Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
File: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft (raw, json)
Hash identifier: Im11x9Y1qEs3+S+fZwVC7snW8s29jEkHPOFJ561dFkw=
Subject key identifier: B2:DE:6A:41:18:51:F3:25:61:CC:FD:E9:66:5B:74:E4:97:E3:AB:65
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Certificate issuer: /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial: 01A10580C8B3CC08CC68A848B820D200B781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
Manifest number: 035E
Signing time: Sun 04 Oct 2026 06:01:28 +0000
Manifest this update: Sun 04 Oct 2026 06:01:28 +0000
Manifest next update: Mon 05 Oct 2026 06:01:28 +0000
Files and hashes: 1: 2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl (hash: dkfcReor6Ve7xn9H4HN1/8BIkZgxnLkvT3vMenmRdco=)
2: Q0jEdYQfiuBaGOGIDi6fxqkNu30.asa (hash: f7Pw5WF8TCRU0QwClTVBmnd+i1bv82uwZrEWnEkGYmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:c8:b3:cc:08:cc:68:a8:48:b8:20:d2:00:b7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Validity
Not Before: Oct 4 06:01:28 2026 GMT
Not After : Oct 5 06:01:28 2026 GMT
Subject: CN=b2de6a411851f32561ccfde9665b74e497e3ab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a6:0f:ab:92:01:ab:8e:2f:2d:22:e4:2e:7b:
df:ea:d9:e6:24:5d:d3:26:50:d6:1c:38:6d:8a:ac:
e8:f3:e3:0e:fd:97:ae:f1:24:36:a8:f3:22:a0:48:
b4:03:d6:b5:14:93:32:5c:84:6a:e5:7e:36:c0:ba:
74:10:ae:b7:e2:7f:cf:af:9e:f8:21:44:9d:95:3e:
fb:1c:47:cc:c7:6c:1a:bf:ad:57:8c:bd:a6:ff:80:
17:d1:0a:c1:20:4f:b8:6a:92:8b:c0:1e:ab:87:22:
b9:eb:48:a0:89:4f:d4:d8:9e:f6:da:f4:e5:33:51:
b0:ed:4d:8f:76:9c:f0:fa:61:18:92:7f:0a:4c:e9:
bd:98:23:10:85:e0:20:66:29:f6:97:36:3c:e6:41:
c1:47:19:b1:2d:a8:8e:70:08:d0:69:61:11:e3:e6:
a3:2c:62:8e:b8:31:6c:26:f7:b6:71:fd:6f:13:86:
1a:d4:98:58:74:bd:3b:d8:ba:5d:c3:d3:e3:5e:e4:
56:54:f9:44:a3:bb:58:ac:cf:e5:6b:9b:80:b2:d7:
7a:df:6c:8d:f7:48:8d:d0:ed:95:8c:81:20:5d:d6:
d9:01:25:a6:fd:0f:fb:32:25:a4:0d:5e:40:ff:86:
df:c4:5b:61:d1:48:ba:ab:22:e8:ed:c3:f8:92:e8:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:6A:41:18:51:F3:25:61:CC:FD:E9:66:5B:74:E4:97:E3:AB:65
X509v3 Authority Key Identifier:
keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:95:e8:32:ea:6b:dc:10:5f:11:47:f3:8f:4e:07:8b:f1:
86:89:c7:e2:6b:61:0a:4a:f5:54:61:c0:65:e3:ad:a4:2f:bd:
d0:18:3f:13:6b:87:d5:d9:5e:3a:f8:d2:e8:07:5e:1c:a7:1b:
97:6b:ad:97:41:d9:62:e0:e3:58:0f:37:df:ab:be:8f:5f:9e:
f9:68:bc:74:c1:37:b0:10:f4:4d:95:25:00:4a:71:3e:cb:83:
ea:7b:15:37:51:59:7c:0e:d9:3f:b2:95:5e:08:46:ad:ff:67:
72:6c:99:ec:f9:b0:29:e2:35:0b:5f:63:77:e8:c9:58:29:1b:
f5:b2:c8:76:11:ca:e3:d4:7a:e6:eb:d4:63:87:40:71:63:14:
a3:89:8c:35:65:e5:87:83:17:0a:30:3b:49:18:4c:85:c4:89:
de:4b:f4:ff:3a:52:e7:e5:87:aa:8b:86:dd:59:b2:8e:a9:3e:
a9:ba:15:5f:fa:fd:05:34:a7:3e:8a:7b:19:dd:d4:68:ba:92:
48:e0:31:59:ba:2f:a5:9d:a7:6f:f6:44:f5:d9:ef:99:34:8f:
b9:60:23:ba:cd:0c:b7:2d:27:08:80:14:b9:d1:16:70:d0:a6:
2c:b1:6b:13:24:83:6a:31:00:37:d2:99:76:1b:d2:2a:69:96:
79:e2:f2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFgMizzAjMaKhIuCDSALeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhY2E4M2ViMWZhZjk3NzNkMzUwYzdkY2U2MTJjYTI4MTQ4
NGU3ZmMwHhcNMjYxMDA0MDYwMTI4WhcNMjYxMDA1MDYwMTI4WjAzMTEwLwYDVQQD
EyhiMmRlNmE0MTE4NTFmMzI1NjFjY2ZkZTk2NjViNzRlNDk3ZTNhYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qYPq5IBq44vLSLkLnvf6tnmJF3T
JlDWHDhtiqzo8+MO/Zeu8SQ2qPMioEi0A9a1FJMyXIRq5X42wLp0EK634n/Pr574
IUSdlT77HEfMx2wav61XjL2m/4AX0QrBIE+4apKLwB6rhyK560igiU/U2J722vTl
M1Gw7U2Pdpzw+mEYkn8KTOm9mCMQheAgZin2lzY85kHBRxmxLaiOcAjQaWER4+aj
LGKOuDFsJve2cf1vE4Ya1JhYdL072Lpdw9PjXuRWVPlEo7tYrM/la5uAstd632yN
90iN0O2VjIEgXdbZASWm/Q/7MiWkDV5A/4bfxFth0Ui6qyLo7cP4kuiSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLeakEYUfMlYcz96WZbdOSX46tlMB8GA1UdIwQY
MBaAFNrKg+sfr5dz01DH3OYSyigUhOf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUt
YjVlYjRjNmI3ZWE4LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hZjJlMjItNmU4ZS00OTA1LTllNjUtYjVlYjRjNmI3ZWE4
LzEvMnNxRDZ4LXZsM1BUVU1mYzVoTEtLQlNFNV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaKV6DLq
a9wQXxFH849OB4vxhonH4mthCkr1VGHAZeOtpC+90Bg/E2uH1dleOvjS6AdeHKcb
l2utl0HZYuDjWA8336u+j1+e+Wi8dME3sBD0TZUlAEpxPsuD6nsVN1FZfA7ZP7KV
XghGrf9ncmyZ7PmwKeI1C19jd+jJWCkb9bLIdhHK49R65uvUY4dAcWMUo4mMNWXl
h4MXCjA7SRhMhcSJ3kv0/zpS5+WHqouG3Vmyjqk+qboVX/r9BTSnPop7Gd3UaLqS
SOAxWbovpZ2nb/ZE9dnvmTSPuWAjus0Mty0nCIAUudEWcNCmLLFrEySDajEAN9KZ
dhvSKmmWeeLyhg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:36:45 2026 by rpki-client