Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File: 2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier: 46D/IVRR8tdS8O5U6uqKUcPDTnIRuKUX4xzF4n4ERaE=
Subject key identifier: DA:B7:09:A8:BD:A0:A9:F6:6E:D1:74:C9:65:C7:A0:CC:37:EC:1F:DB
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 019F8ED91E194D82859A4D7F72C45E50303F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number: 074E
Signing time: Thu 23 Jul 2026 12:00:21 +0000
Manifest this update: Thu 23 Jul 2026 12:00:21 +0000
Manifest next update: Fri 24 Jul 2026 12:00:21 +0000
Files and hashes: 1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: cBJK+9ZlptqYlimjNVpZdtWZ21uSCyN3H5EV7+KqiAc=)
2: S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa (hash: yQu9ZmP/q7jsTu4yw/AuWtFPXstyX5q6aeR1beEfVWY=)
3: U6As8UUX9Mg8l6zjGbZFCAxy-Pk.roa (hash: RA50m9VAkp/7GXmqEXtG2sTYJiK0WAUeyva3ilsrFA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:1e:19:4d:82:85:9a:4d:7f:72:c4:5e:50:30:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: Jul 23 12:00:21 2026 GMT
Not After : Jul 24 12:00:21 2026 GMT
Subject: CN=dab709a8bda0a9f66ed174c965c7a0cc37ec1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:aa:4b:b3:98:ef:07:71:95:d7:73:ad:1c:
c6:67:f8:52:30:95:b5:87:6d:82:f9:b4:24:92:bc:
50:8b:89:7e:2f:33:c6:bb:14:88:ca:96:6c:98:24:
21:43:65:05:ac:73:ac:9b:07:42:3e:02:b7:01:32:
6c:21:9f:71:d0:df:11:64:c0:73:bf:8b:b7:9f:41:
9e:fe:53:bf:64:39:88:8d:33:a7:8f:4f:64:43:93:
fd:2b:8e:b1:bc:18:0e:db:f1:2c:39:3c:1d:80:43:
67:fb:36:d3:b6:04:92:7f:de:ce:04:09:93:db:81:
e8:b2:99:be:3b:23:1f:d6:69:2d:ee:40:cd:8c:a8:
a8:a2:c3:e0:a7:1b:78:7e:ab:9f:04:6f:7e:66:f4:
1f:ca:17:d5:f6:94:cf:9c:71:e3:fc:fe:b7:35:63:
f9:37:1a:b7:0a:e6:f1:53:51:21:cc:91:0b:6c:d8:
95:33:08:c3:18:8a:dc:03:c3:49:67:70:13:99:88:
98:37:5d:19:35:78:83:e9:cd:52:e5:c8:74:f2:66:
e3:46:2d:5f:17:3b:86:45:cf:a6:22:15:52:d4:a9:
49:9b:75:ea:74:5a:ce:47:b6:6f:54:fe:9e:20:60:
2a:cf:5f:56:f6:45:ff:fe:c9:ba:38:d8:cd:6a:cd:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B7:09:A8:BD:A0:A9:F6:6E:D1:74:C9:65:C7:A0:CC:37:EC:1F:DB
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:5b:63:df:68:4d:35:17:d2:12:8d:26:d2:ab:8f:0e:3a:
9e:4c:5b:b3:9f:b2:02:2c:84:40:b4:91:18:d7:c7:c8:c8:87:
5d:1f:6a:b2:f1:dc:50:5f:6e:dc:ec:bb:83:50:4d:b2:bc:d4:
d0:19:7c:b6:9d:1e:11:b1:06:80:32:55:a1:b9:68:c4:24:de:
35:3a:66:91:da:b6:97:b5:32:4d:65:3a:77:55:15:cf:bf:5b:
d9:2a:af:a4:56:fd:41:8d:86:0c:0e:a2:2f:b5:b0:8b:69:31:
44:25:5f:a2:7a:a3:6f:d0:6e:3f:48:47:20:5c:41:69:cd:60:
b3:bc:a8:e9:df:e1:4e:1a:56:7c:f4:f3:42:e7:14:2e:e4:b6:
05:0b:7f:25:e5:53:c6:d8:3b:a1:e0:d9:82:9f:6f:e5:61:57:
a3:bc:c7:aa:af:01:53:92:c6:6e:2d:ac:a9:b5:06:eb:f4:b1:
d0:82:db:a4:54:9c:df:eb:65:a9:a4:b6:73:18:05:f1:7b:09:
6a:d5:85:19:ba:87:19:03:32:23:96:eb:9d:4b:ef:57:4f:57:
49:40:3d:25:92:da:56:1c:40:03:51:24:7c:25:16:45:b7:54:
ac:38:77:fe:67:2e:8a:01:17:e9:99:73:77:12:cb:9f:f1:ec:
c9:ca:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:10 2026 by rpki-client