Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: ypbxVIHACaqfA2l/cdBpCOXF+xYI6OIq05zC+/pqED4=
Subject key identifier: 8E:3A:49:30:1E:61:12:84:83:6C:C5:E5:A8:FA:2C:5F:65:BD:74:4B
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 019E1D591956014E88FC889EE819C6107ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 01DC
Signing time: Tue 12 May 2026 18:00:38 +0000
Manifest this update: Tue 12 May 2026 18:00:38 +0000
Manifest next update: Wed 13 May 2026 18:00:38 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: ZI0W0bPFce38TyktNzrST69FhYkTRRk2h699E+ThA+o=)
2: hzlvDuEik5KewUtPDqrBpdd0iR4.asa (hash: 78MMyEGGhYv2n8lAIMHN69jmN3Yqiu304UwiKvSAC60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:19:56:01:4e:88:fc:88:9e:e8:19:c6:10:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: May 12 18:00:38 2026 GMT
Not After : May 13 18:00:38 2026 GMT
Subject: CN=8e3a49301e611284836cc5e5a8fa2c5f65bd744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:a6:0d:30:25:40:7f:c9:4a:df:0c:71:7e:
f6:eb:35:49:1a:bd:b5:cc:a8:7e:70:b9:30:93:5b:
af:9b:3d:bf:35:dc:c0:ea:5c:6a:78:ea:2c:dd:c1:
c0:37:55:5e:ca:a6:9f:2d:54:7b:9f:03:c7:25:9c:
f3:68:5e:db:1e:f9:bd:5a:69:6e:93:e7:b3:55:19:
1e:2a:6d:c3:41:f4:af:3a:2c:d7:f6:6e:57:1f:60:
45:cf:d8:3d:cf:b0:db:ef:29:3a:b3:5e:21:fe:18:
a5:f9:c8:8d:59:fa:73:3e:90:44:43:5a:bd:9e:c2:
b0:19:4c:fc:78:4d:69:c4:23:4c:5d:fd:8c:29:be:
45:48:3c:d1:e1:1d:0a:c4:fb:62:1b:c4:91:d6:e5:
8b:e8:49:b7:54:36:43:b5:8d:7f:07:58:73:c6:ce:
3f:8c:dd:cb:bf:80:f3:70:9c:3a:bd:03:48:24:be:
40:8b:e5:0b:b4:6b:0a:60:34:6b:85:fd:a7:04:3c:
48:06:97:d1:84:67:e4:b3:1a:04:b4:9e:cd:ce:c3:
e7:2c:4f:a6:6c:3e:33:0e:e6:49:78:9d:f1:a4:1b:
70:71:34:37:b5:72:e8:b0:1f:20:43:e5:b4:c5:bb:
5a:9a:5a:1e:75:f9:bf:1b:54:19:c2:0f:8b:96:6e:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:49:30:1E:61:12:84:83:6C:C5:E5:A8:FA:2C:5F:65:BD:74:4B
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:aa:c6:a4:57:5f:ea:a7:40:17:c1:41:5c:58:7f:c7:35:
5a:33:f6:a9:79:b5:fb:a6:ae:5d:b5:db:4c:92:43:da:dc:d6:
f3:62:a0:c8:ef:76:52:a6:28:66:1c:00:6a:d3:71:01:67:91:
96:3b:f3:5f:c2:ac:3d:af:7e:16:c9:c9:df:db:0c:c2:eb:78:
e6:11:5d:58:df:f2:01:f3:d4:b6:32:ef:bc:6f:9e:9e:bb:db:
31:c8:0a:da:b0:5e:ba:48:94:53:68:33:81:a0:f0:ff:06:37:
77:5d:f7:74:4e:2f:53:4e:8c:9a:d2:48:5b:4c:6e:45:4a:3b:
47:29:21:01:55:3e:d8:db:ee:a7:0a:c1:72:ee:87:78:36:d3:
eb:9e:4e:05:69:68:fb:dd:c7:ee:f8:0c:26:28:3a:a8:17:0c:
ad:61:1f:5d:39:cb:94:7d:db:de:f6:33:a0:95:45:2b:fc:1d:
86:6c:62:d9:ee:f0:63:4f:a6:2d:03:ab:26:83:ad:13:73:a3:
d0:66:61:69:c8:2b:c8:0c:d0:fc:0b:c2:81:d9:dd:05:e4:2b:
36:8d:e4:4e:60:d5:3a:1a:08:0d:dd:44:e1:1e:67:d0:25:0a:
e9:53:50:28:15:cd:2f:f8:f0:83:31:dc:77:ea:1b:61:bb:25:
0c:97:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:13 2026 by rpki-client