Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: JIJ929qQjTWr8XKWZTc61giBZ9WRkWU/8Gwk6xlp6MI=
Subject key identifier: AB:85:63:FE:F9:6C:FE:71:2E:91:97:5C:A7:6D:A0:84:6D:67:69:99
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 019F8EA2517597983C532E6CA16D9D9CFA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 028D
Signing time: Thu 23 Jul 2026 11:00:30 +0000
Manifest this update: Thu 23 Jul 2026 11:00:30 +0000
Manifest next update: Fri 24 Jul 2026 11:00:30 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: 2wS9F7GZfVNKS6YuGy+Tl2tajRhwHDY9FQCsJ3ypkSA=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:51:75:97:98:3c:53:2e:6c:a1:6d:9d:9c:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Jul 23 11:00:30 2026 GMT
Not After : Jul 24 11:00:30 2026 GMT
Subject: CN=ab8563fef96cfe712e91975ca76da0846d676999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:45:ec:37:4a:c8:c3:ea:60:b1:7b:8d:47:
d7:98:cc:64:96:f0:e6:8d:55:22:e0:bf:86:50:2c:
f2:22:3a:70:8a:ad:a9:90:a3:95:62:e8:14:33:b3:
02:6b:dd:a8:b5:59:3b:3a:8a:76:8b:31:dd:c0:44:
5d:2d:cc:28:48:1b:e3:7b:a5:19:04:48:78:cb:91:
01:4d:f2:b9:f1:8f:01:a5:33:f1:be:03:a1:f7:55:
1b:49:d2:f1:f6:9a:40:5a:6c:17:e8:b2:b2:7a:68:
7e:66:e8:1c:16:19:b6:df:dd:0d:08:55:5f:3b:6f:
14:82:4c:28:25:dc:32:ec:9d:b1:40:4b:52:f1:1e:
b4:20:b3:5c:9d:af:b3:95:a8:61:d9:73:01:89:c6:
68:f3:bb:7d:64:86:45:7d:e3:a8:6c:69:7e:6d:46:
26:b1:4d:94:96:7a:4c:59:94:33:ef:23:2b:15:4d:
ad:ba:1e:5d:1d:38:65:c7:a8:46:02:d1:1c:29:c2:
19:e8:2d:ff:1a:b7:6a:76:89:88:3f:92:c1:c7:e5:
07:31:68:89:6e:48:87:f8:8f:07:43:f4:6e:40:61:
ab:27:f1:7d:9e:d5:71:4c:d9:92:78:f3:93:30:85:
f9:4a:c3:57:3f:4a:fa:88:51:dc:78:0a:b7:ed:8c:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:63:FE:F9:6C:FE:71:2E:91:97:5C:A7:6D:A0:84:6D:67:69:99
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:f6:4f:16:85:4c:99:98:0e:f7:2f:c1:f3:f5:a4:69:3c:
b6:17:1b:4c:7e:b9:0d:9e:4d:f2:ed:5f:a7:0d:2d:ba:24:63:
e3:9d:83:81:fd:13:33:3e:b3:8b:7e:1f:02:bb:6b:53:0d:40:
81:37:f3:e2:c2:ec:f0:ba:df:bc:25:1e:5d:a3:e1:af:6c:bd:
46:6b:a0:cd:e3:04:47:f4:0b:cb:38:cc:8f:52:93:55:eb:b3:
6a:01:d6:58:f4:0f:00:b1:fe:d2:a8:b8:28:68:aa:cb:14:07:
e1:17:81:71:0a:a9:87:21:c0:a3:c0:80:8f:de:6d:00:bb:06:
5c:09:e6:22:82:c9:a9:a8:d6:cb:65:98:76:5c:0d:de:e1:a3:
79:90:d0:d0:6d:2b:4a:24:fa:a6:08:ed:ce:bd:00:f6:97:1d:
de:84:3d:13:21:a0:bc:85:84:e1:14:94:8f:c7:c4:64:f8:a8:
11:93:9d:64:37:66:1b:61:6b:4b:8f:35:f0:d7:2e:16:2b:ae:
7a:50:0c:47:17:e0:82:5e:e0:5a:5e:05:20:c9:91:7a:d9:0f:
66:79:0d:7c:98:74:22:9f:b9:b2:30:dd:d9:08:79:df:ea:b3:
ca:37:d5:7f:03:ac:18:eb:6b:53:b3:8e:8c:6b:42:b0:75:6a:
69:fa:af:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OolF1l5g8Uy5soW2dnPpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NTBiOTYwYWRlOTQ0OWYxZTgwODE0M2EzNzFjZTJlM2Ex
ODdlNDgwHhcNMjYwNzIzMTEwMDMwWhcNMjYwNzI0MTEwMDMwWjAzMTEwLwYDVQQD
EyhhYjg1NjNmZWY5NmNmZTcxMmU5MTk3NWNhNzZkYTA4NDZkNjc2OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxF7DdKyMPqYLF7jUfXmMxklvDm
jVUi4L+GUCzyIjpwiq2pkKOVYugUM7MCa92otVk7Oop2izHdwERdLcwoSBvje6UZ
BEh4y5EBTfK58Y8BpTPxvgOh91UbSdLx9ppAWmwX6LKyemh+ZugcFhm2390NCFVf
O28UgkwoJdwy7J2xQEtS8R60ILNcna+zlahh2XMBicZo87t9ZIZFfeOobGl+bUYm
sU2UlnpMWZQz7yMrFU2tuh5dHThlx6hGAtEcKcIZ6C3/GrdqdomIP5LBx+UHMWiJ
bkiH+I8HQ/RuQGGrJ/F9ntVxTNmSePOTMIX5SsNXP0r6iFHceAq37YyNwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuFY/75bP5xLpGXXKdtoIRtZ2mZMB8GA1UdIwQY
MBaAFNhQuWCt6USfHoCBQ6Nxzi46GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP32TxaF
TJmYDvcvwfP1pGk8thcbTH65DZ5N8u1fpw0tuiRj452Dgf0TMz6zi34fArtrUw1A
gTfz4sLs8LrfvCUeXaPhr2y9RmugzeMER/QLyzjMj1KTVeuzagHWWPQPALH+0qi4
KGiqyxQH4ReBcQqphyHAo8CAj95tALsGXAnmIoLJqajWy2WYdlwN3uGjeZDQ0G0r
SiT6pgjtzr0A9pcd3oQ9EyGgvIWE4RSUj8fEZPioEZOdZDdmG2FrS4818NcuFiuu
elAMRxfggl7gWl4FIMmRetkPZnkNfJh0Ip+5sjDd2Qh53+qzyjfVfwOsGOtrU7OO
jGtCsHVqafqv4g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:45 2026 by rpki-client