
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: VkhbRXPA9Dyb6UPXyPTLkZO/qkQgvhlNkord3lduWqE=
Subject key identifier: 17:2A:9E:F3:2E:83:EA:B7:BC:D0:EA:8B:4B:6C:77:0A:0F:3C:F7:9B
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01A0CC6C587CFB9195B1CCEC591A8F02667F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0B05
Signing time: Wed 23 Sep 2026 04:00:47 +0000
Manifest this update: Wed 23 Sep 2026 04:00:47 +0000
Manifest next update: Thu 24 Sep 2026 04:00:47 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 5R7BJShxsTzVGrkUDQe/Lbf32XBDkp0MQyIcD/H3+kg=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:58:7c:fb:91:95:b1:cc:ec:59:1a:8f:02:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Sep 23 04:00:47 2026 GMT
Not After : Sep 24 04:00:47 2026 GMT
Subject: CN=172a9ef32e83eab7bcd0ea8b4b6c770a0f3cf79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:28:60:55:03:6c:89:dd:9b:e4:43:de:ba:
e9:1a:41:7a:99:c2:64:23:e7:a4:05:ff:ad:a8:c2:
f8:9f:0c:05:85:82:b4:71:b6:ad:85:24:8e:7a:bc:
42:0f:ab:8b:08:cd:e9:ad:48:f3:21:c7:57:4b:e3:
b7:5e:0a:2e:83:94:e8:31:b2:fc:4e:7c:c4:77:ac:
a7:8f:22:d7:17:ba:45:59:81:26:6a:61:b7:f9:47:
b0:d4:a6:81:62:20:5f:4a:87:2e:45:b2:4e:a8:91:
05:b8:9a:39:32:a6:43:ed:fa:82:78:ce:03:d4:8d:
5a:6e:aa:e2:6e:7f:25:f8:6b:10:f1:3e:47:eb:ac:
b7:ea:4f:49:91:8b:29:f3:92:6f:6a:6f:a9:c4:b5:
46:a8:4f:a8:e4:94:56:33:61:41:e9:3a:7a:8e:d7:
68:c3:fe:55:0a:63:5c:f6:38:93:53:3d:fd:8f:bb:
a9:b5:5a:09:4a:b1:1e:d2:d8:cf:0c:a6:8c:26:3f:
cc:27:d2:00:33:8f:c8:f0:cb:8f:fd:6a:9d:ca:11:
34:fa:e6:a9:01:07:13:1f:f0:35:14:4a:75:71:6d:
34:5a:56:b6:d3:cd:93:72:19:50:33:6b:c2:88:26:
d0:bf:99:e0:6c:f5:ec:b6:b2:9f:4c:98:74:31:ad:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:9E:F3:2E:83:EA:B7:BC:D0:EA:8B:4B:6C:77:0A:0F:3C:F7:9B
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ad:36:e2:6d:c5:33:14:9d:16:08:b6:1e:91:72:6f:d3:e1:
a5:67:c9:f4:98:b5:b8:c8:11:7a:dc:92:e4:c7:ad:cf:d5:bf:
70:4b:3d:8f:22:79:c2:07:6b:1e:1f:bf:3e:8e:80:4e:77:fc:
f3:1d:2d:2d:43:05:0e:c8:27:52:5d:4c:ee:2e:f6:55:c5:23:
84:e8:0c:91:04:4e:16:3b:d1:ad:22:74:98:25:e7:e8:f8:b2:
51:5f:40:9b:29:83:ce:5c:81:98:dd:f3:47:1f:90:45:e9:6f:
42:4a:99:65:34:ed:8e:69:c6:ee:87:6f:b4:1e:d5:33:c9:5a:
c4:2e:0a:2e:47:4e:dc:7c:df:86:77:77:d8:6f:67:2f:1d:65:
f6:6c:92:8b:a0:5d:9a:5b:1e:32:8e:e7:dc:7d:cf:5f:19:66:
12:ec:54:27:3c:a8:31:39:22:4a:9e:47:45:e3:c5:b9:2c:cc:
06:37:8e:91:8c:0c:05:90:ff:73:d1:1c:bd:04:86:af:d8:36:
d6:bc:ec:ff:6a:a4:59:22:58:02:11:bb:b6:5e:fb:37:bf:73:
5b:59:cd:99:ae:de:f3:71:7c:c7:aa:98:c9:4d:45:8d:5b:ec:
00:e1:b4:28:ad:ca:3e:37:bd:7f:04:bc:c1:2c:f9:18:92:4e:
92:5b:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:14:40 2026 by rpki-client