Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: CfJ0QKeshDbArGhxBhIyH2WzW1CHl4QLC03RhCO+s+U=
Subject key identifier: 67:24:CA:23:02:3B:89:AD:DD:F4:7D:8A:FF:5B:82:64:82:28:30:B5
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019DA3416B36F426AC75FD8FA9450E5B870D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0962
Signing time: Sun 19 Apr 2026 01:01:06 +0000
Manifest this update: Sun 19 Apr 2026 01:01:06 +0000
Manifest next update: Mon 20 Apr 2026 01:01:06 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: tGmB3Csc9x/ZcnqPvGd+7gw/a/JoOr1V3G2R2PK59Qo=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:6b:36:f4:26:ac:75:fd:8f:a9:45:0e:5b:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Apr 19 01:01:06 2026 GMT
Not After : Apr 20 01:01:06 2026 GMT
Subject: CN=6724ca23023b89adddf47d8aff5b8264822830b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:94:db:7b:cf:ea:fe:17:d4:58:cf:aa:28:
76:a8:d8:b1:99:c9:57:32:36:cd:68:9a:34:e3:c2:
15:20:3b:31:2c:e8:12:f2:82:a5:72:83:80:69:a8:
4e:42:e8:a6:e9:58:dc:d2:1b:90:56:fe:69:f4:97:
2f:29:92:2b:93:af:e7:b8:7d:bf:c8:6d:c9:23:ee:
2e:8a:ee:e3:36:09:21:02:1c:bf:ee:1d:b0:88:7c:
6e:8c:d8:81:b6:14:e9:86:db:8f:98:db:db:54:4c:
b3:4a:64:c5:61:34:16:ce:86:f8:24:c8:9e:cf:34:
11:fc:ff:a4:2e:4b:ba:4e:28:47:21:fc:6c:20:af:
6e:9c:1f:74:5f:da:84:20:22:ef:ae:77:49:79:9c:
55:b7:e6:e6:74:a6:55:19:f2:53:ba:ab:e3:2e:a0:
0d:ed:7b:c1:04:88:35:0f:7b:a3:35:fa:7a:20:e4:
1a:cc:c0:da:3e:87:15:ad:69:63:99:3a:10:cd:4a:
34:ce:1a:bf:05:79:d2:43:55:8b:16:37:f5:20:de:
7e:cc:b7:a4:0a:eb:67:3f:1a:b3:1e:c3:77:66:8c:
73:f4:61:9b:e0:2b:18:80:ea:ac:1a:21:b2:6a:09:
27:59:79:10:34:6c:40:49:5b:93:a2:a5:c0:ff:98:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:CA:23:02:3B:89:AD:DD:F4:7D:8A:FF:5B:82:64:82:28:30:B5
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:6f:45:ba:e5:22:23:3a:36:7f:8e:e8:50:99:99:43:b2:
1d:d3:6d:7f:86:94:1d:29:31:39:f4:9f:7a:c6:a2:d7:28:21:
5f:33:be:ce:3f:30:98:51:20:c6:73:16:59:3b:ea:93:71:3e:
cc:1c:78:45:13:52:0e:e8:69:d6:ea:29:aa:da:77:65:40:b2:
e5:02:00:fe:2e:af:44:79:2b:ca:78:1b:d1:fc:fe:e5:00:fb:
42:52:d7:73:67:ab:d3:94:22:b2:85:fa:c3:5c:d4:cb:a9:3c:
35:75:0d:ac:2f:9b:99:31:aa:e7:04:c0:fe:14:1d:18:07:44:
11:8e:4b:3c:40:87:e4:25:ed:48:a4:65:00:0f:82:c4:4f:01:
89:cd:2f:97:b5:8f:59:8f:1b:c4:d9:9c:f8:e8:14:2c:0a:91:
3f:20:0e:8a:00:50:3c:58:f0:58:c1:bf:3b:16:42:af:5b:51:
a3:99:3c:f2:23:02:9a:4d:da:22:00:0c:a1:94:f9:73:bb:61:
02:c7:33:5e:bd:7b:64:24:21:0d:e8:f0:3c:73:fc:d8:ef:19:
55:4a:38:ec:08:72:67:67:9a:85:40:76:7f:39:4f:75:ca:34:
53:a3:07:78:d7:35:17:61:18:e7:fa:54:47:9a:3f:37:30:57:
43:84:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:57:06 2026 by rpki-client