Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: xjYgyBHGcAeT7tf758sEK/c2Kmk1tG3J60dmIXN9L24=
Subject key identifier: A8:BE:F5:D2:61:3B:68:B3:AB:20:50:1E:FD:F6:3F:B8:EA:B4:B5:05
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 01A161FB6B7D9E9B7CE2FC272F48FA6BBBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 037F
Signing time: Thu 22 Oct 2026 05:00:29 +0000
Manifest this update: Thu 22 Oct 2026 05:00:29 +0000
Manifest next update: Fri 23 Oct 2026 05:00:29 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: hx6UTASLaGP/33i8HJGxzszKhcMezdDsPAi/ztaa85Q=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:fb:6b:7d:9e:9b:7c:e2:fc:27:2f:48:fa:6b:bb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Oct 22 05:00:29 2026 GMT
Not After : Oct 23 05:00:29 2026 GMT
Subject: CN=a8bef5d2613b68b3ab20501efdf63fb8eab4b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:f9:46:57:18:42:c1:22:7e:cc:e4:93:a8:
a8:3a:fc:86:30:d9:14:37:12:7c:02:50:2e:a6:d6:
ac:a0:71:10:2e:8a:a8:6f:5b:21:90:71:c4:59:3f:
03:8b:8b:b2:ca:26:78:e3:2f:91:a6:6c:53:6a:f3:
6e:02:a3:0d:9c:c4:88:ac:4b:37:5c:5f:10:0b:c3:
e0:fc:57:44:5a:36:68:31:19:d7:95:8c:27:73:f6:
38:8a:b3:41:b8:c2:44:3d:6a:ab:d2:a5:fc:bc:3b:
5b:b9:7c:51:1b:61:24:af:02:a5:80:79:e8:50:90:
92:04:27:03:99:7b:5e:9e:54:d5:ac:7c:dc:bc:ff:
ea:f8:df:d2:12:b4:80:18:a9:63:8a:a1:fc:28:6f:
b9:7d:c6:55:c5:36:a0:d2:65:2e:d4:20:ee:7c:8a:
da:48:f2:f3:e0:0f:d1:29:1b:0e:ec:23:38:2f:87:
c6:a3:79:a7:ab:b3:bc:49:9a:60:fa:89:76:b3:8e:
cb:de:33:db:8d:4c:be:c2:b5:e1:a6:57:7b:44:fc:
c7:6c:87:fe:ff:12:1d:69:96:4b:b3:53:4d:cc:70:
ed:f5:39:41:42:b8:8b:b1:e7:e8:83:70:44:23:20:
25:0e:64:71:be:02:37:d4:ef:22:30:e7:ea:43:92:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:F5:D2:61:3B:68:B3:AB:20:50:1E:FD:F6:3F:B8:EA:B4:B5:05
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:62:86:22:f8:fd:aa:f5:a9:64:99:d8:9b:1b:20:35:c1:
3c:27:c8:ed:c6:0d:99:9e:52:a3:07:56:1d:fc:18:a4:30:ab:
be:aa:f0:69:36:dc:ec:ba:3b:b3:d5:ad:08:67:e9:6b:9b:f9:
64:06:c2:f8:66:1c:ec:f3:11:55:f7:e5:69:b3:4d:41:40:19:
bb:4f:83:a1:25:ff:b9:48:95:53:bc:1e:35:a7:84:34:16:f8:
0b:2e:71:29:c2:95:05:c2:fe:73:54:49:d8:f2:24:f4:7c:1f:
b0:3d:dc:3e:d9:66:62:14:6a:ad:26:13:7f:6a:e7:3c:25:1c:
4a:27:b9:02:bf:78:6f:79:8b:65:bc:c6:36:41:c6:f1:73:b9:
0f:b7:24:79:95:61:1c:db:f4:e1:01:28:69:27:d4:48:2c:69:
30:65:1e:c0:13:a8:90:3f:ea:ad:f6:ee:c3:4c:0c:df:f9:4c:
11:96:f5:8f:de:f2:c4:ec:5d:09:96:18:93:f8:2f:a9:ec:88:
d1:88:ce:5c:ad:1a:56:c5:b3:a9:23:cb:ac:64:9d:75:31:27:
7e:7c:94:8d:02:f2:b8:3e:78:bf:85:86:76:6b:25:4c:10:a3:
91:ad:86:82:d6:5b:3b:ce:2a:35:0e:06:e0:72:ae:22:a9:41:
ba:74:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:32 2026 by rpki-client