Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: e+EoujU0EdnQDjK2j4l/5vefvjkq/wqdvuXXfI56580=
Subject key identifier: 5B:4E:D1:FC:05:A5:53:30:7A:47:BE:AB:06:EF:8E:E3:A7:A1:61:CD
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 019D9D083720322166CF3364017FE5AD959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 018B
Signing time: Fri 17 Apr 2026 20:00:54 +0000
Manifest this update: Fri 17 Apr 2026 20:00:54 +0000
Manifest next update: Sat 18 Apr 2026 20:00:54 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: SxdSSEHRZIc1OejMF5vpuOGRD1KLbhW+KeQw1IUWz1s=)
2: hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa (hash: R04Z5dzTVpp/mJ118ZonHq/GgrG1tGSGF8iWqD8/YV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:37:20:32:21:66:cf:33:64:01:7f:e5:ad:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Apr 17 20:00:54 2026 GMT
Not After : Apr 18 20:00:54 2026 GMT
Subject: CN=5b4ed1fc05a553307a47beab06ef8ee3a7a161cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:15:9f:8d:35:73:64:17:e9:ea:ee:d4:7b:
97:6e:0d:34:92:09:4e:c1:6b:e6:4c:3d:28:44:0e:
ec:48:e2:cb:2c:d0:6b:4a:19:b1:c5:93:c4:34:9b:
a8:e9:d3:0f:b1:26:2d:0f:94:02:2b:f2:00:c8:f7:
c7:3a:4b:80:83:58:6b:1f:5d:58:ac:84:cf:4f:e6:
1e:88:ec:1b:53:34:99:63:62:5b:8e:5a:28:be:c5:
aa:d8:b0:27:cc:07:9a:6d:ef:4f:e1:37:bb:5c:dc:
30:88:94:a0:e2:c0:2c:7e:b6:d4:63:83:a2:f5:e7:
c9:63:8d:f0:99:c4:e7:5f:cb:32:37:70:ec:31:cc:
08:6e:33:1f:50:d3:ab:96:0b:63:6c:35:20:99:42:
d1:36:f2:45:78:61:47:9c:b7:30:5e:77:c4:dc:60:
9c:f4:1a:9c:b1:37:a8:af:5b:07:46:17:d7:e3:96:
94:0c:25:c2:1e:9f:d6:ff:00:0d:51:49:37:5b:5f:
70:b9:f7:6c:94:03:79:e7:e6:10:53:53:ef:ab:48:
c1:9b:99:95:b0:e4:0b:61:41:78:35:53:89:76:7b:
eb:51:83:a3:05:20:63:fc:41:80:21:97:49:81:25:
c9:fa:8d:d9:03:9a:bf:ba:2d:ea:c2:7b:0d:b3:28:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:D1:FC:05:A5:53:30:7A:47:BE:AB:06:EF:8E:E3:A7:A1:61:CD
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:ad:9f:6a:fa:75:79:68:81:d4:b2:24:73:33:54:e0:73:
7f:43:52:ec:a2:b2:82:36:69:ed:60:d4:b4:04:42:13:f6:f8:
5d:04:9b:9d:0b:c1:10:4f:52:f7:44:2b:3a:ac:c5:d3:fd:7d:
d2:64:2c:b1:d2:81:cc:7c:b5:cf:8f:ae:81:14:b1:78:d3:43:
61:fa:60:06:5c:62:7d:75:29:4b:37:32:c5:58:cf:d0:00:7b:
29:da:19:cc:0d:dd:12:4e:22:a5:56:a1:65:00:59:8c:b2:6d:
25:4e:d1:de:64:06:12:65:c6:af:46:24:ab:39:76:47:c0:c4:
eb:67:b7:08:13:64:44:6b:72:e3:dd:d3:cf:04:da:de:d8:33:
ee:5a:97:84:86:3b:1e:6e:78:91:eb:89:88:d9:2a:80:59:1a:
2c:cc:69:f1:d7:ff:13:56:5b:dd:1f:43:6a:fc:fb:d1:68:63:
57:47:f2:c6:0c:d2:9f:55:0e:a1:43:68:14:36:09:50:62:f4:
e1:87:4b:11:97:c7:33:66:67:69:02:7d:58:92:3a:dc:32:1f:
18:00:bf:c6:20:67:9c:26:48:69:85:33:4a:d2:fa:b0:5e:2d:
1d:af:ec:b6:c4:83:9b:4d:da:31:13:24:0c:51:94:77:62:b1:
c9:a2:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:01 2026 by rpki-client