Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File: 2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier: yxf885eASeV2pBaQvFzQb94XEtpMbWEZY/OgZU1bU4U=
Subject key identifier: 5A:A4:9F:C4:5E:3B:88:20:25:DC:59:AC:36:66:2C:60:8B:2C:74:DF
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer: /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial: 01A1DEDE3A622DFC4EB40B5B545FFE496853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number: 0103
Signing time: Sun 15 Nov 2026 11:01:08 +0000
Manifest this update: Sun 15 Nov 2026 11:01:08 +0000
Manifest next update: Mon 16 Nov 2026 11:01:08 +0000
Files and hashes: 1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: xMU4jbUEUdWW0PVmQ4JlMNg7GbC8B9c62mZ7+nzfrtU=)
2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:3a:62:2d:fc:4e:b4:0b:5b:54:5f:fe:49:68:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Validity
Not Before: Nov 15 11:01:08 2026 GMT
Not After : Nov 16 11:01:08 2026 GMT
Subject: CN=5aa49fc45e3b882025dc59ac36662c608b2c74df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:4e:22:4f:ab:05:32:92:89:16:15:29:fc:
2d:24:a7:da:d7:7c:4f:5f:22:c6:2f:a4:2c:39:18:
c5:12:4b:f0:ef:78:f5:ae:18:b0:69:55:8f:95:de:
fd:a6:eb:52:5e:70:4c:53:df:5f:d8:82:ff:b7:b1:
62:dd:a4:d1:94:19:8c:af:e6:4b:75:a8:e0:17:72:
d6:78:fd:cd:92:ca:f7:4c:74:4d:09:fa:e2:c5:35:
bf:5d:50:ed:6c:dd:01:94:7b:22:ca:b0:88:b1:e0:
4e:5c:d4:b2:ee:ab:0e:15:02:74:77:33:17:9c:a4:
42:5f:54:8f:26:4d:c6:06:1d:84:c7:fe:f6:95:ba:
12:9a:e6:32:55:0d:c1:88:97:e0:4f:06:99:79:39:
d1:9b:7c:27:83:65:42:3b:b2:33:b4:b5:68:59:01:
33:76:c2:25:48:f9:60:4b:81:a0:16:ad:bc:25:6a:
e3:22:ca:bf:bb:aa:6b:23:d2:f7:aa:a9:ef:1c:cd:
b0:e2:07:4f:69:21:a4:6f:73:63:63:df:c1:7a:5a:
ea:35:9b:2d:48:ee:f7:82:bd:1b:f1:f4:81:31:5c:
3a:0f:55:88:cb:c1:c9:65:7f:c6:cf:3d:90:3e:6a:
9f:2c:bd:51:47:90:68:1c:c4:1f:de:f1:70:49:dc:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:9F:C4:5E:3B:88:20:25:DC:59:AC:36:66:2C:60:8B:2C:74:DF
X509v3 Authority Key Identifier:
keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:63:42:f7:b2:e8:e4:b3:c5:db:6e:f2:e8:7c:a5:50:a5:
f2:29:88:ec:2f:ad:5b:49:b1:d8:0a:23:53:25:d0:f8:5e:f3:
35:45:b6:7f:49:c7:0a:ec:6c:23:24:a9:16:fc:10:22:69:08:
5a:07:5b:36:ef:3f:ea:e7:df:7e:b0:25:e4:3f:9f:9c:9b:36:
1a:03:d0:6c:f8:d4:92:c0:40:83:c0:1c:a8:cd:a4:d3:da:ee:
b8:d1:5a:27:16:8b:ec:7e:bb:6b:d2:b3:3c:c6:cb:42:17:96:
15:06:70:bd:8f:11:70:3b:19:9c:d2:73:2f:e8:a4:5d:ac:97:
79:ca:5d:d7:49:25:57:49:1a:ad:3a:e7:74:c5:51:87:04:9b:
72:90:65:a7:9e:2c:22:3b:ce:9e:f5:17:4c:9a:22:ce:49:b0:
61:ad:c6:3f:c9:71:91:ac:de:e6:22:35:b1:11:e6:db:56:19:
14:62:7b:f8:78:02:e3:3b:6b:d5:e4:70:28:4c:9d:9a:fb:aa:
d4:a2:cd:bb:08:30:ad:b3:eb:9f:f3:63:0c:02:1b:dc:39:5f:
fc:cd:8a:af:55:8c:ce:44:19:43:24:17:34:6f:86:99:5e:8e:
cb:3f:4f:08:d4:77:fa:0e:0b:1d:d5:a4:cc:35:aa:d9:b5:69:
bc:a5:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:38 2026 by rpki-client