Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: TuN0SW5/YpzoCFxhK5HFXTEnNy8z8rDE6/teBKarsmM=
Subject key identifier: 05:2C:A6:C6:28:78:DE:AA:9A:57:E8:B5:38:77:C5:E6:D9:A2:E3:78
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01A043BDA893B7CE074F1417C62E28A2EF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0742
Signing time: Thu 27 Aug 2026 15:01:37 +0000
Manifest this update: Thu 27 Aug 2026 15:01:37 +0000
Manifest next update: Fri 28 Aug 2026 15:01:37 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: g1vJFJwIatUr0p1SF7gYEJRfOV81WwKkW1+O49rJ0Lo=)
2: W5h40v2bXEhJayS-SrtWJ-dPHXw.roa (hash: LQ5DbqMUDr5m+PTN5GWPQfen5hG3kMiMA8hJXE+cg/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:bd:a8:93:b7:ce:07:4f:14:17:c6:2e:28:a2:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Aug 27 15:01:37 2026 GMT
Not After : Aug 28 15:01:37 2026 GMT
Subject: CN=052ca6c62878deaa9a57e8b53877c5e6d9a2e378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:70:6d:ff:c0:64:2f:44:92:f6:ba:a8:21:
64:52:b1:3e:9b:bf:7b:98:b7:17:7e:9e:39:0f:73:
78:71:65:b7:32:78:f8:dd:02:46:b4:be:ba:4e:be:
18:20:72:b6:cc:c2:e0:fc:47:d3:84:8e:ab:b7:75:
62:73:88:28:60:67:08:c5:7a:3b:80:46:25:95:1e:
b9:67:f1:d1:39:f4:d1:10:0c:be:6c:6c:90:25:4c:
18:7e:95:73:11:fd:47:d9:b8:d2:0e:95:e9:b9:c9:
94:19:bd:1a:6f:a8:e3:a3:08:d7:05:e1:6b:cc:bc:
c1:93:50:e2:b6:f1:80:af:b9:2f:14:81:e4:bb:ad:
56:8e:a4:54:1f:ca:92:12:5d:50:8d:3c:3e:80:f2:
56:2e:8c:41:83:5f:ff:a2:fc:64:1c:ad:4f:b5:45:
a8:78:14:25:d3:c6:b6:1c:0f:7c:28:72:bc:8a:57:
b7:d7:4a:a1:30:b5:ad:89:39:dc:c9:6d:25:f4:87:
7c:9f:a4:7e:95:69:a7:75:c1:b6:6b:f6:a8:4c:1c:
f6:0f:a2:98:85:0d:4a:db:4b:eb:86:8c:58:85:bf:
87:fe:09:4e:ac:0f:88:38:88:f8:b0:be:7f:10:82:
7d:d0:db:0c:77:0d:fb:f0:17:59:a6:a1:68:f8:78:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:A6:C6:28:78:DE:AA:9A:57:E8:B5:38:77:C5:E6:D9:A2:E3:78
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a8:69:76:40:40:58:25:a6:f2:06:bd:2f:5d:8f:c3:fb:14:
76:aa:eb:47:c6:5d:a4:22:32:d9:ba:36:8d:cf:e3:53:28:d8:
f1:c9:27:28:8a:26:c2:d3:96:10:93:30:3d:1e:fc:c1:9d:be:
37:2f:cb:f0:b1:94:d2:d6:d6:4c:e7:14:1b:3b:ee:ad:a1:3b:
ef:3d:f1:08:bf:96:26:9f:68:ea:c4:cd:7a:93:73:01:ac:84:
d2:76:e3:45:b6:3d:59:df:2b:af:94:b3:37:db:73:ae:ef:00:
ff:84:81:98:1f:3b:aa:59:39:1c:b0:4e:e5:a5:a4:a3:6d:aa:
9d:85:01:a1:1b:0a:31:d5:0e:8f:0a:e0:2d:2d:7d:fe:2d:2c:
06:ed:be:55:a4:02:91:6a:33:fe:b3:2e:68:a7:39:4d:f3:6d:
4a:22:16:8a:cb:11:14:e7:39:28:9c:20:c6:a1:8d:99:11:0b:
f0:5b:02:43:b8:10:5c:73:4b:87:bd:31:70:90:ba:ee:f8:d0:
d7:75:48:3f:ea:67:a1:88:4f:0a:e7:24:24:35:5a:f9:89:24:
f8:80:9e:fc:c2:4c:a7:70:49:10:9d:b9:1f:4a:66:e9:70:25:
25:c2:66:33:9b:77:fd:45:47:51:88:44:13:4c:ce:2b:15:a4:
d3:ec:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:40:21 2026 by rpki-client