Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: 8ydZbRoxxiup4DQU+XF8DOJZ0VzGoibAjwEqe9muiHc=
Subject key identifier: 18:D8:BF:95:4E:F6:FC:9D:91:8B:6F:3C:CD:2F:0F:EF:6A:3B:E5:2D
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 01A0CD7E815C0A63A522AC7D649C9657928E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 0341
Signing time: Wed 23 Sep 2026 09:00:14 +0000
Manifest this update: Wed 23 Sep 2026 09:00:14 +0000
Manifest next update: Thu 24 Sep 2026 09:00:14 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: vcVSJkLkPR9pfkPxGgYfSHKHrJCnP40WY9sjtAl2XF4=)
2: Q0jEdYQfiuBaGOGIDi6fxqkNu30.asa (hash: f7Pw5WF8TCRU0QwClTVBmnd+i1bv82uwZrEWnEkGYmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:81:5c:0a:63:a5:22:ac:7d:64:9c:96:57:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Sep 23 09:00:14 2026 GMT
Not After : Sep 24 09:00:14 2026 GMT
Subject: CN=18d8bf954ef6fc9d918b6f3ccd2f0fef6a3be52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:33:96:dc:45:5b:87:c1:2a:f6:89:16:40:
3b:ea:59:fe:66:1a:5f:21:74:19:3e:d7:18:71:14:
43:6f:da:82:39:ea:8c:55:3d:aa:7c:c8:73:56:05:
d1:e2:e9:1b:85:25:ed:23:24:26:1a:37:fe:41:b6:
b0:27:50:1f:bb:48:40:cc:f2:bc:5a:80:07:f0:93:
84:43:33:9d:1e:73:79:70:9e:37:5a:b7:dc:5c:d0:
b2:f5:4f:bd:32:d0:12:f7:9e:4b:8b:fe:b4:20:fe:
a2:c0:43:af:9e:99:d5:58:22:d1:8e:7f:ac:de:0f:
a3:65:42:58:08:3f:51:4a:6f:cf:10:e2:29:58:c7:
5e:18:34:85:5b:53:f2:6a:4b:35:d7:bf:85:08:8b:
62:67:0f:a5:49:55:29:5f:cb:d3:59:e8:04:13:75:
2c:f6:12:59:fe:62:21:19:83:98:1c:b9:4a:f6:03:
57:07:81:57:95:8e:0c:51:05:f5:3b:29:80:c4:c9:
94:c2:36:dd:ec:41:08:0f:71:40:21:49:d8:19:c1:
2b:a8:65:c0:bd:b5:95:dc:d9:c1:00:46:0d:f6:64:
71:d6:66:27:ee:d9:d7:50:ea:ea:e5:82:d5:83:2a:
96:56:0b:59:9c:39:d2:fd:f0:4a:a9:86:cf:9d:97:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:BF:95:4E:F6:FC:9D:91:8B:6F:3C:CD:2F:0F:EF:6A:3B:E5:2D
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7b:32:0d:d6:7d:cb:02:3e:51:21:1e:be:44:74:08:22:5e:
f4:14:35:2f:09:68:24:92:14:5b:19:40:ca:7b:4b:37:90:5c:
43:ed:b8:2f:56:ea:1e:a3:17:70:32:f4:ed:b2:59:ba:1e:c1:
56:6c:4b:63:e5:26:4e:57:4e:08:d4:7f:45:c4:77:27:10:7c:
47:a2:9b:04:06:9a:c2:2e:fa:65:f8:1c:c9:85:3c:f9:f2:1a:
62:1e:bb:fe:68:b8:98:92:09:8c:13:8f:40:7a:e8:2e:42:a0:
78:9b:3b:97:b5:be:f7:3d:4d:6d:ae:78:11:33:75:73:5a:67:
d7:d3:62:ab:a7:31:16:24:a6:5c:fe:13:83:dd:3c:b2:b1:19:
e8:e9:a6:2c:0e:a2:37:33:8f:b3:06:54:02:e4:ba:eb:35:65:
e2:bf:67:61:ca:c5:c8:e0:35:e7:26:f3:52:4d:67:9b:c3:8c:
d9:67:31:58:71:21:d2:27:a2:80:b7:6e:a5:42:ed:06:20:1e:
69:07:f3:e1:b4:3f:a4:0f:f6:a7:e2:ee:4d:d1:bf:33:6f:2c:
c6:bd:60:54:f6:ff:5a:22:dd:49:c5:32:cb:c4:8b:32:8e:d4:
f2:e4:6a:91:26:17:31:c8:ac:e2:69:c0:cc:95:3e:33:9b:f4:
0c:51:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:13 2026 by rpki-client