Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
File: 2q8P82XUvZCN6QLu2gOyecL4CdM.mft (raw, json)
Hash identifier: Kw9h7oxuINn4A99Vlr5jGQ37FZAAtwDCcqYSe96Rxow=
Subject key identifier: D8:78:E1:43:B4:CA:52:A2:63:26:E5:39:49:C2:F2:C5:F0:F9:ED:27
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 019F129C1B443A26DA24991BC2747FF0C5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
Manifest number: 1124
Signing time: Mon 29 Jun 2026 09:00:48 +0000
Manifest this update: Mon 29 Jun 2026 09:00:48 +0000
Manifest next update: Tue 30 Jun 2026 09:00:48 +0000
Files and hashes: 1: 2q8P82XUvZCN6QLu2gOyecL4CdM.crl (hash: lMQ0vJboAc54YBjXBKY3nGH14fcz4z0bvCeeOHPn8pY=)
2: 73KjaABUIPMMJFXxvW8vZjtsKWs.roa (hash: gAkg8MW5s4Wu4Exe0BB68OpW+467tevdwwSm3IV/F4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:1b:44:3a:26:da:24:99:1b:c2:74:7f:f0:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Jun 29 09:00:48 2026 GMT
Not After : Jun 30 09:00:48 2026 GMT
Subject: CN=d878e143b4ca52a26326e53949c2f2c5f0f9ed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:ca:8e:28:72:ae:fe:1a:68:1b:b0:a2:9b:
94:c2:ca:7f:34:95:53:2a:1d:8c:01:28:70:dc:69:
4a:e5:9d:c0:bf:a4:ed:9e:76:f2:8c:ed:26:a6:9a:
c5:4f:a6:01:36:1f:e5:0e:bd:9d:92:cc:36:e6:50:
d3:41:4d:2f:3d:ea:f7:ed:24:5d:a2:cb:56:18:e1:
fc:36:48:cb:2c:47:94:eb:3c:fc:3b:ca:1d:d8:b4:
55:85:1a:4c:8d:c2:76:28:c1:8e:78:23:55:90:eb:
c2:9e:62:a3:9c:80:90:8a:03:70:3e:47:3e:f5:6e:
fb:f2:e0:a0:c4:1b:56:ce:ca:ed:fa:23:86:bf:f0:
1a:dc:17:ce:58:62:99:69:6a:b2:75:14:86:50:67:
53:7d:45:a4:9c:b3:33:2a:50:7b:8c:91:d7:f4:70:
a7:9b:c3:a6:81:62:f7:dc:8e:7b:91:de:97:6b:19:
86:75:ec:34:35:8d:bd:d8:79:16:77:28:76:bf:eb:
69:e4:bc:3f:48:3a:2a:f2:87:eb:d5:4e:71:b6:b1:
f8:d4:35:0a:78:18:1e:19:2a:45:fc:80:26:94:e1:
5a:02:a7:17:c7:d0:11:96:2a:62:39:c7:92:00:43:
d8:ae:38:8a:7b:85:31:69:e4:1a:ff:3d:a3:4f:35:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:E1:43:B4:CA:52:A2:63:26:E5:39:49:C2:F2:C5:F0:F9:ED:27
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:05:7c:bf:05:a2:9e:65:25:15:2c:9b:a0:79:c4:09:0d:4c:
2d:26:0c:26:2e:47:a7:b2:7b:08:e7:12:46:a4:47:05:f1:d2:
cf:6f:09:58:62:ac:10:63:f8:d1:be:ab:ae:b8:75:d3:a9:05:
db:fb:27:d6:9d:0a:6c:9b:0b:83:14:c4:76:bd:f2:66:68:23:
7a:d9:0e:4f:7b:c3:8a:fc:10:b1:14:48:24:f7:c7:e6:2b:c3:
56:0f:8c:d1:ea:52:6a:ff:e7:86:22:03:75:03:bd:09:1f:76:
44:4e:96:1f:80:14:1e:ec:85:83:72:65:16:de:94:47:70:eb:
2b:dd:21:6c:d8:31:a2:ff:5f:86:71:3c:b4:eb:74:d9:c2:ac:
b6:bc:9c:f5:0f:ba:96:81:73:20:80:05:eb:a7:27:93:7e:b2:
ac:4a:2c:ab:95:58:14:fb:f7:d0:6f:af:de:5d:90:ed:56:5c:
77:a4:bf:91:50:15:ff:d6:21:60:37:2a:61:80:1b:79:1d:4e:
f0:56:9f:6f:3b:93:c4:5f:71:2c:87:43:62:0e:fd:92:94:1c:
03:cf:50:73:35:8b:23:85:70:14:6b:91:55:5a:16:35:fb:ff:
52:19:09:71:00:aa:63:9c:9a:87:a4:43:87:34:bb:45:c7:33:
0e:9d:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:24 2026 by rpki-client