Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: fRrJp9lv0fiYihVJ6r1Wh1+FRscr9ehvpXfONViEM8g=
Subject key identifier: 63:6B:0C:C8:D3:A7:42:E9:F0:4A:B5:8A:94:2E:F2:0C:40:11:FC:FD
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019E1BD8FE1FC2606178B14E69F495E08E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 07DB
Signing time: Tue 12 May 2026 11:01:06 +0000
Manifest this update: Tue 12 May 2026 11:01:06 +0000
Manifest next update: Wed 13 May 2026 11:01:06 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: wr01KdL2i33/R67mEP1yHGEY0kDvaE/9ZaxCera4ya0=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:fe:1f:c2:60:61:78:b1:4e:69:f4:95:e0:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: May 12 11:01:06 2026 GMT
Not After : May 13 11:01:06 2026 GMT
Subject: CN=636b0cc8d3a742e9f04ab58a942ef20c4011fcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:ec:7b:a0:fb:42:a1:e4:7e:12:7c:47:bc:
1f:e9:96:ab:d3:3c:ca:3b:78:9a:80:3f:84:ae:1d:
e8:1c:7b:e2:58:8a:63:1f:5c:c9:94:c6:10:a1:37:
92:f8:52:22:77:f4:fd:9e:31:b6:75:1a:3f:44:e0:
70:7d:b2:67:18:36:27:a3:ca:6a:e8:0e:d5:f7:30:
4f:b6:5b:67:d8:e1:b5:71:70:c5:e6:8f:3f:15:bf:
48:4e:35:d1:9d:d8:ad:f7:6f:99:0c:7f:bc:45:4b:
aa:29:73:e0:ac:55:95:2c:e6:10:fd:ab:43:37:45:
3d:ea:b8:11:4c:6d:ed:bd:c8:5c:f7:fd:36:7d:51:
9e:a9:24:5b:4a:95:27:3a:0c:3f:6d:7f:81:5d:cc:
1a:e9:56:06:27:21:ee:8a:5d:57:8d:f0:bb:57:50:
b8:80:55:b4:84:12:00:1a:6a:dc:ad:2f:16:89:19:
8f:be:39:17:89:61:af:75:57:44:70:4e:4c:99:c6:
cd:5d:5e:60:15:2a:ef:b5:c8:1a:a1:77:0f:64:21:
dc:13:dc:06:e6:bc:35:e2:02:77:16:1e:83:f0:78:
1a:3d:4d:a5:91:96:f6:38:96:6e:2e:68:87:ce:4d:
c8:99:44:d3:8a:4b:e7:4d:b2:0b:12:aa:74:ab:78:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:0C:C8:D3:A7:42:E9:F0:4A:B5:8A:94:2E:F2:0C:40:11:FC:FD
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7e:e2:fa:3d:41:e4:d4:29:b5:0b:2b:c2:6d:77:a8:06:e8:
99:2e:f8:c4:e7:f7:74:86:6f:56:ee:21:02:9a:94:1e:1f:1e:
b5:96:c8:fe:d3:1d:25:e3:fb:70:64:5d:66:85:a4:b2:25:1e:
11:f1:5d:6b:79:b5:63:2a:c8:27:c2:31:b2:7c:3e:8d:6d:44:
52:28:9c:43:7a:c7:6d:27:bb:89:6e:56:a9:2a:1f:88:17:11:
c1:83:0d:ce:56:bb:56:fe:21:35:9e:61:34:7f:b3:b3:33:84:
16:ae:ea:8a:e9:4d:09:c3:dc:a5:e2:05:ca:98:65:d3:3c:5c:
a8:c1:fa:11:d5:10:54:1f:35:ac:fe:f9:2f:f5:a9:da:5f:c6:
5e:07:ab:52:b8:40:85:88:67:b8:4d:ea:b8:be:85:b5:ef:62:
73:57:44:18:01:02:9f:95:cd:0b:75:12:b8:8f:62:4a:27:82:
04:ad:49:00:3b:2d:d8:53:65:09:6d:c2:b9:dd:86:53:07:65:
5b:4a:0d:7e:3e:3c:78:1d:e0:76:36:4e:64:56:12:cc:1e:eb:
de:5d:b3:92:c7:8c:d0:bd:9b:2f:a1:60:d4:c0:4b:28:a5:19:
8d:be:46:26:11:d3:a6:5f:4d:e8:87:6a:b2:c5:2b:04:e2:96:
7e:ca:5d:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2P4fwmBheLFOafSV4I6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjYwNTEyMTEwMTA2WhcNMjYwNTEzMTEwMTA2WjAzMTEwLwYDVQQD
Eyg2MzZiMGNjOGQzYTc0MmU5ZjA0YWI1OGE5NDJlZjIwYzQwMTFmY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeTse6D7QqHkfhJ8R7wf6Zar0zzK
O3iagD+Erh3oHHviWIpjH1zJlMYQoTeS+FIid/T9njG2dRo/ROBwfbJnGDYno8pq
6A7V9zBPtltn2OG1cXDF5o8/Fb9ITjXRndit92+ZDH+8RUuqKXPgrFWVLOYQ/atD
N0U96rgRTG3tvchc9/02fVGeqSRbSpUnOgw/bX+BXcwa6VYGJyHuil1XjfC7V1C4
gFW0hBIAGmrcrS8WiRmPvjkXiWGvdVdEcE5MmcbNXV5gFSrvtcgaoXcPZCHcE9wG
5rw14gJ3Fh6D8HgaPU2lkZb2OJZuLmiHzk3ImUTTikvnTbILEqp0q3jViQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNrDMjTp0Lp8Eq1ipQu8gxAEfz9MB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsX7i+j1B
5NQptQsrwm13qAbomS74xOf3dIZvVu4hApqUHh8etZbI/tMdJeP7cGRdZoWksiUe
EfFda3m1YyrIJ8Ixsnw+jW1EUiicQ3rHbSe7iW5WqSofiBcRwYMNzla7Vv4hNZ5h
NH+zszOEFq7qiulNCcPcpeIFyphl0zxcqMH6EdUQVB81rP75L/Wp2l/GXgerUrhA
hYhnuE3quL6Fte9ic1dEGAECn5XNC3USuI9iSieCBK1JADst2FNlCW3Cud2GUwdl
W0oNfj48eB3gdjZOZFYSzB7r3l2zkseM0L2bL6Fg1MBLKKUZjb5GJhHTpl9N6Idq
ssUrBOKWfspdUg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:08 2026 by rpki-client