
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: LpK7TuT5WLxim8ICxo3PYeLNO06TahRjDA5hAK8osps=
Subject key identifier: 2D:28:37:E9:FC:EE:7B:66:14:1F:1A:1B:7F:A2:00:59:5B:87:F3:4B
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019F17F9DA55FA172C9C737B9A2A22A34F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 10:01:18 +0000
Manifest this update: Tue 30 Jun 2026 10:01:18 +0000
Manifest next update: Wed 01 Jul 2026 10:01:18 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: s6MfniVC6IDTSEmO15K6xx/8mSc6mb1kG9yA4ZYan64=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:da:55:fa:17:2c:9c:73:7b:9a:2a:22:a3:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jun 30 10:01:18 2026 GMT
Not After : Jul 1 10:01:18 2026 GMT
Subject: CN=2d2837e9fcee7b66141f1a1b7fa200595b87f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:24:97:cc:bb:6e:a1:7c:41:04:7d:ff:bd:
db:19:f9:b8:de:96:92:2b:ab:fa:39:b1:67:17:b3:
19:a6:4d:31:16:1b:25:78:48:74:15:85:eb:60:7d:
70:0c:03:87:c5:60:33:d2:03:f1:ed:2a:db:3d:28:
66:22:3f:8b:df:da:a1:7d:73:b0:c0:a4:59:5d:3f:
d1:d6:e1:12:8f:d9:21:9a:86:2c:d4:f4:c6:fe:d7:
a8:d7:5e:60:f9:b6:ad:ed:69:0e:2c:c5:2e:c6:25:
f8:3d:94:18:79:36:f2:5e:21:8a:08:20:06:64:ec:
39:d8:62:e0:fc:60:16:16:3e:28:a9:21:75:b0:eb:
49:9a:cc:6a:15:91:5a:62:4e:dd:fa:db:e8:0e:44:
cf:56:ef:9e:16:6c:6d:70:58:16:44:27:95:ae:c3:
b8:95:7a:10:44:26:3f:17:26:87:e6:99:30:cb:21:
32:1e:4a:5f:5c:eb:62:49:e4:cb:84:f4:bc:71:dd:
d0:bf:98:0e:20:84:62:93:63:10:fe:29:22:4f:e3:
58:c3:01:d6:2a:b3:93:42:b4:a4:e3:df:90:5e:75:
39:67:bd:12:7b:a4:f7:66:c2:7d:6c:e1:f3:51:16:
5e:bf:a3:e6:f2:93:a8:2b:7d:5d:e0:f9:ef:60:33:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:37:E9:FC:EE:7B:66:14:1F:1A:1B:7F:A2:00:59:5B:87:F3:4B
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:21:e6:b8:7b:d6:f8:31:78:df:b3:ff:12:39:d4:7a:4c:2d:
94:01:ab:0f:f5:df:40:af:5f:15:e2:c0:d8:c4:4e:fe:ed:52:
da:81:88:53:dd:93:cd:15:fe:17:e7:26:23:0d:7d:7b:e1:28:
a8:2e:86:af:a0:a3:20:23:9c:9f:5f:8d:fd:35:e5:8c:bb:6c:
d4:05:e9:a5:a6:a2:d4:9c:a9:d5:86:a0:07:3f:d9:2b:70:8c:
4e:e0:16:04:f5:96:ab:d8:91:6c:fe:83:6b:d3:11:36:db:bf:
4d:e4:01:41:92:c5:f5:56:2e:7f:8d:fa:c3:9d:d7:c5:50:16:
b4:38:50:a5:32:4c:b9:69:10:06:9f:a2:da:2c:3f:39:0c:5d:
2e:68:a0:45:33:eb:ed:92:1b:6f:c7:4f:0e:95:38:b4:01:60:
8a:1f:e0:7e:9e:a3:17:7a:7d:db:c3:7b:d6:88:25:4e:4d:5c:
46:b4:9a:a5:f1:f4:33:fa:ca:d7:ff:99:89:ae:7e:c1:61:87:
f4:05:78:36:53:07:3d:26:41:cc:86:54:53:b2:a8:91:2a:81:
56:13:e5:9b:51:f9:9f:60:a1:0f:90:e3:6e:26:48:e4:cd:18:
5b:a2:c1:9b:2a:69:4c:dd:e2:f1:5f:05:25:25:b6:bf:6a:39:
6d:0a:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:00 2026 by rpki-client