Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: QLFA5WDoN3f6h7NIAt9eq5/wo4Ix8DR9YnW/of7xb0s=
Subject key identifier: A7:30:2D:49:16:C9:E7:B0:E2:DF:61:B1:C2:3E:94:18:89:92:84:CA
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 019D24DEB87074C8D6F594BC956E90C5B31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 0159
Signing time: Wed 25 Mar 2026 12:01:09 +0000
Manifest this update: Wed 25 Mar 2026 12:01:09 +0000
Manifest next update: Thu 26 Mar 2026 12:01:09 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: NYdtPrPa9HEGi2iV9bMOGnTJqymdNYQNC4HzHRk2gt4=)
2: szRLM3Az0xzE-SZ2cP8IE4cXA8c.asa (hash: CVKDj1/53BYjcVJSpA6JPeV/CJrhFA+lF2cwIdYQJr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:b8:70:74:c8:d6:f5:94:bc:95:6e:90:c5:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Mar 25 12:01:09 2026 GMT
Not After : Mar 26 12:01:09 2026 GMT
Subject: CN=a7302d4916c9e7b0e2df61b1c23e9418899284ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:81:af:d4:3d:58:37:f1:3f:7f:07:6c:3a:
c8:7e:72:eb:11:8e:f4:27:69:cc:45:e2:0c:ec:e8:
fc:99:01:d1:e8:62:e5:1d:c8:4b:fe:71:32:fd:19:
33:cc:3f:6a:72:28:0f:4b:c1:4a:0f:c9:d0:64:32:
58:dc:8b:12:42:2e:d9:52:34:14:f6:a2:d5:50:c6:
3e:48:97:37:36:e1:58:24:af:47:2a:e4:8c:1d:db:
ca:4a:67:77:3e:18:c3:bf:d8:8d:b4:d7:bb:f5:62:
8e:fe:8a:54:ef:5f:68:3c:2d:f0:b4:19:5c:40:1c:
18:42:28:8b:44:b7:9f:97:b9:cc:82:6a:42:a6:a4:
17:0f:68:f0:c8:eb:93:56:b9:61:22:9f:32:4d:d5:
63:3b:7f:ab:72:26:fb:d3:93:9c:ff:8d:cd:e0:2b:
c4:b9:90:49:aa:63:73:8f:7e:a1:7f:43:6a:ac:a4:
ba:d3:9a:a2:75:be:75:83:cf:c9:34:53:bb:e5:4e:
3a:36:67:15:46:8f:d5:5d:1e:b2:6a:5a:ce:cb:34:
80:f2:bd:6e:ee:1a:8f:30:b0:0c:4e:67:3d:fe:ee:
3e:7e:55:01:24:92:69:27:58:46:47:89:19:48:e2:
66:12:3e:a7:9e:71:64:5b:19:c8:f1:62:52:bf:69:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:2D:49:16:C9:E7:B0:E2:DF:61:B1:C2:3E:94:18:89:92:84:CA
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6b:2c:a7:3c:b8:ce:05:8e:2f:0a:fd:af:01:1a:da:1d:2d:
a2:57:3f:a3:02:ba:ed:1b:6c:37:2d:ff:ba:87:ad:25:09:34:
7d:19:13:32:55:87:50:65:c6:b5:22:f2:cb:c5:85:b0:ed:8f:
af:4a:ed:6e:21:70:e0:e1:c9:c6:94:9b:fb:40:91:40:1e:3e:
02:67:11:6c:aa:31:7b:33:91:7a:8f:ff:9e:75:1e:b5:a2:7d:
cc:23:d2:57:4c:8d:80:59:2d:fb:82:84:9a:52:be:b2:a1:99:
5b:f4:61:63:aa:3a:a8:68:0d:ce:a2:84:e9:7e:18:c9:50:f5:
a4:a1:42:2a:14:7c:b3:f9:98:b3:72:dc:22:7d:60:3d:5a:db:
76:32:10:f6:ef:9c:e3:c6:f6:32:ca:af:8c:bd:dc:cc:8b:15:
56:a8:6a:f7:f2:73:c5:a0:68:64:b6:bb:f0:ae:ff:02:be:7a:
b3:66:78:d1:a8:e7:0e:83:d1:fb:bb:13:87:ec:cd:c9:3b:0e:
f4:d5:f3:d8:39:ce:82:57:e6:4e:2b:79:83:d3:a5:b2:9e:29:
30:79:b8:47:41:82:66:91:68:04:b4:9b:0a:94:54:b6:b0:76:
73:d5:48:a4:a9:ed:3e:73:ab:23:8d:f6:9e:30:bc:e4:e8:37:
dd:d0:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:44 2026 by rpki-client