Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: ZTk7th1D6uo0pFOHcpUaGDh8Ie1tj/ocAumFMnhcSJ4=
Subject key identifier: 5A:C3:70:99:A6:51:30:19:32:73:50:38:6C:3C:DD:20:B5:DC:97:7B
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019F91A44428BBE8D37A3F45107805F6C6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0A62
Signing time: Fri 24 Jul 2026 01:01:29 +0000
Manifest this update: Fri 24 Jul 2026 01:01:29 +0000
Manifest next update: Sat 25 Jul 2026 01:01:29 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: qwLfsT3unIZcoASIzyz2biRRI3W+YKOhJ3Qd9XzDisk=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:44:28:bb:e8:d3:7a:3f:45:10:78:05:f6:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jul 24 01:01:29 2026 GMT
Not After : Jul 25 01:01:29 2026 GMT
Subject: CN=5ac37099a6513019327350386c3cdd20b5dc977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:d3:d0:5b:39:f7:e6:ab:77:9a:0b:8d:c8:
71:00:64:84:cc:d1:b8:00:91:ab:ac:0e:17:76:c2:
9e:ac:18:66:cc:e0:c5:9a:bf:ff:9a:8b:3f:6d:16:
0c:13:5b:bd:88:a0:58:d6:9a:92:d6:e0:32:d3:7f:
f7:98:1a:64:d9:4d:fe:3b:33:c6:77:c6:ac:a3:cc:
d2:76:d8:64:57:1a:09:95:d3:98:6e:66:03:0c:85:
19:4f:a3:b7:6f:6c:ec:33:77:31:43:b9:ba:10:99:
e1:e8:36:51:f7:26:c9:0d:44:c9:22:83:7d:57:01:
0a:50:4f:c8:80:ad:1c:f7:01:2d:ab:86:d3:44:5f:
4c:79:81:9b:44:d8:a0:b0:c0:04:0f:16:43:62:7d:
89:4e:98:c9:4b:ea:d1:4f:f5:ef:9b:87:c3:fb:03:
2e:27:0c:06:d5:35:8d:2b:a8:9d:5c:b9:cb:3a:8f:
61:0d:e7:5d:6f:25:50:8d:65:12:5a:fb:39:63:79:
4a:8d:05:b2:18:2b:aa:70:7d:d8:60:4d:75:16:95:
b7:a5:75:9c:b3:5e:90:a1:1f:ae:ee:61:d0:97:2f:
f3:a2:b8:25:7a:c2:c8:f6:77:f2:5f:26:f4:43:cc:
53:5e:5c:24:d3:51:57:b7:65:4d:d2:f5:3f:1c:93:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C3:70:99:A6:51:30:19:32:73:50:38:6C:3C:DD:20:B5:DC:97:7B
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:47:00:28:ba:66:f4:15:f0:33:82:ed:3b:f8:76:49:68:68:
16:db:11:71:cf:06:01:c0:48:95:d5:7d:75:0d:c0:77:c2:cf:
87:a0:85:f5:42:61:2d:3c:a8:88:c7:a5:7c:52:a8:68:3f:48:
7e:36:34:bc:3d:81:0d:12:ff:4b:7b:86:e2:bc:36:08:d4:d0:
e0:30:83:f6:a1:92:4e:44:ea:d6:84:10:9b:26:cc:d2:1f:9f:
2b:a3:17:a0:e9:93:04:00:2b:d4:91:7c:ac:13:d9:cc:78:3d:
ea:22:81:de:98:b2:25:0d:b7:6a:94:72:4f:32:9a:86:6d:d3:
dc:33:2d:dc:02:44:07:85:b5:cf:d2:ca:92:77:b6:20:47:3a:
48:9d:f6:65:ce:f3:79:df:4a:93:98:e9:85:eb:42:7d:f8:2a:
ea:39:cb:9e:d9:63:06:99:f6:bf:04:a4:9e:6a:39:33:37:4e:
ff:94:4e:12:38:69:c9:0e:d9:71:7b:04:53:a0:2e:5e:4c:d8:
2e:b0:66:4c:c6:ae:0b:d2:de:40:44:27:55:35:6e:00:85:4f:
3b:cd:0c:29:8a:a7:30:c5:e7:1e:5f:a9:4e:55:1a:72:f2:c6:
b7:ca:50:51:60:e7:ef:01:99:d7:7d:d5:f7:71:60:06:6e:42:
ae:75:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:12:15 2026 by rpki-client