Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: 2hU9fLIXLv34qmhtdar49bHCRTVoceDgZBqGoXRUkr8=
Subject key identifier: 3E:10:FB:16:95:19:B3:3F:C5:48:0A:82:D6:6D:EA:1E:27:DD:00:48
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 01A0C5C59BF71277A52FFF2F5E3687F230B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 033D
Signing time: Mon 21 Sep 2026 21:00:57 +0000
Manifest this update: Mon 21 Sep 2026 21:00:57 +0000
Manifest next update: Tue 22 Sep 2026 21:00:57 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: t8C/fPxtX0nQ+oTj5X2RUJ8ay/k/UAdH6eT9W6d3a08=)
2: Q0jEdYQfiuBaGOGIDi6fxqkNu30.asa (hash: f7Pw5WF8TCRU0QwClTVBmnd+i1bv82uwZrEWnEkGYmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:9b:f7:12:77:a5:2f:ff:2f:5e:36:87:f2:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Sep 21 21:00:57 2026 GMT
Not After : Sep 22 21:00:57 2026 GMT
Subject: CN=3e10fb169519b33fc5480a82d66dea1e27dd0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:64:52:5b:b3:aa:58:f0:8d:d7:7f:90:a4:
71:6b:e5:38:6c:68:1f:8f:4f:0b:1b:7c:5c:5d:0a:
c0:32:2e:a2:22:58:32:9d:8b:ef:24:63:e6:68:61:
1e:cc:2c:8c:0f:37:4e:7c:ca:fc:9a:0a:35:3d:d5:
64:2a:ba:d0:4c:90:3a:c3:f0:c7:1c:26:9c:3c:93:
3e:18:ea:fb:78:51:23:ad:54:1d:66:a7:85:fd:84:
96:a2:86:23:69:e8:e6:d1:fd:4d:16:e1:94:59:e2:
51:87:a1:05:ff:15:d2:e5:24:34:06:b3:18:a8:b6:
14:c2:13:43:14:f2:80:32:ba:f9:d8:50:92:a0:29:
47:18:33:40:ff:31:f9:6d:c9:98:3a:52:e1:0d:84:
e8:8a:44:04:87:e5:dc:b2:93:0a:64:18:60:58:09:
0e:f8:d4:ba:a8:74:cc:6a:fc:da:f2:5e:8d:de:46:
24:60:98:d6:e0:13:6f:12:31:6e:ef:8b:39:3b:06:
12:78:51:e2:4a:c3:6b:22:a7:dd:3b:91:5c:47:4f:
43:6c:77:0f:19:8c:a9:9f:10:c1:c2:73:13:95:1f:
5e:c6:d6:21:1b:cb:e8:0b:a7:01:2c:f5:f2:0a:4c:
46:dc:69:8a:34:d9:69:1f:4e:85:3f:64:d2:74:fe:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:FB:16:95:19:B3:3F:C5:48:0A:82:D6:6D:EA:1E:27:DD:00:48
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:ed:52:34:52:55:a6:ab:83:54:55:d4:e5:0a:66:e1:81:
a9:8b:08:15:a1:17:ac:da:90:14:c7:29:42:25:10:93:2a:2b:
1a:bc:1c:eb:f2:fe:8b:14:03:85:62:95:b8:39:d8:e3:9f:8d:
dc:b3:d5:36:5a:1f:ab:4b:e3:0a:20:5d:f6:23:ea:44:8e:2c:
da:d5:f3:c6:99:63:2f:64:af:7c:43:f8:24:62:7d:82:6f:c8:
07:25:a8:b5:7a:3a:d5:0b:e2:ef:3d:d3:37:32:c8:22:66:1c:
b1:68:bf:3c:09:c2:ec:4d:5b:a0:72:71:d1:0e:27:6a:b8:7a:
9b:4f:93:64:7f:68:0a:8f:bf:e6:b7:65:ec:b5:54:6e:8d:1c:
37:09:a6:cc:2e:aa:2e:b9:39:07:66:ef:c6:01:c5:43:dc:79:
a0:61:42:de:f3:74:d2:66:f4:d9:c0:f9:30:ba:74:b5:80:7b:
ad:39:03:a5:89:e5:93:38:16:f1:49:cb:0d:79:1f:bc:e6:26:
49:6f:6f:9a:f7:87:3c:97:e9:c9:97:b9:73:1d:f8:88:22:4e:
f2:45:23:ab:1b:0c:74:08:4c:93:94:93:20:7f:79:5e:41:83:
2c:80:92:91:db:75:c2:85:e5:93:8b:1f:45:fa:81:0a:4e:a7:
35:9c:e9:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFxZv3EnelL/8vXjaH8jCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2E4M2ViMWZhZjk3NzNkMzUwYzdkY2U2MTJjYTI4MTQ4
NGU3ZmMwHhcNMjYwOTIxMjEwMDU3WhcNMjYwOTIyMjEwMDU3WjAzMTEwLwYDVQQD
EygzZTEwZmIxNjk1MTliMzNmYzU0ODBhODJkNjZkZWExZTI3ZGQwMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2BkUluzqljwjdd/kKRxa+U4bGgf
j08LG3xcXQrAMi6iIlgynYvvJGPmaGEezCyMDzdOfMr8mgo1PdVkKrrQTJA6w/DH
HCacPJM+GOr7eFEjrVQdZqeF/YSWooYjaejm0f1NFuGUWeJRh6EF/xXS5SQ0BrMY
qLYUwhNDFPKAMrr52FCSoClHGDNA/zH5bcmYOlLhDYToikQEh+XcspMKZBhgWAkO
+NS6qHTMavza8l6N3kYkYJjW4BNvEjFu74s5OwYSeFHiSsNrIqfdO5FcR09DbHcP
GYypnxDBwnMTlR9extYhG8voC6cBLPXyCkxG3GmKNNlpH06FP2TSdP5/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4Q+xaVGbM/xUgKgtZt6h4n3QBIMB8GA1UdIwQY
MBaAFNrKg+sfr5dz01DH3OYSyigUhOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUt
YjVlYjRjNmI3ZWE4LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUtYjVlYjRjNmI3ZWE4
LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsTtUjRS
Vaarg1RV1OUKZuGBqYsIFaEXrNqQFMcpQiUQkyorGrwc6/L+ixQDhWKVuDnY45+N
3LPVNlofq0vjCiBd9iPqRI4s2tXzxpljL2SvfEP4JGJ9gm/IByWotXo61Qvi7z3T
NzLIImYcsWi/PAnC7E1boHJx0Q4narh6m0+TZH9oCo+/5rdl7LVUbo0cNwmmzC6q
Lrk5B2bvxgHFQ9x5oGFC3vN00mb02cD5MLp0tYB7rTkDpYnlkzgW8UnLDXkfvOYm
SW9vmveHPJfpyZe5cx34iCJO8kUjqxsMdAhMk5STIH95XkGDLICSkdt1woXlk4sf
RfqBCk6nNZzpHA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:23 2026 by rpki-client