Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File: 2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier: WkU0Nt3Hs3+fUYNii84+cndiMGNCXxqmorfVx824vOY=
Subject key identifier: 2E:A7:32:93:A0:7C:34:03:37:07:0D:75:1E:CC:62:A5:07:C3:C1:DD
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer: /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial: 019E314E2539801B1FE2FB687D9F25CAA02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number: 0699
Signing time: Sat 16 May 2026 15:01:05 +0000
Manifest this update: Sat 16 May 2026 15:01:05 +0000
Manifest next update: Sun 17 May 2026 15:01:05 +0000
Files and hashes: 1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: ibnEj+tM/Xp8lgMhb2Q4bid6E/Id7EH3Opi57j7QxKY=)
2: S_RLG-qdyAaQjiZGgL5sIfI-AYY.roa (hash: yQu9ZmP/q7jsTu4yw/AuWtFPXstyX5q6aeR1beEfVWY=)
3: U6As8UUX9Mg8l6zjGbZFCAxy-Pk.roa (hash: RA50m9VAkp/7GXmqEXtG2sTYJiK0WAUeyva3ilsrFA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:25:39:80:1b:1f:e2:fb:68:7d:9f:25:ca:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Validity
Not Before: May 16 15:01:05 2026 GMT
Not After : May 17 15:01:05 2026 GMT
Subject: CN=2ea73293a07c340337070d751ecc62a507c3c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:80:21:12:41:24:ef:ee:54:f5:3b:a4:35:
1f:74:7a:5e:f8:dd:22:60:8b:3c:19:21:ef:da:ef:
d6:54:b6:2a:f3:57:af:ec:cc:a5:5c:47:9c:0d:67:
ff:ac:0f:8b:80:3b:fe:4f:ef:50:a8:84:54:15:42:
31:5d:6b:9d:85:f2:1e:bf:61:48:8b:1b:fe:78:bb:
e8:8a:6e:e2:ce:58:59:6b:db:d5:80:26:32:ee:89:
63:ef:c8:f1:31:d6:9f:68:0d:dc:48:ca:90:07:a3:
ee:58:83:78:a9:85:b5:2c:08:d3:69:e3:c8:df:d5:
93:4a:33:39:fa:bd:65:7f:ef:b9:f2:32:8a:cb:bf:
a7:89:2e:11:d2:08:bf:fc:85:99:24:1f:54:c1:e3:
f6:62:23:66:37:36:19:d7:a1:46:fb:2b:ff:ba:c2:
c7:6f:9e:f2:b9:7b:ff:a5:04:df:25:3e:ca:f3:d7:
9d:3f:0e:fd:49:0c:e1:4a:b9:b6:a0:19:9b:95:ec:
56:ba:98:b6:da:28:2b:d7:3b:0b:cb:44:aa:fb:ed:
c8:da:46:9f:84:2c:a4:7d:f4:7f:25:08:81:bf:31:
7d:eb:12:2c:1a:d4:96:a5:67:5a:e4:a9:a0:20:aa:
bd:ea:00:73:5b:bf:8d:a8:ed:4a:24:9e:25:ab:70:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:32:93:A0:7C:34:03:37:07:0D:75:1E:CC:62:A5:07:C3:C1:DD
X509v3 Authority Key Identifier:
keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ce:90:cc:94:04:a9:80:7b:b3:76:c8:26:19:de:7d:99:31:
99:ac:75:25:b4:56:b8:87:e0:ef:24:48:c5:58:e3:60:64:14:
bf:b5:05:a8:a5:6e:34:2e:bd:d9:3f:c1:1b:98:99:07:cf:3c:
98:cd:18:43:7a:c2:2a:2f:c3:70:42:67:50:53:bf:fb:00:73:
75:3a:b1:ab:02:ea:d8:b9:94:47:1e:21:b8:ce:2f:a8:99:20:
cb:d6:ab:22:79:c5:e2:6e:25:c6:7a:ba:5e:6f:de:fc:cb:ba:
2a:2f:48:cf:2f:64:f6:29:0a:fe:1a:0e:f3:e3:8a:e0:19:fb:
d4:f3:8a:16:c2:08:5d:1b:c5:8b:25:f0:b7:ff:8f:a6:7d:de:
69:eb:bf:60:f3:07:f7:8b:00:da:5e:38:d7:05:f4:a9:c1:58:
98:d2:e5:88:20:14:3f:18:e8:03:8c:fb:b5:87:9e:b3:c0:54:
4e:4c:f4:64:82:32:5a:12:a7:9a:b0:1d:c4:a3:5d:4c:13:4e:
95:7b:c7:3f:7a:4b:3c:a6:e1:a5:b5:32:6b:79:a1:08:33:d6:
58:a1:f6:d0:18:af:48:a1:e1:89:42:af:d0:c9:3f:03:f9:73:
28:db:1d:b6:e4:d0:b5:29:95:6f:94:0a:6e:d1:00:cf:af:7c:
40:50:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:29 2026 by rpki-client