Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: D7T58St5n/Sbu/ImSOMeo/QcD3ONToEMV/Ep9LY5Mew=
Subject key identifier: 3E:68:8C:8E:EB:57:B2:CA:6C:EF:20:EE:BF:B0:83:37:9B:EE:D0:C8
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 019D26CCE9FC43AB2A32C5EB003474D37A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 015A
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: TMuSr2Y6ZTsKCGCqjSVc+16ExchS+UOdKcmN7QawtUk=)
2: szRLM3Az0xzE-SZ2cP8IE4cXA8c.asa (hash: CVKDj1/53BYjcVJSpA6JPeV/CJrhFA+lF2cwIdYQJr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e9:fc:43:ab:2a:32:c5:eb:00:34:74:d3:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=3e688c8eeb57b2ca6cef20eebfb083379beed0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:bd:3a:fd:b0:15:e7:b1:2e:75:f7:da:18:
04:3e:c8:a8:f0:0f:d4:69:ef:b5:89:73:4f:b6:28:
dc:02:14:6b:9a:4e:01:8f:e9:97:64:81:8e:15:05:
fe:ab:5c:c0:6f:33:bc:3d:76:fe:08:a3:a0:c0:16:
3d:9c:e0:9f:2e:2e:27:b2:a9:dc:19:69:26:39:8d:
73:ac:a7:bb:52:2b:80:4b:af:c0:60:67:f4:d5:96:
2c:ee:93:19:4e:b8:75:4f:f2:6d:fc:e9:9d:45:4f:
57:4d:74:5f:d2:5d:76:5a:e6:6c:bf:bd:7b:81:fc:
6b:96:21:30:27:43:04:0a:63:79:15:7d:ed:e8:f0:
79:94:7a:8a:c4:82:92:d9:72:5f:5d:79:b1:7f:d5:
c1:0a:56:24:7a:6e:f0:81:bc:9b:9a:27:4d:e6:c0:
65:0d:de:57:f0:0c:23:f1:ee:21:b0:74:ba:bc:32:
96:c9:49:9c:cd:29:2c:95:b8:21:58:f1:0f:ff:9d:
b2:5e:bb:33:bf:e6:f2:35:08:8a:15:e9:1a:e8:4c:
0d:c8:e1:0a:80:35:30:8b:a6:01:69:f0:7c:a3:d9:
29:af:6b:34:a3:f1:2d:56:70:c7:69:31:9e:ae:ae:
94:20:06:12:0a:15:e3:64:7f:32:0f:af:8e:09:89:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:8C:8E:EB:57:B2:CA:6C:EF:20:EE:BF:B0:83:37:9B:EE:D0:C8
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:c3:82:a4:49:99:e3:cc:71:70:af:2d:ac:9e:f7:2a:ee:
93:58:09:6a:f4:01:45:73:35:5d:89:03:80:10:6b:9c:45:e5:
89:ee:ff:53:19:14:ed:4b:07:4b:a6:65:66:48:40:5c:07:e9:
f1:35:cc:86:ce:da:df:ed:02:ae:15:87:14:57:83:9a:e2:92:
97:69:9b:d9:9b:c8:55:88:86:67:0b:ed:d8:20:f0:5d:6b:6e:
cd:4a:63:87:72:04:21:72:cd:94:15:d0:0f:a3:7c:f8:ab:af:
3a:37:f7:d6:ab:fc:8c:06:62:c3:b3:ab:ac:e0:b8:c8:35:2d:
f9:8f:a8:4c:a4:13:01:c0:7c:7d:a4:84:93:09:7d:a6:15:a6:
54:ce:19:f5:fa:03:a2:e0:7b:6b:cc:b4:04:73:08:d0:68:bc:
ba:a2:ad:36:e4:72:c2:17:12:fe:86:cb:2e:ab:f1:3d:5a:31:
34:c4:2a:5b:fa:6d:e3:05:57:ba:3b:1f:ab:9d:8a:6f:c4:31:
91:25:d3:4d:6c:f0:c5:c4:d6:d2:b1:b5:74:b5:5a:0b:b4:3e:
15:6c:d9:96:0b:c7:e4:1b:49:44:34:28:92:aa:56:ea:b0:b3:
59:ef:5d:6a:ed:9c:eb:fc:3e:e5:0f:7f:a5:11:fb:53:39:4a:
14:ee:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:53 2026 by rpki-client