Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: GhnTTRNxI8CZxNlOt8u1H5Ey3Tv8vnvq2O7T/+4ja40=
Subject key identifier: 13:6A:77:B6:F3:41:EA:8D:6F:D1:7B:B1:57:A3:3D:54:96:21:95:77
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019CAA2146F9495B7BD6FC86511CF3C182F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 08E1
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: yR77dGC7sm1FVSp5/EWcIXIWENgOltI63+Ho2Z9RExg=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:46:f9:49:5b:7b:d6:fc:86:51:1c:f3:c1:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=136a77b6f341ea8d6fd17bb157a33d5496219577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:a9:18:7e:a8:49:64:1e:8b:11:43:db:07:
84:47:7d:cb:6d:b6:52:84:23:f5:89:54:af:1b:3d:
3b:ee:fa:cf:66:44:88:42:bf:e2:41:3a:6c:42:46:
e2:3e:ca:e4:17:69:19:ea:2a:eb:01:9b:12:41:9a:
7d:1e:e2:c8:d5:d4:bb:f3:04:cc:c1:c9:c2:3a:cc:
dd:6e:83:72:7d:f6:11:03:ac:c1:77:2d:95:17:76:
66:a7:93:8f:d4:b7:0b:7e:cd:63:cd:77:8b:59:9f:
25:94:79:bc:49:53:72:7e:28:97:60:4b:84:1f:e7:
12:ae:20:bb:d3:e3:35:0f:eb:06:7e:c6:d7:84:47:
62:98:c5:7a:b2:cf:9f:9c:51:8f:cf:e3:78:dc:31:
38:33:a3:5a:75:4d:53:39:0e:91:f6:96:df:c6:dc:
7a:52:02:fb:d5:dd:5d:f8:32:aa:bb:3e:cc:39:41:
56:65:9d:78:9e:57:be:07:fd:31:4f:fb:0c:ae:8e:
de:ae:5e:48:17:57:83:14:8f:37:a6:b3:43:29:0d:
eb:61:c1:b0:ad:ae:64:44:ba:a8:60:ea:5d:07:82:
2e:81:98:38:d0:a0:30:fc:87:e5:80:8e:98:5d:b2:
b6:33:80:6a:00:db:95:06:1a:99:8d:ab:ec:50:02:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:77:B6:F3:41:EA:8D:6F:D1:7B:B1:57:A3:3D:54:96:21:95:77
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:43:3f:95:77:80:6f:22:86:48:a6:80:87:7a:48:b2:d5:6a:
49:8c:11:79:2e:ab:94:d0:78:d5:2c:7f:c4:95:02:67:3d:aa:
f0:4a:3d:ac:2b:c7:3a:aa:9d:59:b8:50:44:e7:f9:e4:55:2a:
a4:fd:68:fe:08:b8:22:5e:50:00:7a:ec:9e:0e:ed:cf:20:21:
ca:bf:21:78:81:6b:f0:30:9b:cf:6a:2f:c0:78:7a:12:a5:0b:
a7:53:da:6d:b8:d1:5f:58:7f:e5:09:93:4a:9f:dd:57:bb:33:
93:45:59:78:5b:24:40:a5:33:ec:5e:03:b2:b2:d3:68:7d:0d:
de:95:4c:fb:ae:67:25:79:c3:89:98:04:41:64:cd:70:b0:36:
7a:d3:70:fa:06:93:a3:07:ed:7b:fc:8f:9f:a6:1a:50:be:ac:
e3:7e:27:c6:e5:8a:58:79:06:ac:a8:b7:b2:9d:6f:24:4c:b5:
f9:80:a2:61:e0:15:d2:70:c5:51:94:9d:fe:d5:f6:ee:9d:3a:
6e:7b:5b:0c:3a:61:1c:40:a9:6a:b5:ec:cb:1a:92:cb:3f:9a:
9d:96:55:0b:6d:a2:0b:16:3a:be:47:6f:30:1a:fc:f6:11:78:
e6:01:e6:24:d2:d1:c3:86:25:9c:76:06:47:20:88:3f:ed:fd:
20:41:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:40:21 2026 by rpki-client