Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: vtSOSwyZADzTg1p5TcTiroBNz9/iHRnuh+hRWvgRNxI=
Subject key identifier: 1C:96:8A:A0:ED:3F:6B:59:B2:EE:FC:49:91:9D:3A:C9:49:13:2E:BA
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019E295DA77305C6B4BD3CC20B45A4F7E0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 07E2
Signing time: Fri 15 May 2026 02:01:03 +0000
Manifest this update: Fri 15 May 2026 02:01:03 +0000
Manifest next update: Sat 16 May 2026 02:01:03 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: m8pgcsXYgfwkUNeyNki91v0YLXEUblW8ZPNoiKoXaPI=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:a7:73:05:c6:b4:bd:3c:c2:0b:45:a4:f7:e0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: May 15 02:01:03 2026 GMT
Not After : May 16 02:01:03 2026 GMT
Subject: CN=1c968aa0ed3f6b59b2eefc49919d3ac949132eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:3e:6b:06:2e:1b:d1:e4:fa:7d:45:3f:71:
fc:6f:7f:8d:f6:08:3f:cb:a2:9d:95:1f:d5:38:92:
ae:8c:03:2f:03:05:ea:24:dc:c1:3a:aa:cb:f0:21:
e1:a5:89:0c:38:42:18:94:50:b2:64:38:24:40:c3:
10:9a:dd:b0:46:78:fc:b6:78:b8:57:9d:8a:43:c3:
c3:bb:ce:89:60:5b:ee:41:34:39:c5:ec:4b:31:97:
cf:69:0f:47:51:c2:0b:20:ea:04:e0:42:21:98:f8:
a9:25:98:17:ec:33:30:2d:0c:42:29:e1:a1:d7:89:
97:1e:82:b6:0e:4b:8f:f0:67:02:a3:b9:c7:65:9e:
25:0d:f0:2a:c5:32:f0:d5:46:ad:5f:1e:3e:e8:93:
06:e9:d2:b3:e8:38:d9:5e:f3:39:c6:75:7f:4c:08:
f1:e9:2b:84:0e:b7:5c:4c:6a:39:63:b2:36:00:96:
3e:1e:cf:61:1a:f7:7c:88:75:44:04:98:ca:56:77:
40:99:2d:53:24:7e:b5:7e:7c:0d:ce:25:19:e4:5d:
6a:32:0e:58:ae:37:35:e3:7e:ed:14:9f:24:11:76:
8c:a6:3c:21:76:18:ca:d0:62:7a:dd:4c:73:fc:4b:
f6:d0:c8:61:fc:e2:98:be:c5:14:90:e6:8c:95:07:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:8A:A0:ED:3F:6B:59:B2:EE:FC:49:91:9D:3A:C9:49:13:2E:BA
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:44:75:1f:e3:e9:64:1c:b7:d9:56:23:a1:fd:cc:fd:18:19:
32:dc:aa:16:02:58:df:69:03:c3:34:3d:87:83:72:35:81:57:
27:bb:0c:fb:31:06:b6:aa:76:e1:ed:ca:4f:1e:57:e8:d3:67:
1b:f2:05:2e:78:94:02:d8:0f:ff:c0:3d:c2:ba:95:2c:25:47:
88:b0:97:ea:2b:e6:33:aa:20:22:10:c5:a4:77:e8:a5:77:c9:
f5:cf:14:4a:46:04:15:6a:92:9a:7e:9c:af:cd:41:bc:82:a5:
96:3c:aa:67:15:1f:11:39:ea:6d:cd:90:c5:02:1f:fb:21:31:
d8:ae:b0:2b:d9:e7:c1:81:a3:87:4b:d0:f8:80:d6:a1:40:43:
9e:a5:c9:40:63:bd:9c:dd:31:46:07:b5:99:dc:52:e1:02:9d:
b1:d5:47:95:5f:59:6d:dd:2e:9b:aa:b4:73:06:49:77:03:1f:
fa:1f:ef:0b:20:86:ef:b5:23:d8:97:74:85:80:08:34:3d:60:
ca:3c:b4:6d:a6:35:4d:12:bc:9e:fd:39:bd:96:60:55:db:85:
92:06:b5:35:3a:ce:cf:b9:95:31:57:86:66:f5:c0:55:67:cc:
f0:16:e1:b5:d5:21:a5:5b:77:fd:77:ec:b8:3c:3a:6c:bb:83:
1c:38:57:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXadzBca0vTzCC0Wk9+C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjYwNTE1MDIwMTAzWhcNMjYwNTE2MDIwMTAzWjAzMTEwLwYDVQQD
EygxYzk2OGFhMGVkM2Y2YjU5YjJlZWZjNDk5MTlkM2FjOTQ5MTMyZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGg+awYuG9Hk+n1FP3H8b3+N9gg/
y6KdlR/VOJKujAMvAwXqJNzBOqrL8CHhpYkMOEIYlFCyZDgkQMMQmt2wRnj8tni4
V52KQ8PDu86JYFvuQTQ5xexLMZfPaQ9HUcILIOoE4EIhmPipJZgX7DMwLQxCKeGh
14mXHoK2DkuP8GcCo7nHZZ4lDfAqxTLw1UatXx4+6JMG6dKz6DjZXvM5xnV/TAjx
6SuEDrdcTGo5Y7I2AJY+Hs9hGvd8iHVEBJjKVndAmS1TJH61fnwNziUZ5F1qMg5Y
rjc1437tFJ8kEXaMpjwhdhjK0GJ63Uxz/Ev20Mhh/OKYvsUUkOaMlQd5YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByWiqDtP2tZsu78SZGdOslJEy66MB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakR1H+Pp
ZBy32VYjof3M/RgZMtyqFgJY32kDwzQ9h4NyNYFXJ7sM+zEGtqp24e3KTx5X6NNn
G/IFLniUAtgP/8A9wrqVLCVHiLCX6ivmM6ogIhDFpHfopXfJ9c8USkYEFWqSmn6c
r81BvIKlljyqZxUfETnqbc2QxQIf+yEx2K6wK9nnwYGjh0vQ+IDWoUBDnqXJQGO9
nN0xRge1mdxS4QKdsdVHlV9Zbd0um6q0cwZJdwMf+h/vCyCG77Uj2Jd0hYAIND1g
yjy0baY1TRK8nv05vZZgVduFkga1NTrOz7mVMVeGZvXAVWfM8BbhtdUhpVt3/Xfs
uDw6bLuDHDhXJg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:43 2026 by rpki-client