Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: hWmE33qAyZkmbrES8T3YljXrHT0FAUaIleGKpg2w5oc=
Subject key identifier: 88:C1:B8:7D:E3:99:BC:48:77:4A:61:77:95:A5:DA:C6:E0:AE:42:64
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 019FA7BD82547C4CD94A74C16430A22A74AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 029A
Signing time: Tue 28 Jul 2026 08:00:42 +0000
Manifest this update: Tue 28 Jul 2026 08:00:42 +0000
Manifest next update: Wed 29 Jul 2026 08:00:42 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: FYvuxLXXcT7064S1w+bsB471LLWseN8kumvdkeGontA=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:82:54:7c:4c:d9:4a:74:c1:64:30:a2:2a:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Jul 28 08:00:42 2026 GMT
Not After : Jul 29 08:00:42 2026 GMT
Subject: CN=88c1b87de399bc48774a617795a5dac6e0ae4264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:e7:8c:13:d7:75:b4:65:8c:7c:3c:51:a4:
87:7c:e0:77:9c:06:e4:13:9c:a2:67:c0:36:95:bc:
1d:6b:70:77:02:4f:7f:d6:9e:22:28:e8:88:3c:af:
5e:59:13:77:77:09:49:b6:9d:27:2a:8a:50:81:25:
d3:cf:3c:cf:53:c2:98:01:b9:a6:12:6b:4b:a2:62:
1e:da:ec:ff:d8:62:39:53:64:6d:77:04:59:c9:ef:
07:49:76:e9:2f:48:ee:2b:22:a3:9b:d2:de:27:2c:
8b:df:0e:8e:30:7b:88:b1:0c:38:08:41:79:3f:a9:
4a:5a:2d:db:a8:63:4e:46:f7:04:41:0d:86:a6:2c:
f5:85:c9:fd:5f:9e:e9:4c:22:e8:d9:4f:a5:33:e1:
73:a5:30:96:fc:c9:d9:d9:7c:06:97:39:89:c0:e5:
ca:7a:19:0b:63:f3:f5:41:e9:b7:50:a9:83:59:c9:
0b:d8:16:4f:b1:11:b7:3f:2f:bf:ad:ad:f2:0a:aa:
5e:8e:62:9a:95:71:0b:52:27:73:a3:b0:cb:1f:cf:
db:b1:b2:69:e3:c0:16:57:53:8c:a5:3e:e7:80:77:
1c:3c:f9:5f:15:17:0f:c4:29:6b:9b:62:0f:b0:a4:
63:ec:c5:32:86:92:dc:64:34:f4:13:8f:e6:83:b9:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C1:B8:7D:E3:99:BC:48:77:4A:61:77:95:A5:DA:C6:E0:AE:42:64
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3c:3c:c1:79:cd:3d:5d:0c:e1:92:19:ed:05:69:bb:b9:83:
48:df:f4:c5:01:42:cc:07:bb:e7:bf:ef:c2:71:68:97:53:82:
0e:b7:25:38:ee:bb:4e:2c:d8:18:73:34:b0:15:4f:1b:12:da:
38:db:9c:77:a5:3d:28:6d:ac:a1:e1:9f:57:16:58:8c:d6:c2:
e4:32:57:31:00:30:8c:41:7a:73:e4:a3:55:67:76:57:d9:cb:
11:0a:c5:63:c1:a3:ce:af:2a:6d:27:3c:e5:65:fb:e4:7e:64:
25:4d:45:09:87:60:40:8c:05:04:5e:bc:40:06:a8:5a:03:c3:
21:76:e6:83:6a:63:02:76:2d:ba:c4:a9:c8:4f:7b:fe:98:d3:
08:5c:b5:8c:82:6e:67:79:9f:83:6a:ba:42:32:7c:85:26:83:
e3:0c:3d:ec:92:c4:be:05:12:2c:a3:a8:c0:2a:36:91:50:48:
a9:38:8a:17:70:76:ce:ce:77:bc:03:9d:63:78:8f:39:fb:4e:
cf:df:12:18:66:e2:8b:95:46:be:ed:e3:da:89:8c:41:3b:37:
c2:6c:21:60:b8:a0:ba:5a:e5:0d:6f:6b:8f:c9:8e:80:c1:28:
d2:0f:9d:ca:95:7f:4f:d7:2e:b8:9b:6d:e2:0a:2d:3d:57:a8:
58:87:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:12 2026 by rpki-client