:3f:9b:1a:9e:e2:42:a7:b6:b9:94:90:e7:cd:
aa:7d:8e:6b:bd:ae:6e:4a:43:e0:af:19:a2:e1:e7:
1a:71:ef:42:40:8b:f7:05:e3:58:a5:d5:35:39:2b:
a6:d4:a0:e3:96:de:54:d3:ab:cc:34:a5:be:6f:0e:
0d:6a:36:c0:58:7a:7f:b6:49:53:46:03:75:16:d0:
9d:4f:1e:57:fe:34:f9:3a:26:8a:d0:93:35:d2:a1:
f0:8c:e9:7b:47:ff:6f:1e:fa:a5:30:d5:cb:49:52:
91:3b:99:07:93:53:55:51:d5:6d:4e:69:b9:2c:75:
ab:da:f5:ac:f2:ef:5b:16:85:83:51:38:81:db:fe:
28:c3:e6:95:13:95:fd:90:30:88:97:89:da:c0:fb:
e6:98:e9:41:fd:f9:f5:6d:19:53:52:51:9c:47:97:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:7D:52:60:F9:86:35:17:61:7E:7A:5D:27:0A:67:F8:E1:97:63
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d7:63:62:04:4e:75:3f:e3:f4:6c:37:91:17:f1:42:28:f8:
4b:5c:d0:c6:69:1c:fc:66:14:75:39:b4:68:e7:83:d3:46:36:
aa:73:45:4a:54:fe:ff:f0:21:42:80:1e:dc:ee:41:ef:81:0f:
fd:75:11:59:23:a1:74:ad:27:64:f6:76:39:bd:f3:7c:85:aa:
cb:ba:17:bb:17:b3:39:1e:d7:a1:f9:86:e1:db:05:ed:47:64:
b7:c9:2a:e4:e6:d3:51:e5:7c:8e:6b:b8:7e:ad:5a:c2:32:23:
8a:ad:8f:4d:0c:25:9d:28:8e:cd:53:3d:8d:6a:a3:1f:1e:58:
bb:be:e7:32:92:b6:c8:87:bb:93:cc:a9:c1:fc:86:a5:13:d9:
b2:67:c5:5b:17:63:86:21:81:a4:11:18:bc:48:75:7d:4d:1f:
fa:71:bb:16:c2:fb:7a:7f:4f:bc:a7:19:8a:2b:47:e7:43:b9:
38:5f:35:a5:59:61:1a:27:94:6d:03:ef:2f:9b:fb:dc:89:c0:
44:5b:85:9c:2f:96:39:b8:a5:de:b4:1c:5e:de:30:91:dd:59:
8e:7c:11:11:64:f3:92:29:a7:c6:36:a8:8f:62:3a:91:76:52:
4d:45:0e:ff:e4:1a:17:07:3a:eb:2e:1b:1f:e7:4e:06:6e:12:
b8:20:ca:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfdAfx1EHItK0IHEtAZhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTEyZWQ2M2E0ODRjMDNkNGMzYzI3MWNiMmVmZjA1NTNl
MTIzNzAwHhcNMjYwMzAyMDMwMDUyWhcNMjYwMzAzMDMwMDUyWjAzMTEwLwYDVQQD
EyhlZjE4N2Q1MjYwZjk4NjM1MTc2MTdlN2E1ZDI3MGE2N2Y4ZTE5NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwyQ5MA9AE3uxMgrV9xgOSY86FWB
J1lMYGag5ogwy60qZT/6RWDAZVaAmTW8MNegZmADspKfc1Rdg6FY8Ss8b0IFC1m3
xOngauLRpdmPsiXOJIucY+gCaz021D+bGp7iQqe2uZSQ582qfY5rva5uSkPgrxmi
4ecace9CQIv3BeNYpdU1OSum1KDjlt5U06vMNKW+bw4NajbAWHp/tklTRgN1FtCd
Tx5X/jT5OiaK0JM10qHwjOl7R/9vHvqlMNXLSVKRO5kHk1NVUdVtTmm5LHWr2vWs
8u9bFoWDUTiB2/4ow+aVE5X9kDCIl4nawPvmmOlB/fn1bRlTUlGcR5dLDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8YfVJg+YY1F2F+el0nCmf44ZdjMB8GA1UdIwQY
MBaAFNqhLtY6SEwD1MPCccsu/wVT4SNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTIt
OTFhMDAzNGE5ODllLzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYTM3NGYtZDY5NC00NWUyLTk0ZTItOTFhMDAzNGE5ODll
LzEvMnFFdTFqcElUQVBVdzhKeHl5N19CVlBoSTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtdjYgRO
dT/j9Gw3kRfxQij4S1zQxmkc/GYUdTm0aOeD00Y2qnNFSlT+//AhQoAe3O5B74EP
/XURWSOhdK0nZPZ2Ob3zfIWqy7oXuxezOR7XofmG4dsF7Udkt8kq5ObTUeV8jmu4
fq1awjIjiq2PTQwlnSiOzVM9jWqjHx5Yu77nMpK2yIe7k8ypwfyGpRPZsmfFWxdj
hiGBpBEYvEh1fU0f+nG7FsL7en9PvKcZiitH50O5OF81pVlhGieUbQPvL5v73InA
RFuFnC+WObil3rQcXt4wkd1ZjnwREWTzkimnxjaoj2I6kXZSTUUO/+QaFwc66y4b
H+dOBm4SuCDK3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:08 2026 by rpki-client