Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
File: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft (raw, json)
Hash identifier: Wlnhn8Rs+vFojKAduDrCYAQ5PXy6ysgRbDr4Dxn3a6E=
Subject key identifier: 3B:4F:08:23:5C:63:C6:19:0B:B9:B2:84:3A:DF:C6:CC:D9:06:E7:E1
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 01A0404DDDC48FB1A9EC2027DA1D11EA7AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
Manifest number: 02E9
Signing time: Wed 26 Aug 2026 23:00:39 +0000
Manifest this update: Wed 26 Aug 2026 23:00:39 +0000
Manifest next update: Thu 27 Aug 2026 23:00:39 +0000
Files and hashes: 1: 2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl (hash: jpj27ztJ8EOkZUTeWRYvtquG5WrWpIvOnxdBuNs9fTE=)
2: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (hash: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:dd:c4:8f:b1:a9:ec:20:27:da:1d:11:ea:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Aug 26 23:00:39 2026 GMT
Not After : Aug 27 23:00:39 2026 GMT
Subject: CN=3b4f08235c63c6190bb9b2843adfc6ccd906e7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:38:c0:e1:7b:c7:43:29:8d:b2:10:1e:4b:
90:db:79:83:75:39:25:e6:95:af:90:84:8c:54:9d:
d3:2e:0d:9e:65:5a:a7:da:15:fb:44:db:26:2a:5b:
49:1e:92:4d:b1:4a:72:7a:62:e2:3a:b2:d3:96:ed:
5d:aa:94:85:23:2f:ae:aa:50:d1:15:78:36:64:e8:
81:25:0c:07:34:05:ae:d0:be:f6:0d:f7:93:53:8b:
c1:bb:bc:3e:3f:f0:21:57:ca:03:cf:18:09:ba:16:
36:05:4c:ff:e5:0d:41:c9:ea:84:4b:a1:69:da:24:
f0:04:8c:6c:4f:ed:b1:f3:35:49:f9:38:39:0d:22:
2a:ab:2a:36:c6:d8:7d:e2:72:ff:74:83:3e:01:e0:
ca:88:3d:84:0e:2a:bc:c9:30:64:26:d6:3b:bb:a0:
da:37:f8:bf:e4:a7:4a:ea:d5:6e:65:83:fb:9f:86:
64:e0:c9:79:40:4e:9a:df:a6:2e:89:cc:62:1e:33:
d9:ae:a8:bc:0a:5a:b7:cc:4b:d9:25:6c:af:11:58:
e7:28:f6:9d:26:25:7f:9f:03:c0:e4:74:77:05:2f:
0f:77:c7:3d:af:70:0a:e4:13:a1:e4:51:96:7b:4b:
28:60:9b:9c:d2:0f:ad:0f:ac:d0:a9:81:93:69:30:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:08:23:5C:63:C6:19:0B:B9:B2:84:3A:DF:C6:CC:D9:06:E7:E1
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3f:32:1f:37:48:e0:5f:dd:ed:6f:19:79:c7:f2:72:95:53:
89:ae:d1:0d:a2:3d:a0:25:b9:08:d5:20:84:0a:c2:e5:c2:2b:
b9:7c:fe:2a:b8:07:7b:88:11:5b:5f:81:b0:48:b6:c1:52:c2:
df:b0:39:20:8e:a2:ee:60:f3:e7:f7:06:e6:16:f2:00:77:e0:
e1:6c:0c:de:4f:94:5c:9b:6a:e3:4e:58:b0:cc:f7:87:02:4d:
07:08:82:55:45:d0:15:eb:8a:fe:be:f5:64:1e:b6:87:1a:ab:
93:88:9f:85:72:69:05:f0:44:b3:f9:e3:79:eb:cf:52:ce:a8:
35:26:79:5a:c7:90:b2:96:06:97:07:57:36:a2:3d:5b:f9:f1:
9f:8d:2a:00:4a:23:5e:f4:49:5e:f6:1b:e4:51:be:cc:22:b8:
08:96:28:6f:a9:a9:f2:b7:a0:16:16:85:c1:e9:c2:e7:15:11:
fe:ca:8e:8e:8b:8a:35:9b:4e:32:32:55:ec:ab:f6:54:07:14:
e0:dd:4d:cb:35:e6:d8:34:a6:50:4f:ec:78:42:5c:f3:a3:7d:
2a:c9:44:45:79:86:81:42:dd:fe:7b:33:3d:2f:5d:81:7c:cd:
2b:05:5e:a3:bd:fd:7f:5f:6f:2c:11:74:d4:6a:f9:b1:16:ec:
69:5a:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:15 2026 by rpki-client