Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: dTf9Bb1b8h086cEQMfCClHNIsJNagyfuHAxzR3854Vc=
Subject key identifier: 6E:C6:2E:B5:31:FB:2E:A7:73:DD:D1:D0:48:98:57:0A:40:88:35:B8
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 019F17F920F23AB1E80F8D62FDD9DF293E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0A23
Signing time: Tue 30 Jun 2026 10:00:30 +0000
Manifest this update: Tue 30 Jun 2026 10:00:30 +0000
Manifest next update: Wed 01 Jul 2026 10:00:30 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: 1W2GPGnITlhKSbCWRE3TDD7xJ64OxcJUfSrgTcDh+Vc=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:20:f2:3a:b1:e8:0f:8d:62:fd:d9:df:29:3e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Jun 30 10:00:30 2026 GMT
Not After : Jul 1 10:00:30 2026 GMT
Subject: CN=6ec62eb531fb2ea773ddd1d04898570a408835b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:f9:35:dc:e3:4e:0c:61:5f:09:82:f6:2b:
87:2f:41:6c:f0:9f:f6:40:c9:4f:be:ac:78:8e:6a:
8e:83:5a:db:5b:d9:7e:9d:38:e6:3d:75:da:84:05:
50:25:ff:02:73:af:72:0c:48:be:8b:8f:6f:82:5e:
ba:da:96:c8:89:7e:f4:1f:d8:b5:de:c4:7a:f3:5b:
d8:2a:50:fb:be:a7:4e:17:6d:9d:c2:df:f6:fd:d0:
4d:67:a8:0d:d4:63:64:82:06:83:db:e0:74:20:11:
37:73:a1:cf:b6:56:e6:4a:b3:16:f3:c3:eb:43:bf:
83:fd:44:66:e3:6b:61:b2:7e:78:50:45:d8:34:b0:
55:3f:8b:91:29:3f:01:6b:f4:90:37:bf:3d:e0:39:
71:b3:8f:6e:59:56:f8:49:60:ba:75:13:71:6b:69:
b7:7c:5a:65:ca:b8:2d:06:59:61:9b:d8:33:7e:ac:
46:92:eb:51:51:1e:c2:24:4c:15:90:a1:bc:3d:21:
58:91:25:d8:93:21:45:18:c8:c2:f8:65:28:4e:f3:
2d:7a:a4:e9:4f:5b:8c:a9:01:b7:62:76:dc:0b:49:
6a:0e:b2:04:8c:53:90:a4:69:b0:90:26:85:59:87:
72:6e:31:c1:8c:a1:c9:0b:a5:cd:15:00:01:d0:05:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:2E:B5:31:FB:2E:A7:73:DD:D1:D0:48:98:57:0A:40:88:35:B8
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0d:1b:4d:7c:0f:69:97:a8:20:f9:b1:aa:e0:4b:bb:55:fe:
10:89:c2:e7:a2:f5:94:14:3c:71:0d:38:a6:90:70:25:19:5a:
a5:48:ed:35:c0:85:e1:41:9e:d3:b7:fd:4a:df:7e:ca:d1:d5:
38:cc:03:bf:3a:07:3d:93:c0:8e:f1:2b:1f:93:a1:b6:b1:a5:
ab:f8:c4:60:c0:3e:6a:27:22:df:08:2b:e8:ff:ee:57:69:6a:
64:60:d8:01:9f:e2:47:16:cd:a3:08:33:3b:0b:9d:85:4a:f5:
61:2f:04:75:7b:97:43:fc:41:c6:c7:45:1e:f9:27:76:22:dc:
09:7b:88:b8:71:a2:71:30:36:ce:85:a8:f9:58:33:21:fc:e1:
20:5b:98:df:4e:60:c1:ea:96:89:0a:5a:8d:2b:93:2f:57:eb:
1d:12:9d:32:ce:0a:82:33:2c:61:eb:6e:89:09:c0:b3:e2:24:
0b:6e:09:4f:cc:1f:44:c1:29:9c:d6:a2:cf:61:74:c9:8b:71:
70:c9:b5:3e:3d:f6:aa:61:a1:d8:51:df:29:0f:eb:79:20:ce:
6a:12:15:9f:b2:78:2c:31:70:52:79:2e:b1:7d:61:ef:c0:f8:
06:5f:d9:55:68:b1:23:40:9f:76:dc:80:de:45:94:90:96:82:
6f:14:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:15 2026 by rpki-client