Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: XvosYw2UJyxxrdwXLHjc5usl51pkwUR07BMCFO4jc+8=
Subject key identifier: B6:8A:F5:4F:D3:D1:1A:EF:6E:C9:9E:4B:66:41:8B:01:11:9D:7C:EF
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019D27A8D70DAF822CD4062947ABDF33BA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0922
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: HRnsi3Nx0U6+NN0t4LSmB257w0z8NTdVCBcwfRBTG5k=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d7:0d:af:82:2c:d4:06:29:47:ab:df:33:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=b68af54fd3d11aef6ec99e4b66418b01119d7cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:6b:12:df:37:84:0f:4a:87:4c:f3:c2:f5:
83:31:e3:27:40:6b:c1:1a:1e:9a:6a:76:3f:49:e3:
75:3d:6e:a0:83:f0:68:69:88:59:23:b3:2a:35:48:
2c:fe:96:58:31:7d:6d:25:43:8b:2f:a5:a8:81:54:
91:93:7f:b7:8f:74:d0:ad:73:57:d6:55:2a:16:39:
a8:b0:ba:16:a0:ca:9f:a8:24:f1:97:8c:f8:53:80:
89:9d:f1:98:56:7f:0e:9f:e8:6a:65:47:8c:61:f4:
62:d5:8b:da:a8:4b:d5:46:27:f4:50:e0:78:32:94:
92:49:6f:ba:79:a6:db:7f:9f:0b:9f:10:c1:cb:78:
5b:fc:d1:07:74:f4:2c:ac:0e:be:35:c1:ab:16:69:
2e:e7:87:a5:23:a1:df:49:d2:24:9a:c8:c7:7d:15:
94:f2:6d:c8:e6:6e:8e:2f:f8:3b:0b:cc:f0:03:4e:
d3:7a:b6:0a:14:94:c4:97:04:d0:a4:e1:b3:cd:47:
0a:d4:11:fd:7e:62:e8:7a:34:16:f5:c2:ce:2e:03:
d9:bd:46:bf:b9:76:46:ef:97:c1:23:58:f9:8d:13:
5d:f6:7b:c8:77:ee:6b:08:3f:98:77:23:d5:0f:7f:
e2:dc:c4:26:41:a3:8b:70:c7:63:89:00:1f:ec:2e:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:F5:4F:D3:D1:1A:EF:6E:C9:9E:4B:66:41:8B:01:11:9D:7C:EF
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a1:4d:f9:75:7a:65:66:01:6c:f5:72:d0:f6:19:d9:26:22:
80:12:1d:5c:c7:bb:2d:e9:ef:9b:cc:d7:7c:1d:ca:0a:5e:e7:
8a:6a:1d:99:9f:8c:bb:46:25:83:fc:d6:2a:43:bb:e7:1a:c0:
ff:bf:c1:d2:e7:ae:75:92:98:ce:69:98:4b:cd:32:0e:df:42:
0b:7f:9c:2f:05:4b:fb:46:71:46:b6:2a:17:f0:03:74:11:35:
b3:85:fb:40:74:b1:e2:da:01:f6:b2:82:2c:83:51:8c:02:99:
b7:ff:e1:e2:c5:57:26:a8:0a:af:86:85:d8:4b:56:18:d9:57:
47:85:df:ea:45:a1:9f:41:70:92:da:50:44:80:b1:99:72:3c:
f7:03:47:a2:4a:35:9c:f4:b5:b4:3e:06:8c:69:77:69:19:bc:
3f:f6:4a:e7:69:6f:7c:0a:e2:dd:77:67:8e:f6:53:30:f9:87:
da:84:83:0e:cb:73:e6:32:a7:d0:76:01:78:0b:66:b9:a7:b2:
26:69:be:bd:24:bb:13:e2:a1:93:77:eb:f8:3c:29:6b:3e:4d:
98:66:72:7e:dc:9b:de:27:f9:6e:56:fc:77:79:c1:09:90:90:
91:03:05:3f:70:70:ee:e8:44:49:04:b1:d7:ef:10:e1:16:bc:
2a:33:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:48:45 2026 by rpki-client