Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
File: 2q99feqywLmZjuJntfO25TEEA-E.mft (raw, json)
Hash identifier: 2oq+gPOMCmrw6PVfHO5+0QZAoVZARe5W15kM5x8S9vM=
Subject key identifier: C2:17:93:9E:8C:64:2A:77:73:10:F0:5A:5A:19:71:1D:3A:1B:33:77
Authority key identifier: DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
Certificate issuer: /CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Certificate serial: 019F8F7E7C65FB9E8CF3D1643D76C79A4BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:59 +0000
Manifest this update: Thu 23 Jul 2026 15:00:59 +0000
Manifest next update: Fri 24 Jul 2026 15:00:59 +0000
Files and hashes: 1: 2q99feqywLmZjuJntfO25TEEA-E.crl (hash: SbmPw1kncEZCEt6z5nwBQ3EmZOlLypCDxyMpu7QTzTM=)
2: 7RGCArg6zHYj0Iou9jA7oVTdAb4.roa (hash: mGoXGOaisyNwd8zq8IefJ6jzjpEEa9vteqG8Ej7ZF/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:7c:65:fb:9e:8c:f3:d1:64:3d:76:c7:9a:4b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Validity
Not Before: Jul 23 15:00:59 2026 GMT
Not After : Jul 24 15:00:59 2026 GMT
Subject: CN=c217939e8c642a777310f05a5a19711d3a1b3377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:8e:f2:be:41:12:ed:f9:12:c5:7b:93:db:
ae:40:cc:94:d5:f7:ef:df:fa:d9:d2:d9:8a:cf:bd:
7f:f8:03:1e:45:3e:da:0d:44:35:41:4b:88:dd:1f:
29:dd:0a:95:85:82:f1:2a:1d:b4:8c:d5:13:ea:a0:
2a:9c:14:e9:6c:75:d6:7d:78:54:76:d4:36:fd:3a:
49:98:77:4a:96:0a:b9:fc:06:8e:f1:eb:68:51:99:
9a:23:58:6a:b2:70:93:d2:ec:10:77:d4:fa:56:13:
d1:9d:7e:30:02:11:d7:86:3a:05:a5:0d:62:11:a0:
ed:79:ad:6e:c4:68:41:ee:f6:a0:cb:2c:5d:01:fa:
e7:aa:53:b1:cd:f3:fd:bf:fc:9b:f7:e7:0d:9d:b3:
d6:fa:9c:65:91:49:b2:61:c9:07:58:32:66:20:74:
49:8c:83:4a:a4:a4:38:1e:b9:05:f1:a2:cd:15:21:
58:0b:c1:03:51:09:f1:fa:7d:0a:6e:1f:e0:3a:1b:
d3:85:87:6d:63:a4:47:88:0f:47:02:ca:ed:68:77:
36:e6:cf:83:b1:c8:49:5e:7d:d5:ff:71:ea:2a:c4:
ca:3b:9c:58:c3:2c:7d:5f:cb:87:f1:df:28:4c:f9:
59:f2:21:fc:57:17:37:db:13:d8:13:58:44:5f:bf:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:17:93:9E:8C:64:2A:77:73:10:F0:5A:5A:19:71:1D:3A:1B:33:77
X509v3 Authority Key Identifier:
keyid:DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:78:31:d4:d8:2c:de:01:96:65:b9:09:19:12:4c:b5:63:8d:
4c:93:26:b0:8d:f6:a3:59:ee:19:e9:a2:e0:b8:86:9b:5f:fc:
aa:6b:83:15:3d:e8:78:7d:0f:a5:53:4f:d9:c8:a6:a5:db:84:
61:05:23:4d:46:66:2e:e1:ab:bb:50:42:fc:7d:51:ab:cc:29:
17:a1:33:fe:dd:66:47:f3:60:f6:84:35:a6:12:de:32:55:e2:
d1:9c:93:7a:e5:16:69:71:6f:f8:3c:24:60:13:fa:3d:ac:ae:
b1:56:7a:f4:f4:b9:e0:8e:5a:2f:8f:aa:7c:ab:30:5e:61:9b:
18:55:49:b0:f5:cb:b2:1a:6c:5f:f7:e4:f1:87:91:8f:b0:7e:
ea:1d:13:27:5d:3c:a3:47:bd:65:65:6c:f4:99:94:39:36:e0:
e1:98:eb:70:65:60:d6:ad:1e:2c:af:68:1e:4e:d8:2c:76:5d:
a4:fa:04:ec:01:b7:22:74:da:00:11:c6:31:0d:b5:dd:e1:be:
d6:07:c1:53:84:5f:ef:62:1f:2c:59:59:f2:b0:4e:59:d6:87:
79:ee:21:82:be:9d:39:f6:bc:eb:e9:1e:f8:81:63:d3:e9:8e:
d0:28:02:b7:0f:7b:94:53:86:c8:da:5b:95:bd:88:49:ca:a7:
55:bf:0b:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfnxl+56M89FkPXbHmkvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWY3ZDdkZWFiMmMwYjk5OThlZTI2N2I1ZjNiNmU1MzEw
NDAzZTEwHhcNMjYwNzIzMTUwMDU5WhcNMjYwNzI0MTUwMDU5WjAzMTEwLwYDVQQD
EyhjMjE3OTM5ZThjNjQyYTc3NzMxMGYwNWE1YTE5NzExZDNhMWIzMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pmO8r5BEu35EsV7k9uuQMyU1ffv
3/rZ0tmKz71/+AMeRT7aDUQ1QUuI3R8p3QqVhYLxKh20jNUT6qAqnBTpbHXWfXhU
dtQ2/TpJmHdKlgq5/AaO8etoUZmaI1hqsnCT0uwQd9T6VhPRnX4wAhHXhjoFpQ1i
EaDtea1uxGhB7vagyyxdAfrnqlOxzfP9v/yb9+cNnbPW+pxlkUmyYckHWDJmIHRJ
jINKpKQ4HrkF8aLNFSFYC8EDUQnx+n0Kbh/gOhvThYdtY6RHiA9HAsrtaHc25s+D
schJXn3V/3HqKsTKO5xYwyx9X8uH8d8oTPlZ8iH8Vxc32xPYE1hEX7+JswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIXk56MZCp3cxDwWloZcR06GzN3MB8GA1UdIwQY
MBaAFNqvfX3qssC5mY7iZ7XztuUxBAPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGngx1Ngs
3gGWZbkJGRJMtWONTJMmsI32o1nuGemi4LiGm1/8qmuDFT3oeH0PpVNP2cimpduE
YQUjTUZmLuGru1BC/H1Rq8wpF6Ez/t1mR/Ng9oQ1phLeMlXi0ZyTeuUWaXFv+Dwk
YBP6PayusVZ69PS54I5aL4+qfKswXmGbGFVJsPXLshpsX/fk8YeRj7B+6h0TJ108
o0e9ZWVs9JmUOTbg4ZjrcGVg1q0eLK9oHk7YLHZdpPoE7AG3InTaABHGMQ213eG+
1gfBU4Rf72IfLFlZ8rBOWdaHee4hgr6dOfa86+ke+IFj0+mO0CgCtw97lFOGyNpb
lb2IScqnVb8LpA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:30 2026 by rpki-client