Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: xIK2ZY+i8VdhXzYtBBtOUNfAi2ppHvuPctveXRIm4iE=
Subject key identifier: AB:6A:05:A9:5D:D8:FD:25:D3:E3:2A:5F:A5:AD:0C:53:03:D7:15:B2
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019D39E5D77D82DA56838ADCF16F3ECFAA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0766
Signing time: Sun 29 Mar 2026 14:00:57 +0000
Manifest this update: Sun 29 Mar 2026 14:00:57 +0000
Manifest next update: Mon 30 Mar 2026 14:00:57 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: Yw3wGt9dUWvqKOOV9s7wzcmsXzwkPu5w5rgSKSDCPPs=)
2: 7BYQ6hjxoI3ozUU8ddmxZjgsC6E.asa (hash: 5jYDiWPOUrluKHP8GqfVHZN4Ahv5ZbbZ6/MfVtJfnr4=)
3: U0eXHxUXFfodUlmBaA303-Jbx88.roa (hash: sXuSuTQk9EzpqDU8pDWO9si7Cx55AMH5lwZNRJ/VlXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d7:7d:82:da:56:83:8a:dc:f1:6f:3e:cf:aa:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Mar 29 14:00:57 2026 GMT
Not After : Mar 30 14:00:57 2026 GMT
Subject: CN=ab6a05a95dd8fd25d3e32a5fa5ad0c5303d715b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:61:84:f2:78:9f:5e:49:62:ef:4d:b0:b9:04:
cc:b6:75:b5:59:5f:5f:bd:38:84:27:fa:b8:dc:64:
d2:e7:0d:c6:f4:6f:7a:c5:06:8a:b6:de:e7:79:35:
cd:00:4b:2b:71:62:d8:a0:d7:44:b5:f5:28:c4:84:
b9:01:a9:fc:4b:8b:34:5e:59:1c:75:37:1a:94:45:
40:db:1e:bd:82:c6:86:bb:50:e2:79:25:10:e9:bf:
44:e4:85:2a:5c:71:1c:9d:4d:36:76:38:f3:49:3d:
60:9d:c9:13:84:0c:21:a6:72:08:4d:9c:84:14:ae:
6f:bc:68:bc:86:86:ce:fd:e3:91:78:ce:2b:86:fe:
49:45:e9:58:19:c7:cf:36:9c:13:79:66:a7:34:fc:
34:cb:77:75:7f:d9:e5:2d:c5:fd:b6:f1:8f:5b:f7:
2e:07:83:f2:88:8d:a0:49:12:ba:71:5c:c1:fc:54:
8a:bf:62:50:54:94:2f:74:bd:f1:b6:4d:61:8a:c1:
7c:be:f3:8d:e0:f3:dd:47:cc:c0:7d:02:a1:56:72:
32:75:f7:96:e4:2d:56:76:07:f4:bc:ed:92:99:51:
35:1c:7f:b7:86:9d:5a:f3:e8:90:8e:33:4c:31:87:
c5:9d:f0:da:da:f6:e1:e2:71:6d:65:f2:13:cd:d7:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6A:05:A9:5D:D8:FD:25:D3:E3:2A:5F:A5:AD:0C:53:03:D7:15:B2
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:52:2b:a7:da:dd:7d:45:65:02:c1:c0:67:f2:9b:e3:3e:
8f:df:bb:6c:d6:e6:45:30:4a:7c:06:31:f7:f6:d6:49:d7:8a:
27:f2:f6:27:62:a7:e0:8b:ed:bb:d2:49:a1:c0:91:a8:31:27:
09:94:00:e5:8a:64:2c:cf:f4:24:f6:f2:9f:fe:a7:f9:5f:a3:
0b:f8:52:66:fd:da:a4:bf:f4:0a:33:42:e1:06:17:7b:9c:c3:
b0:cd:34:a2:d6:2e:e7:31:66:51:d4:75:32:f2:2c:45:70:33:
31:37:f7:66:88:02:cd:f8:a0:5b:a6:97:e6:54:9e:9b:c9:a6:
15:9c:3b:d9:c3:b9:51:0a:18:5b:6c:c2:21:f4:46:a4:40:30:
ea:c3:dc:8b:a5:d5:9a:3e:86:45:1c:ad:f1:8a:a0:2c:52:62:
ae:81:d0:73:5e:52:cd:4d:ef:58:dc:28:e5:c6:55:e8:27:94:
77:c4:dd:b4:e8:82:aa:81:f8:05:ad:3d:63:2e:29:e0:cc:00:
b0:49:1d:98:cf:70:79:8b:c6:59:d2:fa:13:7e:66:fb:8d:d2:
4d:28:46:76:a0:4c:ae:ce:4c:c6:5a:bb:21:a6:0e:d3:f7:9f:
b5:b7:2c:46:bf:28:db:26:8e:9a:8c:cf:7e:12:f1:96:4c:b7:
03:c0:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:38 2026 by rpki-client