Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
File: 2q_pD50IEzTMko7e6bxzFUBwjf0.mft (raw, json)
Hash identifier: A38fTCKypi2rKvGGrDq8URKNOUymvdEWZ7IOEgAX5p8=
Subject key identifier: 3B:1A:E9:4F:5F:29:05:60:06:BF:42:22:54:D8:03:A6:BB:2E:85:D6
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 019F8FEBC4C52FEE40DB7A3732E2084D1B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
Manifest number: 0D1B
Signing time: Thu 23 Jul 2026 17:00:20 +0000
Manifest this update: Thu 23 Jul 2026 17:00:20 +0000
Manifest next update: Fri 24 Jul 2026 17:00:20 +0000
Files and hashes: 1: 1JQv5SOtSeXXkOrfiZJVS0aL7xU.roa (hash: AMT4fhj0NQTYFJqA1ljnLjH+q0LAKk7Eo+Nf4uYT4Lg=)
2: 2q_pD50IEzTMko7e6bxzFUBwjf0.crl (hash: 6bclNZWfPL73+eIzBsZ/PHA45ZBrPNNznobkDLiokQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c4:c5:2f:ee:40:db:7a:37:32:e2:08:4d:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Jul 23 17:00:20 2026 GMT
Not After : Jul 24 17:00:20 2026 GMT
Subject: CN=3b1ae94f5f29056006bf422254d803a6bb2e85d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:38:4e:6e:7c:be:68:e0:4a:7b:9c:2c:26:
6c:8e:50:26:48:51:fc:1d:bc:bd:8e:cc:13:8a:e1:
99:7c:19:5e:4c:d1:5c:75:be:b4:9f:c3:bd:13:0e:
33:49:a0:b2:be:f5:1f:99:e7:52:13:a7:41:1e:8d:
5b:a5:02:2d:ef:40:7a:5d:66:56:9d:74:0a:c5:d1:
eb:58:b4:db:df:7f:4d:db:1c:47:26:5a:d1:ef:cb:
84:be:a2:50:5f:76:84:d1:cd:e0:52:a7:ec:19:2e:
3e:13:c1:e8:e0:9a:48:c6:5a:9d:40:33:88:d0:8f:
f8:7d:d4:cb:21:53:16:f7:ac:06:95:dc:c9:d1:8b:
d2:c0:b1:13:c7:6b:5b:06:bf:e9:0e:bc:e8:c8:99:
2b:1f:34:b9:6f:a5:b2:78:67:f6:0c:2f:85:96:63:
9c:18:40:92:9b:85:dd:c2:21:e8:58:90:c3:15:33:
ed:02:35:27:ae:a5:85:0c:e2:87:59:58:f0:34:9f:
ec:05:d0:a7:56:47:36:be:e1:3a:f0:0b:a3:33:5e:
7c:cb:7c:c5:b0:83:d1:9c:8a:61:e0:3e:bc:1a:7e:
01:3b:94:e9:5c:51:13:47:8f:83:76:b3:14:03:eb:
60:40:45:a1:78:3e:b1:43:a3:85:1b:36:ea:d7:7f:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:E9:4F:5F:29:05:60:06:BF:42:22:54:D8:03:A6:BB:2E:85:D6
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:92:3e:46:89:69:26:47:24:e1:e2:19:82:25:27:1f:09:90:
f5:9c:61:da:69:95:3a:6f:42:58:63:27:51:b7:83:c6:be:63:
6d:a3:69:5e:26:9e:d3:2b:19:af:fc:08:b3:89:72:1e:bf:c2:
1c:47:57:0a:03:7b:48:4e:5d:1e:48:5c:33:c5:43:75:59:ed:
f6:43:6b:1e:c3:e6:3d:db:f7:b7:89:a3:d4:30:9c:cc:d4:f2:
f5:60:28:bd:93:2f:b1:7a:24:bc:51:40:54:11:41:3f:b9:0b:
2e:b9:de:e4:c7:a9:0c:bc:e6:15:c6:ea:1c:2f:8d:58:13:06:
46:b2:31:fa:1e:96:22:84:5f:fe:8e:d8:42:1d:7f:52:f3:a9:
96:ad:03:5c:16:c1:40:98:03:ac:a9:a1:f4:6b:aa:12:a4:e0:
e9:36:63:54:2d:28:b9:73:39:d9:44:6a:0a:9f:18:29:4e:c3:
a2:c9:26:7b:6c:ab:ea:b2:0e:2a:fa:7d:55:20:62:c2:b3:76:
db:f0:d6:70:74:c1:7d:a5:2b:13:62:82:15:ae:34:cc:5a:0d:
53:cd:58:de:ff:b5:f4:e0:13:70:c7:4e:a0:27:48:11:2e:7c:
45:10:7a:8d:93:36:ac:1b:9b:cb:9f:38:cb:51:a2:0f:83:a6:
4b:fc:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:01 2026 by rpki-client