Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: BQG0l+MmsgojUFiyuKepLcELcrW2TfFcnrcadj9xax0=
Subject key identifier: 3E:51:F2:B4:19:A9:51:B5:3B:C3:B7:E5:A1:AE:0D:C4:54:E2:24:B2
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019D390A485033059E68F7D7645592427B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 092B
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: lCVpo8SjBq8up3L5ghk0566zl1LkunBBKGRDpcrUfjQ=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:48:50:33:05:9e:68:f7:d7:64:55:92:42:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=3e51f2b419a951b53bc3b7e5a1ae0dc454e224b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:45:8c:6a:d5:40:33:69:07:72:d6:b6:5f:
18:b5:9d:7d:d2:f0:14:21:f4:68:9d:31:01:75:df:
a1:be:93:c0:8d:62:94:f4:8e:ce:a3:6c:54:92:a8:
9a:8b:61:b5:af:b6:bf:88:e2:31:7e:14:2b:36:1b:
59:32:27:17:6f:53:34:f6:9b:6c:6e:8f:2d:f0:15:
8e:d3:cb:54:81:0a:a2:03:a5:8b:a1:4f:04:2c:32:
03:ea:6f:5c:c7:a3:b4:d9:94:e9:5f:f5:e3:c1:a8:
82:f9:68:79:83:10:78:e3:49:bb:76:ff:15:d0:a1:
32:58:59:8c:22:bf:92:58:94:cb:70:3e:9b:1f:0e:
0d:dd:ff:31:99:ac:44:aa:17:a5:41:bd:a0:54:f2:
f1:12:77:3f:a0:97:8d:8b:28:83:76:fa:7b:f6:99:
c6:46:24:2c:30:86:8a:4a:13:1a:cf:82:e0:30:83:
58:fb:ae:3a:65:44:fe:1b:c1:0e:c8:b6:79:66:bb:
0a:e4:c8:e2:04:15:0a:4f:b9:69:c6:f7:77:a9:71:
d3:7a:9d:3b:60:71:b9:80:b1:59:d1:bf:0c:bc:ec:
d4:14:3c:ec:f6:b1:39:01:ef:00:a7:49:70:a9:cf:
d0:0c:e0:51:80:14:34:70:b2:d7:f2:fb:12:5d:99:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:F2:B4:19:A9:51:B5:3B:C3:B7:E5:A1:AE:0D:C4:54:E2:24:B2
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d2:19:14:4d:13:13:87:4b:56:33:13:17:e0:c2:b8:c0:17:
a6:79:57:39:4f:be:b2:a2:a7:ee:83:03:ab:67:98:67:2d:eb:
a4:2e:02:c7:07:27:18:35:8b:a2:8c:09:14:c3:08:cf:a0:60:
de:7a:eb:ea:83:7d:78:93:cc:c9:4a:6c:a9:66:95:52:40:2e:
49:f7:b6:5e:8c:e1:e4:61:33:5d:ad:b2:d6:ab:0b:9d:e2:17:
aa:9a:94:b1:04:1b:6e:e1:15:29:8c:e9:1c:ef:cc:df:50:86:
f5:9d:a5:c7:1e:d4:67:a7:9c:c7:15:38:fa:5b:d7:46:7b:d3:
8c:f4:5e:78:df:17:1c:94:13:b7:ce:49:92:64:db:94:14:9d:
29:a7:26:84:5a:1e:6e:fc:01:6c:9a:53:c1:15:b2:e3:32:59:
f5:9e:47:70:2b:bd:8d:8b:06:70:4e:3c:f8:86:1d:2a:13:63:
d0:58:66:3e:c7:ad:54:e4:ad:7f:95:d8:10:8a:65:2d:aa:4f:
75:78:0a:01:04:dd:db:c8:27:12:47:5a:ed:60:b9:1e:1c:01:
2e:17:22:d5:45:c4:87:95:22:cd:cc:0e:dc:f3:d9:e7:84:58:
bd:da:d2:d3:86:b7:fd:1f:c8:a8:db:dc:98:ca:b3:55:71:2f:
b1:ac:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:53 2026 by rpki-client