Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: qxBoeSqJDahwOJT9qFScmRvdVfcRowi10Y2YUEl1CKU=
Subject key identifier: 18:6F:2D:68:47:76:DB:58:EF:11:BF:93:60:9F:38:57:29:84:74:CD
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 019EBEB5BD6B6C594DF94BD62F2C9EAE66E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 0221
Signing time: Sat 13 Jun 2026 02:00:41 +0000
Manifest this update: Sat 13 Jun 2026 02:00:41 +0000
Manifest next update: Sun 14 Jun 2026 02:00:41 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: i0t8QMxrzfRWvfTvqkVoKWbHtxR2AfhkS+RrAFTb/Ns=)
2: hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa (hash: R04Z5dzTVpp/mJ118ZonHq/GgrG1tGSGF8iWqD8/YV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:bd:6b:6c:59:4d:f9:4b:d6:2f:2c:9e:ae:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Jun 13 02:00:41 2026 GMT
Not After : Jun 14 02:00:41 2026 GMT
Subject: CN=186f2d684776db58ef11bf93609f3857298474cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:1e:e3:05:18:2b:d7:50:87:9d:37:82:a5:
e1:03:4d:56:3a:6d:6b:d4:1f:f6:5b:d5:7b:1a:91:
7b:9e:a3:56:46:3d:73:a0:19:f3:8f:74:52:2c:2e:
8f:0f:9f:d9:0a:0b:64:ec:b1:a1:40:1e:74:1c:24:
2c:13:ac:7f:56:c0:72:3e:65:e6:d1:42:d2:b3:49:
15:f6:c3:e9:5e:1b:89:bc:01:d9:ad:63:6b:4b:b8:
19:8a:f7:a7:d0:96:b3:7d:52:22:ad:8e:9a:af:4f:
40:4e:f6:16:7f:13:58:50:bd:78:46:56:a7:79:03:
b1:6a:c5:8e:ca:c4:ce:b4:4d:1f:e8:79:88:db:21:
70:32:15:5c:5c:1c:5b:29:5c:99:3b:cf:03:5e:2c:
cd:b3:23:37:78:3d:13:cd:fd:b5:98:02:dc:04:8a:
aa:ff:6e:bd:52:12:38:e8:c0:50:0c:c6:49:af:cc:
43:0e:e8:34:fb:e6:eb:8d:98:68:85:97:e2:17:19:
4d:27:8a:59:1a:bb:22:c4:21:fe:4a:5d:e8:2f:e5:
bd:82:a6:84:dd:1a:e5:62:bf:dd:44:46:22:92:85:
c8:71:20:42:8f:56:b2:cb:ee:b9:61:da:f5:5e:6d:
a6:fa:df:0e:f2:a3:d7:8a:66:55:88:ec:b6:b0:19:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6F:2D:68:47:76:DB:58:EF:11:BF:93:60:9F:38:57:29:84:74:CD
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:14:ec:91:f8:da:03:ec:f3:0f:e6:36:20:20:e6:53:b5:c6:
e1:c2:8c:dd:32:a0:b3:94:57:27:7d:51:61:fd:58:1b:68:3f:
e9:f2:4c:7f:ef:3c:26:61:c1:1d:e5:04:32:5e:7f:9e:fe:1f:
29:26:1a:71:f9:8b:ea:6a:94:5b:33:7d:9e:59:24:85:4d:d4:
16:7a:1c:53:33:fa:c4:c6:5f:f6:47:84:c0:47:d3:9e:eb:5d:
39:7c:12:53:24:3f:71:0e:bc:54:2f:3b:01:4b:4f:dd:bb:7c:
4a:fc:93:21:86:2d:46:4b:c0:e9:ca:64:fe:ea:e3:dd:d8:f7:
35:a0:35:f3:41:72:53:47:e6:ca:a8:03:82:fe:e4:93:fc:98:
af:0a:f8:84:af:01:77:0e:d0:56:c3:d2:5b:99:21:2e:6b:63:
49:a7:fd:da:16:04:3e:37:d6:9e:5b:04:8b:d9:66:2b:c9:ee:
57:65:9c:1b:41:98:8e:d8:9c:99:bd:9c:11:56:7c:c6:cc:9f:
43:57:44:82:69:08:7c:d6:8b:0d:e4:43:65:b2:9e:28:17:32:
07:07:65:76:24:2c:03:07:0e:a3:c7:2b:39:21:a5:42:c7:03:
bb:e4:49:fa:e1:25:5e:32:53:f5:da:90:a8:c7:67:6d:4c:06:
fe:6d:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:16 2026 by rpki-client