Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: nooFOmpBaNFHJe5KeJkcEMCHX8CuN9lWH8kl+REJw/o=
Subject key identifier: 83:1D:92:FD:A9:2E:A0:E1:6E:4B:4C:02:86:8D:CC:DD:B5:4C:14:8F
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 01A125AFFC2C7ED64E1FD09156ED72170976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 12:00:52 +0000
Manifest this update: Sat 10 Oct 2026 12:00:52 +0000
Manifest next update: Sun 11 Oct 2026 12:00:52 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: KaBteBCYjp5UhVl0GUl39nTNgu05hnHjU/2/p0n0aTI=)
2: Ini83UPVBFujNi82mFdTbIeLJ_M.roa (hash: hQSzKgBjrspgpke+S+SyF68tGyGh2lr/WJ9Pf7DCYOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:fc:2c:7e:d6:4e:1f:d0:91:56:ed:72:17:09:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Oct 10 12:00:52 2026 GMT
Not After : Oct 11 12:00:52 2026 GMT
Subject: CN=831d92fda92ea0e16e4b4c02868dccddb54c148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:d2:57:e9:a7:0b:4b:8b:13:e0:7f:ea:24:
cd:6b:b2:c4:0f:40:c6:67:65:ec:fd:68:17:f7:41:
a7:59:a9:6c:78:e9:c1:c7:9a:3f:4e:3a:77:dd:6e:
c5:ac:a6:09:4c:b3:bf:48:27:2a:b0:62:50:45:f6:
e0:1a:1f:af:83:42:e1:cd:fc:4d:6e:ec:96:95:32:
4c:6b:24:63:d8:fe:ba:43:4d:08:a6:b4:88:b2:76:
9e:99:42:f9:2a:e2:20:62:ce:61:4f:68:37:81:74:
f9:5a:14:5a:01:ce:2b:20:c2:fe:93:02:c9:a0:2f:
e3:72:06:65:12:d9:64:d7:2b:5e:c6:d3:bf:62:a1:
93:1f:0f:5e:2e:42:12:e5:b2:32:49:c5:a4:d5:d0:
71:05:34:69:f9:c8:9a:d2:42:c2:3c:aa:c8:7a:6f:
f3:75:dc:2b:34:71:92:09:be:0d:b7:5e:9a:24:37:
41:0f:0a:85:8c:75:e2:97:7c:07:23:52:53:69:bc:
fe:e7:40:da:1c:6f:52:90:41:1a:16:f0:93:57:1c:
08:26:90:3d:70:94:74:7a:73:74:25:42:ef:87:a9:
b6:08:a8:6d:44:2d:9b:37:86:c4:37:35:7a:d4:95:
a2:f6:7a:3f:4a:b6:ba:4b:9f:3c:5c:77:20:0d:b7:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1D:92:FD:A9:2E:A0:E1:6E:4B:4C:02:86:8D:CC:DD:B5:4C:14:8F
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:56:35:a1:90:83:d5:ce:dc:69:42:63:e1:11:38:55:9d:
ad:cd:27:68:57:6e:58:e6:cf:99:ed:d4:f0:f4:b9:33:57:49:
e8:59:09:27:26:75:d1:33:18:d7:f9:53:47:e6:ea:bc:39:bd:
1a:bb:6d:7e:38:b2:76:f7:8b:1c:9b:c8:87:be:df:e0:58:2f:
0a:df:21:2c:12:08:20:6e:e8:82:fd:b2:c8:d9:59:3c:da:54:
a5:1e:4e:34:0c:d3:cf:2f:16:06:6e:25:6e:ea:46:ad:06:55:
93:fc:82:07:8a:32:ea:2c:2f:28:bf:c0:0f:68:23:96:69:90:
07:38:e5:a5:af:3f:b5:df:94:64:05:74:07:26:a5:b1:10:c1:
7e:28:75:80:92:28:10:1a:c6:14:3d:c0:73:7f:30:3d:b5:ab:
21:e5:a8:33:13:27:69:a7:4f:a0:9b:40:47:c9:32:5a:f4:92:
3b:ae:86:66:61:9a:3a:4b:63:cb:86:c4:9a:2f:88:a3:f6:4c:
88:d3:b1:15:cc:7e:a8:45:35:18:b4:fb:5c:0b:8c:ce:9f:2b:
7e:d3:62:ac:c4:e9:a7:66:a3:42:18:d1:4c:24:6a:9c:c7:7e:
fc:15:e1:21:2f:08:d7:97:9e:22:c4:f0:c6:0b:28:36:26:b3:
4e:9f:59:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElr/wsftZOH9CRVu1yFwl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmU1Y2RmNGM1NGZmODY4Y2U4OTUzMTVlYWI1OGYyZDg4
NjUwYzIwHhcNMjYxMDEwMTIwMDUyWhcNMjYxMDExMTIwMDUyWjAzMTEwLwYDVQQD
Eyg4MzFkOTJmZGE5MmVhMGUxNmU0YjRjMDI4NjhkY2NkZGI1NGMxNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w3SV+mnC0uLE+B/6iTNa7LED0DG
Z2Xs/WgX90GnWalseOnBx5o/Tjp33W7FrKYJTLO/SCcqsGJQRfbgGh+vg0LhzfxN
buyWlTJMayRj2P66Q00IprSIsnaemUL5KuIgYs5hT2g3gXT5WhRaAc4rIML+kwLJ
oC/jcgZlEtlk1ytextO/YqGTHw9eLkIS5bIyScWk1dBxBTRp+cia0kLCPKrIem/z
ddwrNHGSCb4Nt16aJDdBDwqFjHXil3wHI1JTabz+50DaHG9SkEEaFvCTVxwIJpA9
cJR0enN0JULvh6m2CKhtRC2bN4bENzV61JWi9no/Sra6S588XHcgDbc0BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMdkv2pLqDhbktMAoaNzN21TBSPMB8GA1UdIwQY
MBaAFNkuXN9MVP+GjOiVMV6rWPLYhlDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWIt
ZjVmZTNlMWIwYTYzLzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYzNjMzAtNDUyNy00NzIyLTk3MWItZjVmZTNlMWIwYTYz
LzEvMlM1YzMweFVfNGFNNkpVeFhxdFk4dGlHVU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNRWNaGQ
g9XO3GlCY+EROFWdrc0naFduWObPme3U8PS5M1dJ6FkJJyZ10TMY1/lTR+bqvDm9
GrttfjiydveLHJvIh77f4FgvCt8hLBIIIG7ogv2yyNlZPNpUpR5ONAzTzy8WBm4l
bupGrQZVk/yCB4oy6iwvKL/AD2gjlmmQBzjlpa8/td+UZAV0ByalsRDBfih1gJIo
EBrGFD3Ac38wPbWrIeWoMxMnaadPoJtAR8kyWvSSO66GZmGaOktjy4bEmi+Io/ZM
iNOxFcx+qEU1GLT7XAuMzp8rftNirMTpp2ajQhjRTCRqnMd+/BXhIS8I15eeIsTw
xgsoNiazTp9Zaw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:33:34 2026 by rpki-client