Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: TnF8MMntwfYAgxj06IZu4BnX1Q/zGqkcHZWVyqaL9vI=
Subject key identifier: 2A:F4:60:4B:F0:A3:D0:BD:4D:6C:33:FC:C7:28:D5:73:5C:9E:FF:A5
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019D378917FA4085922B91457513283E0CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 05AE
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: u7njiH4twWt7sOvtcUdtyQomWlaKHVDdYaIjFEtJ/r0=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:17:fa:40:85:92:2b:91:45:75:13:28:3e:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=2af4604bf0a3d0bd4d6c33fcc728d5735c9effa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:26:a8:d4:aa:59:cf:51:19:9a:23:5b:f9:
d1:fa:0f:71:07:d7:9b:69:9a:b5:e9:94:5e:70:cf:
6b:ac:f1:e0:6c:10:d1:fc:43:2f:80:41:3f:74:98:
38:b6:c0:0e:13:5e:ce:b7:57:68:84:8a:fc:92:23:
50:13:dc:9d:00:9c:b9:d9:50:43:b5:0e:ee:30:f5:
e8:7b:43:87:5a:e6:ef:83:b2:2c:69:d5:56:98:37:
c2:97:e2:cc:ec:61:7b:c9:ab:51:ff:af:1b:ec:f1:
2c:69:db:47:6f:48:3d:d0:cf:fc:b4:2f:82:7c:6a:
4e:68:33:bb:05:59:4a:b6:08:ea:a2:fc:18:75:bb:
2d:e4:8e:f0:4a:25:b4:c5:6e:96:9c:a6:89:3f:ad:
e9:a5:a5:8a:47:67:cb:a6:6e:e1:84:cc:10:53:ab:
e1:e9:47:1d:14:d3:9d:30:25:62:a0:b1:90:fd:c7:
59:63:2a:34:b1:c5:7b:5d:a6:b4:e6:45:9d:8a:12:
13:dd:da:98:a4:0a:28:86:ac:4c:7f:8b:b1:17:e6:
f7:34:97:68:f2:d0:53:e8:e4:11:95:62:b6:d0:da:
20:74:98:f0:42:67:8f:87:73:70:95:61:6b:a5:bf:
cf:47:c9:56:00:2f:b5:fc:64:93:f8:b3:6e:9a:70:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:60:4B:F0:A3:D0:BD:4D:6C:33:FC:C7:28:D5:73:5C:9E:FF:A5
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a3:29:26:cb:87:f4:62:07:c7:48:cb:0b:94:77:d1:7e:fd:
01:0d:fd:5f:41:8f:d0:02:5b:df:8a:fc:fb:73:56:eb:de:8b:
61:33:44:29:29:1f:d7:47:ee:2a:5c:2a:fc:d6:81:94:e2:ea:
12:67:2e:0a:48:29:0c:00:b3:48:6c:ba:c7:20:34:b5:43:45:
98:e7:9f:68:ab:94:4c:fc:b1:45:d9:da:c6:da:5b:a6:33:83:
3c:10:6d:4e:ac:8e:74:cb:61:87:b0:4a:ae:ba:bc:ec:ea:33:
88:4d:2c:67:0b:f3:6b:15:f6:37:ce:f6:8f:77:09:c9:53:22:
8d:39:17:70:f5:9c:0f:b8:02:05:40:3f:80:21:bf:5b:5d:24:
bf:42:36:f3:d3:c3:57:e2:06:9a:15:f3:a2:6a:58:a4:41:a0:
5f:a3:22:27:6c:ad:08:fe:13:55:10:0c:17:1d:ba:d5:90:c8:
05:91:39:b1:2d:ee:dc:a6:1b:d8:b7:11:e9:b0:cb:e1:50:2c:
16:e9:4b:66:7c:75:d6:43:b3:fe:81:3b:11:24:d3:c9:a0:d7:
56:4d:21:bd:35:ee:79:fd:ad:e6:27:77:f7:fe:98:81:2f:5c:
b0:5b:e2:57:3b:c5:a7:63:19:88:6b:97:3a:ad:eb:19:06:dd:
9d:0c:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:25 2026 by rpki-client