Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: v86YCYi+mjlYDEjZ4I4BeSUlNCdoxQkUfsLO0hf7ZoI=
Subject key identifier: 50:43:12:14:07:C7:F0:87:25:B7:20:34:19:85:61:C4:7C:FA:67:04
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 019CAD2265DA310BE1E65F465028A05103D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 011B
Signing time: Mon 02 Mar 2026 06:00:38 +0000
Manifest this update: Mon 02 Mar 2026 06:00:38 +0000
Manifest next update: Tue 03 Mar 2026 06:00:38 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: SogIkAuyXu9DCOmgrp1/bUy9FotEm2yq7ZdMWy9iRSU=)
2: szRLM3Az0xzE-SZ2cP8IE4cXA8c.asa (hash: CVKDj1/53BYjcVJSpA6JPeV/CJrhFA+lF2cwIdYQJr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:65:da:31:0b:e1:e6:5f:46:50:28:a0:51:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Mar 2 06:00:38 2026 GMT
Not After : Mar 3 06:00:38 2026 GMT
Subject: CN=5043121407c7f08725b72034198561c47cfa6704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:37:9b:a5:a5:61:b1:b8:17:bd:41:ca:26:
f1:5d:a3:f1:d4:c2:69:0a:f3:3e:77:1e:61:1c:4c:
72:75:b6:a8:ab:2a:ca:50:2b:2d:d8:b3:18:9e:fa:
4d:0d:87:73:b1:3b:85:70:b2:f7:9b:2e:11:e7:a2:
0b:9e:33:21:d7:dc:f9:36:53:d4:e3:14:eb:af:19:
c8:3f:b7:ea:50:ba:f2:c2:c2:1b:a3:b1:33:75:99:
a3:5f:5c:9d:30:32:0d:dc:90:e6:9b:10:50:b3:e8:
d1:89:c2:87:c5:79:e8:ee:6c:18:1a:6c:90:1b:8b:
ff:c5:6f:c4:be:e4:9e:65:9e:b7:bb:18:f1:c9:4c:
d6:76:63:59:9b:16:90:75:42:3d:81:e9:74:4d:11:
be:41:09:55:3c:77:35:f0:92:00:e2:7c:ce:b7:ac:
2f:16:fc:de:55:4a:6e:92:ab:ef:0e:5b:0c:07:93:
32:dd:b5:81:27:a3:88:3f:05:98:b0:83:7e:ad:31:
7a:b4:7b:08:42:ba:63:d5:df:c5:39:53:b1:c6:58:
e3:85:6b:15:7e:e9:5b:38:08:db:72:53:1e:44:56:
cb:4c:db:35:fa:8c:c1:d2:97:b8:b8:91:ed:5a:b0:
c7:16:bd:36:f6:df:83:1c:2e:a1:20:0f:ce:60:fb:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:12:14:07:C7:F0:87:25:B7:20:34:19:85:61:C4:7C:FA:67:04
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:f0:8e:a8:c2:ae:5c:76:79:48:2a:a8:14:97:5d:46:4c:
7c:0a:dc:ea:9e:36:ca:74:d3:26:2f:74:7f:f8:6f:0f:8c:38:
10:d8:58:5c:56:9f:0b:a7:9d:e7:73:8e:26:28:dd:0f:e3:73:
c7:d3:7a:f7:68:d9:17:bc:5d:6b:5e:0f:b2:10:93:a6:7f:6d:
88:64:a4:06:19:58:6b:ca:db:4f:70:25:b5:0b:32:c1:a0:4c:
7b:75:19:d2:3d:22:15:0e:ad:96:1b:95:c6:f2:62:4f:79:2d:
32:be:ea:d6:ae:0e:bf:88:36:47:6f:9a:52:e8:d2:c1:10:a9:
89:51:f7:41:3f:94:c7:e0:1b:20:4e:2f:d1:7b:8d:a0:7b:11:
7c:59:7f:6c:27:42:20:d5:26:5e:82:4c:db:b8:1f:ab:aa:2f:
ba:6a:7d:6c:bd:59:aa:76:17:15:01:a6:71:44:16:1e:79:df:
0f:0a:26:bf:1a:9f:1e:f8:6b:2e:6c:19:b1:a8:90:7f:c7:49:
8e:ec:39:ea:4a:16:58:b0:be:6e:bc:4d:0c:65:3f:a3:b3:8f:
ff:28:67:78:f0:f3:da:af:62:ed:1b:51:c0:7d:9d:0a:84:ad:
2f:35:71:19:47:b3:10:71:9b:bd:c7:51:e7:e3:0f:e1:15:54:
ca:1f:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:22 2026 by rpki-client