Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: 1lJJVbT/UEqkEr/IBeAbGsew9SZFW6Zthbe02w8tzlw=
Subject key identifier: 25:88:D5:6B:72:AC:F2:8A:B4:DD:98:D7:EF:8F:69:9E:D8:DE:62:01
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01A138FFFE99D8803F69DA59176436792B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 07C1
Signing time: Wed 14 Oct 2026 06:01:03 +0000
Manifest this update: Wed 14 Oct 2026 06:01:03 +0000
Manifest next update: Thu 15 Oct 2026 06:01:03 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: wCcX7yhhYjmGOqM/LWYDSC05vJDHiZ5wplXksYyuRm8=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:fe:99:d8:80:3f:69:da:59:17:64:36:79:2b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Oct 14 06:01:03 2026 GMT
Not After : Oct 15 06:01:03 2026 GMT
Subject: CN=2588d56b72acf28ab4dd98d7ef8f699ed8de6201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:b8:3c:41:12:97:46:19:cc:ec:c3:03:3e:
d2:b0:f1:eb:39:c8:c9:07:43:9f:a8:ba:8f:34:dc:
37:a8:f6:18:a5:99:bd:f2:ea:e0:73:19:5d:ba:b8:
35:b7:be:b2:57:ea:47:fd:40:28:83:19:42:91:22:
47:87:4a:f0:ca:2e:47:6e:7f:79:0b:e7:00:3a:cf:
0c:2b:39:53:82:e2:09:91:84:35:ce:1d:eb:77:55:
4a:62:dc:e4:1e:67:a8:81:36:c1:0c:68:cd:a0:cf:
83:3f:75:a5:c9:e5:53:1d:d4:b8:ab:53:fb:d3:e7:
43:f6:c7:a5:0a:0c:62:60:6a:87:a1:6a:89:13:a7:
a2:61:72:c7:5f:dd:d2:4a:6f:6c:61:b1:fc:27:a8:
e6:a2:38:0b:f9:02:f3:67:9d:25:2c:a7:e0:45:6d:
13:88:85:06:b9:c4:dd:a7:d5:a2:75:dc:d1:8f:b4:
46:2d:c3:71:ad:ea:9a:38:45:a5:f1:5d:3b:a1:fe:
4d:8a:c0:71:74:a3:73:09:d5:66:2e:18:35:57:3a:
c1:7b:b6:59:46:3c:5d:2d:c4:59:c1:59:a2:9f:5d:
9b:1b:dc:b5:03:b4:b1:84:2a:fd:30:a0:36:29:86:
e0:61:c5:39:a3:99:dd:4a:b7:8e:27:ae:c1:c7:62:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:88:D5:6B:72:AC:F2:8A:B4:DD:98:D7:EF:8F:69:9E:D8:DE:62:01
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:88:5f:c5:06:68:03:b5:39:de:c8:46:3c:c1:31:90:5c:6f:
97:db:19:ac:20:9b:8c:e5:3f:66:fd:c0:27:e7:8f:8b:89:74:
1c:5b:be:69:97:f8:4b:6a:65:37:fb:4a:61:d2:59:0b:f4:f8:
06:49:66:2e:00:b0:61:f1:cd:8b:cc:83:de:26:00:f0:3a:e8:
3a:21:60:42:a4:ac:c3:f4:1a:ad:36:79:bb:b0:3d:77:58:fa:
30:de:ab:87:54:36:6f:93:b8:19:60:7b:68:36:b4:c7:14:67:
fe:c8:15:8e:ca:f2:85:c3:f8:51:32:20:a7:61:b1:c7:bc:96:
6a:75:81:a5:f7:4a:14:3a:de:16:49:ff:37:93:ee:3b:2b:17:
5a:03:80:26:87:8e:d6:f9:b1:0e:85:0a:27:1e:f8:8f:ad:bc:
bc:6e:c2:08:d7:44:25:5c:00:0c:eb:23:2e:e9:47:96:e4:6c:
3b:ad:63:98:bc:76:cf:e3:89:b2:8d:50:a2:2c:d9:2c:6a:7c:
5b:7e:a8:f4:1a:c9:a6:cc:19:93:d6:e8:f8:41:2c:05:57:96:
b3:83:ac:76:9f:db:21:bb:09:82:ff:44:c1:21:53:0d:b9:89:
b5:02:a0:e5:d1:26:db:b7:1f:c9:7b:d4:ec:59:2d:b1:a2:23:
ed:27:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:10 2026 by rpki-client