Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: gNBPjxkIu49sCPyR/yee/ZpkyR99LEcM08kRNZw5rsM=
Subject key identifier: 74:7D:8D:75:4F:82:4C:EA:FC:D5:D3:E6:7B:C1:40:86:87:32:DD:AB
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019E1CEB63FC71206D40F6F1B12695187CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 09A1
Signing time: Tue 12 May 2026 16:00:49 +0000
Manifest this update: Tue 12 May 2026 16:00:49 +0000
Manifest next update: Wed 13 May 2026 16:00:49 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 28gvgb96sK3Uc9whlYcYXLMVIKfuJ3+fBcNj21RzllA=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:63:fc:71:20:6d:40:f6:f1:b1:26:95:18:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: May 12 16:00:49 2026 GMT
Not After : May 13 16:00:49 2026 GMT
Subject: CN=747d8d754f824ceafcd5d3e67bc140868732ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:28:ff:39:66:cf:ca:15:3a:7a:fa:18:84:
92:14:be:1f:e3:3a:97:88:2a:28:03:f1:a1:42:42:
81:74:8a:a8:97:5c:ac:1e:52:55:84:82:32:b9:a8:
eb:16:72:25:4e:e4:d8:fb:d7:98:a1:eb:93:95:2b:
86:08:fd:86:db:06:6c:9c:d1:10:f4:5f:01:97:c3:
45:0f:5d:8a:6f:86:2e:05:c0:ec:1c:1d:94:bf:d8:
0e:eb:81:41:7e:c4:cf:7b:99:4c:a3:85:5d:17:a7:
47:20:16:3e:02:41:52:23:73:2b:29:99:6c:5b:55:
d1:14:c9:c7:da:a9:d9:31:09:46:40:33:6f:d6:2c:
92:26:fd:bc:c5:c4:46:79:f4:55:58:0f:6a:22:19:
19:63:3e:33:a4:81:8b:6b:ba:f2:a7:b0:fa:c7:5e:
78:af:bd:7e:61:d0:af:64:28:18:f3:d3:d3:a5:7b:
ae:0f:dd:30:c8:ad:d0:77:a8:6c:72:c0:78:62:ba:
ed:9f:8f:db:4d:8d:c8:9e:59:af:22:ee:79:61:a4:
bc:b5:55:17:68:9e:88:84:5f:08:50:c3:1a:e5:45:
eb:3c:95:c6:8d:1f:ad:76:ba:1c:27:bb:29:6b:ac:
5c:b0:f5:fe:87:b8:89:d8:0e:cf:26:13:a8:46:34:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:8D:75:4F:82:4C:EA:FC:D5:D3:E6:7B:C1:40:86:87:32:DD:AB
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:41:2f:52:09:f2:7b:7a:ff:86:e6:74:b7:26:4b:8f:85:38:
ca:7f:d2:cf:b4:fd:8d:eb:df:87:9f:60:4a:00:f1:a6:ee:38:
ca:76:03:5f:5c:88:07:2e:9b:e0:7f:b9:1f:41:31:d0:ff:e7:
1c:a4:a7:f0:12:a7:da:1d:3a:cb:a2:10:2c:61:88:b7:e1:6f:
7b:3b:75:eb:da:54:05:4f:a5:42:18:ba:fd:e0:96:36:e7:92:
8c:70:0f:a6:4d:a5:b3:2a:a6:df:75:7d:f0:6b:bc:f6:09:a7:
35:20:d2:57:30:57:94:0a:7b:ba:9b:e9:d4:ad:3d:29:b5:5f:
9d:3f:63:d0:55:50:57:99:49:24:78:45:99:dd:5c:8c:b7:41:
b3:16:a8:31:b1:d2:52:44:82:a3:59:cd:3c:87:73:49:46:e7:
c7:59:00:bc:ed:eb:24:93:e0:59:6f:55:ba:0a:01:88:a3:91:
5a:e2:c5:fe:fd:4a:7e:77:63:91:22:03:bb:21:5e:b7:93:c2:
d3:9c:a9:2c:0b:3a:99:d9:ff:dc:0c:c0:69:b4:cb:43:f8:ec:
23:87:03:66:43:08:85:0b:c2:4d:ea:62:8d:f2:77:80:84:6b:
08:93:82:31:9c:0e:7c:d6:aa:7f:b0:8c:13:e9:22:85:7c:3c:
75:91:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:16:41 2026 by rpki-client