Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: RghnSVPZV1pnFjXbuUVENurX8enirRAlgjsVmQ8CpOg=
Subject key identifier: 1E:BD:93:F1:ED:69:81:5B:74:5A:24:47:5E:82:F1:4A:71:71:15:E4
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01A13E5D43E8EF17660865A9EA7B0707ED4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 0B40
Signing time: Thu 15 Oct 2026 07:01:01 +0000
Manifest this update: Thu 15 Oct 2026 07:01:01 +0000
Manifest next update: Fri 16 Oct 2026 07:01:01 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: SFprvXcK1ZoWGHXkXVCblh9g5q/6J1g8ERHW0mYexp0=)
2: I7P5hrATQOr4FMojmomQFSpigt8.roa (hash: cp4VK2ZuXPC8H2sQqnOgkjqJPdpF+R6ME3S2G7buLzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:43:e8:ef:17:66:08:65:a9:ea:7b:07:07:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Oct 15 07:01:01 2026 GMT
Not After : Oct 16 07:01:01 2026 GMT
Subject: CN=1ebd93f1ed69815b745a24475e82f14a717115e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:ff:be:3b:ce:b3:28:4a:30:42:5d:b0:39:
f7:90:02:eb:68:f6:94:a4:cf:7a:90:a6:46:6c:0e:
71:16:86:af:68:3b:78:02:65:80:af:88:5e:d6:01:
5c:1a:21:9b:bd:73:18:67:9a:aa:8c:16:bb:26:05:
98:a5:91:cd:29:18:b6:15:b3:28:ae:79:fa:9c:24:
63:0c:50:f8:35:22:f5:0d:e3:29:f2:3b:23:fe:f8:
5b:cb:df:cc:42:89:07:66:8a:0b:7c:c9:7c:11:11:
f9:3b:b5:b2:90:58:f3:f6:2e:93:1c:7e:3e:df:7b:
7c:e3:57:86:01:39:81:7b:f1:fb:e4:6e:4a:04:bb:
9b:1a:01:9b:7f:26:df:5f:79:aa:4c:31:c1:6b:11:
2d:c5:7e:3a:45:65:d4:5e:35:c4:d7:1a:0f:7b:b7:
42:c0:6c:a7:bc:de:3b:0f:48:25:d0:23:57:ac:9d:
6e:68:09:88:19:e8:e1:dd:11:9f:9a:f7:db:81:db:
2d:f7:82:bf:90:f6:be:67:63:21:f5:32:d0:97:2a:
88:18:ac:85:04:ca:0f:a3:39:b8:9c:cc:37:4a:55:
ac:a0:f6:db:86:7c:6c:69:24:c5:a1:f2:59:11:05:
25:77:fc:e3:94:7e:f3:8e:4a:cd:32:64:59:f4:03:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:93:F1:ED:69:81:5B:74:5A:24:47:5E:82:F1:4A:71:71:15:E4
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:35:70:39:36:51:03:18:95:f4:05:ab:c7:19:73:c6:77:6f:
6f:e8:20:d8:d0:c4:86:d8:af:e5:98:59:67:88:19:55:9c:07:
5b:38:9e:b9:05:44:2f:26:12:05:22:a4:85:85:fe:82:40:d1:
a2:45:be:23:51:c1:06:ee:e6:9e:20:93:af:52:42:6e:eb:1c:
08:00:95:6d:31:c6:5a:d5:9c:cf:cc:18:e3:65:cf:a8:8c:15:
b0:46:25:ce:0b:b2:51:79:48:c1:8e:c5:4d:a6:50:68:a1:04:
38:cb:e8:8f:3b:e2:22:8b:e6:ba:c3:a9:01:d6:f3:e3:cc:97:
6f:5e:19:0f:bd:db:b7:4b:54:62:68:9e:19:76:a5:dc:13:b7:
c1:e2:bb:ec:fa:e6:ec:30:ec:88:4c:cc:76:5f:e7:ae:05:ed:
79:d0:ff:25:49:78:14:db:fb:80:3a:3c:ff:32:56:34:ec:13:
54:9b:48:4b:a1:b5:9f:f6:0e:0b:ff:d5:0c:ca:ba:85:04:6c:
56:38:f2:65:80:63:9c:1a:4b:0b:24:a8:2d:17:8f:6f:e7:62:
bb:16:67:ab:ec:71:36:75:84:17:1f:6a:28:f6:87:2a:bb:d9:
72:fe:3d:be:8f:02:f5:ee:c9:61:bd:07:6b:8b:b5:c3:11:54:
10:3c:78:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XUPo7xdmCGWp6nsHB+1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWVjNTk3ZDFiMzc5ZWE4MzIzNjMxMmM2ZjhiMmJjZTc0
Mzk3NzMwHhcNMjYxMDE1MDcwMTAxWhcNMjYxMDE2MDcwMTAxWjAzMTEwLwYDVQQD
EygxZWJkOTNmMWVkNjk4MTViNzQ1YTI0NDc1ZTgyZjE0YTcxNzExNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKX/vjvOsyhKMEJdsDn3kALraPaU
pM96kKZGbA5xFoavaDt4AmWAr4he1gFcGiGbvXMYZ5qqjBa7JgWYpZHNKRi2FbMo
rnn6nCRjDFD4NSL1DeMp8jsj/vhby9/MQokHZooLfMl8ERH5O7WykFjz9i6THH4+
33t841eGATmBe/H75G5KBLubGgGbfybfX3mqTDHBaxEtxX46RWXUXjXE1xoPe7dC
wGynvN47D0gl0CNXrJ1uaAmIGejh3RGfmvfbgdst94K/kPa+Z2Mh9TLQlyqIGKyF
BMoPozm4nMw3SlWsoPbbhnxsaSTFofJZEQUld/zjlH7zjkrNMmRZ9ANmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB69k/HtaYFbdFokR16C8UpxcRXkMB8GA1UdIwQY
MBaAFNquxZfRs3nqgyNjEsb4srznQ5dzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3Mjct
OGI4NWIyOGZiYjc5LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yZDhlZmMtYjlmYS00MzJjLTk3MjctOGI4NWIyOGZiYjc5
LzEvMnE3Rmw5R3plZXFESTJNU3h2aXl2T2REbDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTVwOTZR
AxiV9AWrxxlzxndvb+gg2NDEhtiv5ZhZZ4gZVZwHWzieuQVELyYSBSKkhYX+gkDR
okW+I1HBBu7mniCTr1JCbuscCACVbTHGWtWcz8wY42XPqIwVsEYlzguyUXlIwY7F
TaZQaKEEOMvojzviIovmusOpAdbz48yXb14ZD73bt0tUYmieGXal3BO3weK77Prm
7DDsiEzMdl/nrgXtedD/JUl4FNv7gDo8/zJWNOwTVJtIS6G1n/YOC//VDMq6hQRs
VjjyZYBjnBpLCySoLRePb+diuxZnq+xxNnWEFx9qKPaHKrvZcv49vo8C9e7JYb0H
a4u1wxFUEDx4/Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:20:32 2026 by rpki-client