Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: v6OL9Z5xE09vo3YxkpGANhjRAjlZZIWeOkD9qbHv9qI=
Subject key identifier: 3F:5B:A0:1C:A3:35:A8:50:17:4E:0D:1B:9D:5A:A9:96:CB:45:33:77
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019D2628815641CA63FCA739DA0404D46DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 05A5
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: D6V8tG4KqGGPKXq00tcQezEfv1oP0ul9Fmqocna8h8c=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:81:56:41:ca:63:fc:a7:39:da:04:04:d4:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=3f5ba01ca335a850174e0d1b9d5aa996cb453377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:b3:fd:01:8a:ad:4e:68:2f:b3:06:a2:fb:
a1:ab:26:10:cb:42:67:4b:30:74:9f:97:a7:32:46:
fa:28:5e:33:4e:a7:3c:18:ba:ee:0d:87:73:d5:10:
37:29:99:ff:43:62:61:a3:77:05:cc:5a:4a:a6:f9:
f8:c4:6a:e9:93:42:25:f2:d4:0c:fb:bf:64:62:6e:
ad:33:26:a8:77:f9:17:3a:36:0c:e0:84:04:5b:c5:
f1:0d:12:ef:06:c3:fb:11:f0:7c:60:8e:84:65:26:
c3:bc:17:a9:cd:f8:0c:52:51:80:7a:2e:bd:73:84:
aa:78:81:75:8e:40:18:5b:ea:50:9c:40:45:d6:72:
1f:f7:ad:a5:bf:3c:fc:27:6d:88:07:c8:9a:ec:f8:
ad:66:33:8c:fa:34:ba:ec:7a:7a:a0:48:60:a7:76:
85:a8:ac:a5:5c:48:b0:23:80:0b:51:43:86:ef:66:
0a:da:7f:db:8b:d0:e9:62:f0:83:5e:84:7c:26:03:
b5:be:84:f7:b5:37:50:81:0f:bb:b9:10:72:28:3e:
9d:7c:c7:d9:7b:56:cf:77:88:cc:a1:97:51:1c:b3:
a2:68:ad:d0:c5:95:e4:25:c9:9b:2a:0c:7c:d2:84:
f9:dd:ca:09:30:25:60:6b:d2:03:96:a8:f4:50:fa:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5B:A0:1C:A3:35:A8:50:17:4E:0D:1B:9D:5A:A9:96:CB:45:33:77
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:24:29:66:08:eb:d2:33:59:42:c3:c5:cb:45:16:38:e6:b2:
9a:06:1b:e3:83:db:03:f5:ff:aa:8b:f7:1e:e5:c2:a0:bc:85:
d3:d0:c7:f5:05:7a:02:8f:60:d7:96:6c:f6:49:3a:e8:6a:a2:
0d:39:4d:ec:e3:d7:07:2b:9a:9f:7d:33:af:1d:9f:49:3f:06:
86:ca:af:a2:42:2c:be:e9:6d:0d:56:ad:fd:e3:03:7b:43:c8:
37:38:46:60:6d:2e:f5:12:23:cd:55:35:c9:27:09:66:f3:ba:
ee:33:72:17:f7:0d:01:3e:5f:3f:22:ba:69:5a:17:a1:9d:bc:
d6:da:19:47:28:94:a5:bf:a5:cd:56:25:67:68:4b:cd:c2:56:
8e:e3:b4:5b:30:39:8f:82:b8:de:07:12:ab:96:7f:bc:1e:a9:
e6:bd:08:ba:5b:81:d0:fb:ab:0d:9f:e5:df:5e:26:95:69:3f:
37:d5:d6:6c:7b:9b:fb:bc:11:40:7c:0b:01:9f:c6:59:aa:db:
64:cf:56:59:28:22:5b:45:a9:49:91:4f:1d:97:1c:25:9b:83:
b8:56:e5:1a:42:f8:5e:4c:31:cc:25:34:da:fe:67:06:a1:fe:
ca:4d:41:22:a2:0d:5a:20:30:d1:17:20:f9:77:88:5e:d6:db:
07:93:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:11 2026 by rpki-client