Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: KBbDt71UdeJUAO8UsaYi0PpNF3jKGLklE/xZvjJqWcA=
Subject key identifier: 0F:63:80:50:D1:B9:36:BB:D8:1E:86:06:C2:B9:74:17:DB:E8:E4:AA
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01A0C2C415196928D629061F3BE2E8FCBB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0B00
Signing time: Mon 21 Sep 2026 07:00:25 +0000
Manifest this update: Mon 21 Sep 2026 07:00:25 +0000
Manifest next update: Tue 22 Sep 2026 07:00:25 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: fhCH80fFZP/7xyk55EhnPFKSGHaBslWFdGzvr3mytZg=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:15:19:69:28:d6:29:06:1f:3b:e2:e8:fc:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Sep 21 07:00:25 2026 GMT
Not After : Sep 22 07:00:25 2026 GMT
Subject: CN=0f638050d1b936bbd81e8606c2b97417dbe8e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:b7:66:a4:80:09:1e:01:dd:18:e8:c0:4d:
49:7c:5b:23:ed:60:27:8b:cb:71:9c:2f:59:77:e2:
39:2b:dc:91:94:cd:2f:45:f7:8f:1b:d7:c7:19:73:
6e:5f:60:3d:e0:95:d2:88:77:bf:a4:b6:0c:e4:83:
41:70:03:36:de:87:9f:0f:0f:33:c9:0d:92:80:42:
b5:84:a6:ad:78:ee:18:f4:24:37:da:0b:bf:11:fe:
9d:b8:7f:77:6c:ee:ac:ed:3e:7a:da:69:da:80:ad:
15:17:e8:93:25:28:1b:11:01:4b:42:56:27:16:fe:
d5:06:b8:4c:0c:35:47:6b:19:d2:85:79:56:22:6e:
e1:0d:1e:c8:1d:54:95:b5:25:9f:72:46:83:52:e5:
66:0f:15:2a:5f:f9:2f:22:91:ee:28:09:f6:03:74:
f5:4d:8b:d9:8f:d8:2a:42:8f:5b:c1:9c:df:73:15:
3f:25:d1:b5:cf:97:89:a0:ed:92:d8:84:11:09:c3:
8d:8d:f9:bb:80:36:9b:d1:b4:56:7b:17:53:8d:ec:
01:63:7c:3d:17:fa:ae:4c:b3:39:da:ba:8f:4a:cf:
89:a8:0b:fc:ae:ab:33:f5:7d:e5:89:c9:53:a2:32:
e3:1c:03:eb:80:f1:ad:16:22:f0:03:7a:60:d5:9d:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:80:50:D1:B9:36:BB:D8:1E:86:06:C2:B9:74:17:DB:E8:E4:AA
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:68:3c:1d:c3:74:f7:27:c4:39:55:fc:ab:2a:ef:37:2e:b6:
c7:75:4d:98:9c:10:0c:bc:1d:5e:65:e0:a6:77:e6:d5:08:63:
1c:07:1b:64:c5:46:e9:07:78:97:98:95:2d:30:ba:65:c0:a9:
30:c3:4e:d0:ce:46:d3:73:9a:ca:63:7e:0c:a1:d8:78:61:12:
a0:6b:ea:46:c3:30:85:06:75:ce:52:9b:01:5d:5a:fb:ec:6e:
7f:39:3a:6c:3a:e5:15:72:70:7d:d5:c0:d7:8b:7c:a8:00:5f:
d1:24:67:d9:b3:73:fe:fa:be:08:ab:2f:67:96:1d:6f:4c:7b:
e4:ec:0a:90:b2:ec:d3:08:4e:50:f8:9e:ec:7f:b5:96:64:7c:
91:8a:c4:3a:7a:11:cd:cc:cc:24:b7:1d:e3:39:1c:c6:e6:ad:
1a:34:e7:6e:99:0d:07:13:86:e3:08:b9:25:29:73:2e:b3:15:
98:9b:f7:99:dd:f7:0f:05:42:56:0a:d9:bb:68:72:1f:7e:82:
92:bb:c5:98:df:8b:1a:7d:48:80:90:85:8b:c1:32:bc:87:72:
f3:9a:c4:3b:26:d1:98:78:a0:db:2f:54:1e:cb:e4:ac:7f:1e:
cc:0f:7a:44:20:9a:7d:04:3c:47:43:16:ee:03:23:a8:4d:89:
2b:df:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:13 2026 by rpki-client