Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: fUKyr5YLa8cmjwzew2AffXiCJkaM05Nyaa7zOxYPvsg=
Subject key identifier: 26:58:C0:7F:02:FC:78:8E:C9:CA:73:5D:84:65:8F:85:FE:26:57:6F
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01A1BFC1244A45C786BB40455DD5A93609C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0B83
Signing time: Mon 09 Nov 2026 10:01:08 +0000
Manifest this update: Mon 09 Nov 2026 10:01:08 +0000
Manifest next update: Tue 10 Nov 2026 10:01:08 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: WYoO3GlCGiS/sNdyaBMHCoTlnhyj6V2uIZnb01zNHJ8=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:c1:24:4a:45:c7:86:bb:40:45:5d:d5:a9:36:09:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Nov 9 10:01:08 2026 GMT
Not After : Nov 10 10:01:08 2026 GMT
Subject: CN=2658c07f02fc788ec9ca735d84658f85fe26576f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:5f:31:ea:25:47:cd:83:0b:20:83:27:7e:
b9:83:8a:ea:8f:7c:5e:45:78:04:2a:cc:7e:74:16:
92:63:90:96:4a:c8:1a:b8:88:df:5e:47:f6:af:25:
d3:75:f3:6c:11:65:b0:26:07:e9:1b:53:6e:95:b9:
b6:70:5d:5f:6c:cd:f4:74:eb:32:81:ad:bd:57:b9:
cc:e2:38:fc:7e:02:0a:41:c7:4a:57:25:f7:10:fb:
52:e2:0c:a0:a0:7f:2c:93:7c:78:ea:38:b9:fe:88:
bc:dc:d3:70:c7:4b:5c:77:a6:15:e2:cc:55:02:55:
10:98:3e:ac:e5:5f:a7:ce:d4:8f:cb:fe:22:cb:c6:
cb:66:80:2a:f8:87:5c:44:51:e7:03:5d:38:92:d2:
9d:df:3e:38:c5:40:53:80:74:9c:1f:e2:68:ca:4f:
8b:ab:97:65:08:f4:3d:2a:db:c3:96:d5:d2:00:a9:
e2:eb:5e:62:34:2d:c5:ee:b1:82:61:83:0f:3a:53:
c0:e6:91:41:93:32:fd:08:bf:da:33:12:f0:ae:d0:
2c:ed:ec:bb:59:26:c1:a3:a8:b3:54:4c:3e:ce:db:
ad:51:17:54:97:6a:33:b4:45:95:e7:d2:d5:c1:fe:
6b:c1:dc:45:a0:ec:b2:a5:57:b0:e1:ca:46:9c:75:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:C0:7F:02:FC:78:8E:C9:CA:73:5D:84:65:8F:85:FE:26:57:6F
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b9:9d:80:7c:fc:86:43:81:b9:26:9f:3f:0b:21:f9:fe:63:
ea:33:09:a7:57:9e:14:20:dc:fa:d9:b3:f3:06:34:b6:6b:d0:
ff:60:ea:fa:4e:0d:91:38:bc:45:9a:36:9d:d6:cc:0b:67:66:
94:27:48:f1:fb:f6:d7:4a:6b:ea:c2:94:02:d6:0d:ba:de:1b:
b1:eb:59:27:b5:e8:a7:d7:9c:88:df:25:dc:a1:45:64:34:99:
77:2b:23:60:3c:f7:4b:5c:98:b3:e1:8d:a5:87:f9:4e:2b:35:
e5:66:28:d3:6b:39:b9:b6:25:98:ba:fa:77:dc:5e:45:6e:4b:
2d:5c:bc:d6:c1:4c:5c:93:8c:d3:e8:2e:20:8d:09:03:11:6e:
5e:6e:b5:3e:06:2a:5e:e1:25:28:7d:4a:1c:ac:c4:71:87:f9:
94:73:41:c2:f7:df:b5:ed:65:fc:10:6b:99:f6:37:0e:b5:f4:
a1:06:e1:80:b3:ea:d3:55:07:e9:df:cf:28:67:59:30:72:95:
c1:73:d6:a3:ce:32:f9:1d:60:72:65:b9:42:4a:2d:4c:f9:b8:
62:f3:b0:91:60:15:5a:b3:57:38:23:f5:99:2f:4a:e2:26:be:
16:dc:44:44:60:88:02:a2:16:b5:28:ed:26:a9:8d:38:4a:5d:
54:48:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:59:44 2026 by rpki-client