Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: PaqbCAe/EJROd8GYhq7G06S/jEF8uwiyHBnKITGlgu8=
Subject key identifier: 5F:E2:57:F0:B0:84:D1:F9:D1:C1:BE:B4:E8:C0:90:64:E7:1D:C8:1E
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 01A0CB59158D7D75D40360C96623ECB49FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 0331
Signing time: Tue 22 Sep 2026 23:00:08 +0000
Manifest this update: Tue 22 Sep 2026 23:00:08 +0000
Manifest next update: Wed 23 Sep 2026 23:00:08 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: UH6snWjQt9TloIhWvu1V0yk1zipcGt1Qgggl7s9pPMQ=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:15:8d:7d:75:d4:03:60:c9:66:23:ec:b4:9f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Sep 22 23:00:08 2026 GMT
Not After : Sep 23 23:00:08 2026 GMT
Subject: CN=5fe257f0b084d1f9d1c1beb4e8c09064e71dc81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:70:63:38:1b:b6:22:4d:7c:ee:6e:5e:b5:
3d:55:59:63:7f:a6:7f:04:05:88:42:05:dd:65:42:
15:df:b3:0e:2e:7b:3d:db:e6:59:13:66:13:99:6a:
92:d6:24:85:a9:fc:14:84:84:77:de:ee:54:d8:c0:
6e:2b:d5:f7:90:02:b5:03:c3:b2:19:14:87:70:87:
67:7b:4b:4b:86:14:3b:0b:48:fa:84:ae:d0:f9:c2:
3b:2b:77:b6:79:72:dc:59:57:cf:c0:f3:b1:45:b7:
c2:3b:82:ba:29:88:6f:55:15:73:27:92:d5:ee:b9:
3f:2e:c5:b9:bd:ff:bb:c0:df:4a:34:98:54:f2:09:
60:47:ec:6d:ee:30:40:c0:0c:c9:bf:5f:df:e3:cf:
a8:f1:52:d4:61:00:69:b8:0d:a5:8d:a5:a1:e1:fe:
36:31:19:78:29:4e:f0:2f:83:5e:83:33:50:c3:44:
21:0d:68:31:36:44:7d:07:f1:dd:3f:d7:ae:a3:45:
a1:74:77:05:c3:a9:c1:be:80:45:8e:97:d9:94:cc:
0e:e8:e5:87:7f:37:31:4d:38:69:1e:30:17:5f:fb:
16:1f:f2:f1:25:6b:85:dc:ae:a8:fe:71:d5:f3:d9:
0d:12:68:f3:ce:8f:83:c1:79:52:0c:22:ad:78:ef:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:57:F0:B0:84:D1:F9:D1:C1:BE:B4:E8:C0:90:64:E7:1D:C8:1E
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:65:36:9d:59:1a:3c:3f:72:df:39:2c:2f:9a:72:91:be:
ea:0c:ee:75:a4:09:6a:28:50:35:cc:03:d7:3a:fe:5c:29:0d:
8b:86:68:f4:92:00:f1:e1:d4:80:09:b9:f1:1b:c6:70:cd:33:
d1:f0:26:08:de:db:b1:bd:7a:13:d9:64:c6:d0:00:f8:df:0c:
6a:eb:9a:e4:9f:28:c2:c9:fa:6b:c8:1c:50:e4:cc:bb:a0:20:
66:27:ff:92:5e:9d:81:8d:ff:e0:e0:54:60:c2:80:15:19:00:
c1:c6:33:b6:5b:1c:ba:a0:bd:7c:7d:26:2a:ac:a9:c9:1d:75:
ff:98:bb:2b:95:97:c0:a6:5c:e0:82:2f:ae:7d:5f:ab:58:b8:
61:23:25:0b:55:ce:72:83:03:f2:e4:4c:d7:2c:6f:0d:1a:29:
36:a7:38:63:3b:99:7a:5b:7c:0a:99:9d:f7:97:b2:54:6b:02:
99:d9:a9:e5:75:1a:a4:7d:dc:e6:e7:f4:14:10:48:39:eb:31:
00:97:bf:a7:59:52:6e:71:d5:d7:7f:12:76:dc:f3:79:4a:2c:
61:80:20:3a:8e:4f:57:28:45:1a:5c:cb:6f:64:97:9b:56:45:
e7:23:bb:1e:d2:51:08:95:8a:ec:01:d1:3d:4b:2a:01:09:3e:
55:06:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:34 2026 by rpki-client