Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: R/6G/IKzneCi34Y1N4G9OemHPw1V9CuuAVHjUU4O7p4=
Subject key identifier: C9:B4:0B:33:02:2A:85:26:F1:40:D0:3E:7E:83:42:99:C8:8D:91:C7
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 01A10EF0F06D4D8CD9E260EFBCB5785E1248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 0354
Signing time: Tue 06 Oct 2026 02:00:33 +0000
Manifest this update: Tue 06 Oct 2026 02:00:33 +0000
Manifest next update: Wed 07 Oct 2026 02:00:33 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: +2YxTle45xg9DqEDK7DqxYhQfyHebrgGqbE7/QefcnQ=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:f0:f0:6d:4d:8c:d9:e2:60:ef:bc:b5:78:5e:12:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Oct 6 02:00:33 2026 GMT
Not After : Oct 7 02:00:33 2026 GMT
Subject: CN=c9b40b33022a8526f140d03e7e834299c88d91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:81:47:b1:4b:27:83:a8:a1:b4:46:10:84:5a:
61:d0:52:99:3a:a0:1a:cb:5b:ae:96:db:03:12:7e:
52:c8:21:cd:04:80:fa:24:f2:07:c0:54:73:ae:3d:
a5:a5:4f:b1:9d:b5:1c:1f:11:8f:1d:ef:4d:44:48:
2d:d1:11:c7:fb:52:e4:8a:5a:da:43:d0:cd:69:e6:
9d:c2:f8:58:92:ae:f6:0e:33:b3:6c:57:b9:9f:58:
bb:b0:7e:a9:82:70:8a:5e:c4:4c:f5:cd:fb:47:cc:
a2:ac:c6:98:27:26:34:4d:88:f9:b3:12:ae:26:c1:
26:e5:25:f8:a2:8a:44:8c:8d:f2:75:f1:fd:34:02:
29:7e:e9:26:f0:fd:ce:b4:62:6e:25:50:72:3b:f5:
d7:0a:56:45:d5:38:20:5b:ff:1c:40:92:1b:ab:1a:
04:56:67:3b:3c:3b:6d:6c:a8:f1:99:f6:75:62:c0:
e6:b0:c7:01:a3:b7:80:06:04:f1:e4:e7:ab:50:fe:
a5:b4:2a:30:66:0c:78:b3:9d:31:60:e1:31:86:2b:
b9:7a:50:3d:4d:de:49:f1:17:04:10:d2:06:bc:6b:
0f:22:7d:93:82:59:15:b6:4c:4e:e4:06:bf:64:51:
aa:f7:09:41:b2:06:3b:95:01:cc:50:22:46:71:be:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:0B:33:02:2A:85:26:F1:40:D0:3E:7E:83:42:99:C8:8D:91:C7
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:73:65:5b:3c:16:97:d6:ca:a1:c1:0f:3d:d9:63:cd:a0:
23:62:e1:b0:0e:f5:fb:8c:35:db:f6:9f:4a:3a:e6:95:ef:59:
ee:73:74:2e:7f:a6:6b:87:27:d8:3d:95:2c:71:82:17:38:02:
56:9b:2a:5b:6c:ad:0a:aa:fc:94:05:d6:23:25:e9:bb:d4:b3:
7a:e6:d4:a3:8f:14:59:71:fc:0c:c4:42:45:93:2b:c9:f8:41:
c6:94:15:09:ba:d6:71:cf:ab:f9:1d:c5:2c:1c:1b:74:90:c7:
da:55:4c:85:0e:20:da:2d:3d:bb:71:d1:3d:84:fa:1b:29:38:
8a:c5:1d:7c:dc:77:74:01:57:6e:88:aa:7d:35:38:a2:a4:7a:
3d:e7:51:fe:cb:57:2c:91:0e:05:9e:c0:15:a7:6c:d5:f0:4d:
7c:9d:cb:c8:20:37:3d:b2:05:a1:16:67:b0:c8:d1:a3:c0:40:
4e:a4:d3:64:f5:5a:93:d3:e1:55:28:a6:f3:2c:be:9c:65:e7:
20:42:4e:cd:b5:b7:de:b0:3a:c4:85:17:e1:2b:58:bc:ee:34:
c5:39:fb:a5:54:85:ba:6b:a5:28:98:77:9e:15:17:7f:de:eb:
e4:ed:f8:51:57:7d:d8:75:20:d1:97:2e:e8:3b:2c:e5:59:33:
27:90:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:53:30 2026 by rpki-client