Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
File: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft (raw, json)
Hash identifier: +ttITMgnWqIw5XoAvzaOQk0t0FNfYWV6mv9yZ98WMWQ=
Subject key identifier: FE:60:E7:CC:28:7D:29:E3:89:8E:4C:D2:CA:CD:1F:E8:54:B2:C3:5D
Authority key identifier: DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
Certificate issuer: /CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Certificate serial: 01A1054A0D4CC8B254E2CFCB4BE7AB359410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
Manifest number: 5F
Signing time: Sun 04 Oct 2026 05:01:41 +0000
Manifest this update: Sun 04 Oct 2026 05:01:41 +0000
Manifest next update: Mon 05 Oct 2026 05:01:41 +0000
Files and hashes: 1: 2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl (hash: D3Q+eJoSMEB9ImMPN/Rbp1RMKho5HCv4I7SVz32x1ic=)
2: bco2Vy33uicQjr8fSgLIpcv1tBk.asa (hash: l6F5Y2uxwEyExD8hjQoc5Vlbvn9A0M3aap09ujsphDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:4a:0d:4c:c8:b2:54:e2:cf:cb:4b:e7:ab:35:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60d49a57e9d0aac0201beedf1e0999658b3e2e
Validity
Not Before: Oct 4 05:01:41 2026 GMT
Not After : Oct 5 05:01:41 2026 GMT
Subject: CN=fe60e7cc287d29e3898e4cd2cacd1fe854b2c35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:2a:21:6d:dd:ab:0b:4b:d5:b1:4a:a3:37:
44:b6:a5:9d:48:38:15:b2:3f:00:b4:65:78:9f:e4:
99:33:4d:f8:3a:f9:ef:5d:49:9b:5f:d7:6f:52:89:
9a:c7:8e:ad:c4:4d:cd:89:d2:54:6f:a3:ce:2e:a1:
e3:47:85:9d:f6:c9:3f:44:7d:35:94:2c:3c:84:df:
d3:b0:70:cc:8a:6b:b4:13:fb:e2:69:81:9d:0a:35:
a3:20:84:4e:00:4d:84:1a:15:f8:aa:e4:5f:70:53:
d9:8a:e4:58:53:55:9e:98:49:af:54:2f:7f:d7:0a:
e5:49:83:68:5d:f7:d7:a7:bc:11:46:fc:09:47:58:
31:99:40:dc:4b:53:b1:6a:0d:ac:f7:35:6e:c9:2c:
69:8d:68:63:b0:58:9c:44:73:5c:43:01:42:07:51:
f2:08:9e:d7:ff:9c:7b:b0:c2:13:f6:f3:a0:dd:29:
87:96:4f:0a:69:93:59:43:dd:73:ba:64:14:91:de:
65:1c:86:d0:bd:57:05:8b:e2:82:33:e4:c5:d5:b8:
05:1a:e7:47:1c:f3:86:11:b2:49:8d:26:2b:fb:7c:
24:d6:ff:21:ae:01:71:d4:27:9b:d9:6d:6c:3f:e5:
71:62:82:77:cc:e8:3b:c9:1a:de:0b:e3:d2:3c:23:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:60:E7:CC:28:7D:29:E3:89:8E:4C:D2:CA:CD:1F:E8:54:B2:C3:5D
X509v3 Authority Key Identifier:
keyid:DA:60:D4:9A:57:E9:D0:AA:C0:20:1B:EE:DF:1E:09:99:65:8B:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mDUmlfp0KrAIBvu3x4JmWWLPi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/416006-53cc-4b03-b1c4-db6abaebaeac/1/2mDUmlfp0KrAIBvu3x4JmWWLPi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:b3:09:50:c9:ef:05:c3:47:21:4b:cb:e6:31:86:71:08:
af:99:ca:0d:65:d0:e0:84:76:7b:43:36:d1:de:bb:55:51:aa:
e3:2c:1d:b3:8b:d8:d3:5a:bf:ee:62:5e:7f:ea:7d:84:1a:de:
d9:44:3e:7c:20:86:ab:e4:ea:20:66:46:5d:e0:5d:d0:73:32:
0c:30:58:12:16:ae:65:7a:bf:b3:e1:83:d3:ce:df:f2:0e:65:
a6:3c:e2:4f:3f:80:f8:cf:56:74:83:c1:0c:00:e4:c8:14:db:
5b:89:58:5e:1a:f2:e7:9f:9f:c4:b0:73:c6:0c:d2:4d:ad:f6:
d5:3b:e9:74:71:33:8e:06:10:7b:b3:78:ed:53:1b:d7:54:22:
ec:53:ab:5c:4a:e4:91:5f:02:af:8c:0a:c9:2f:12:58:3e:b2:
73:08:44:9b:ec:9a:67:fa:f4:bc:1f:94:ff:ea:67:ee:c9:23:
11:38:3f:97:ce:69:f3:9b:0a:5d:9d:aa:0a:eb:d7:1d:a0:5a:
f9:53:ef:e1:05:48:fa:92:2e:27:33:dd:dd:d9:0b:01:39:6a:
f8:9e:4f:b4:7f:34:03:9a:1d:62:0f:d6:16:45:cb:74:89:13:
3d:65:e9:f3:5c:15:bd:23:94:86:5c:83:d3:08:05:66:92:07:
ad:45:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:13:57 2026 by rpki-client