Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File: 2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier: vZ+XR3/63p91QXppHFyczDvdeKhHa/hMXG31IO/dv1A=
Subject key identifier: 66:4B:87:B8:4F:FF:DF:B3:04:76:9B:E5:A8:73:20:3D:00:69:79:07
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer: /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial: 01A12955FEADCD5FA4B909A6CCF9BB7D54F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number: A5
Signing time: Sun 11 Oct 2026 05:01:03 +0000
Manifest this update: Sun 11 Oct 2026 05:01:03 +0000
Manifest next update: Mon 12 Oct 2026 05:01:03 +0000
Files and hashes: 1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: 4/JHYpQVaDekfCpxnm/jI6OYMZr6EkD+Q//LBJG5p00=)
2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:fe:ad:cd:5f:a4:b9:09:a6:cc:f9:bb:7d:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Validity
Not Before: Oct 11 05:01:03 2026 GMT
Not After : Oct 12 05:01:03 2026 GMT
Subject: CN=664b87b84fffdfb304769be5a873203d00697907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:45:a7:0f:02:a7:5f:c9:66:b7:f4:07:19:
b3:ca:ef:6b:d7:f2:23:d1:84:f9:77:23:d4:1b:5c:
34:72:fb:42:46:a8:91:38:25:a2:9f:a9:9c:03:9d:
9c:77:6d:a2:92:08:c6:8c:3d:32:a9:cd:03:47:7c:
28:e2:3a:dc:6d:46:5c:24:7a:d4:1a:29:cd:d2:e1:
d0:1b:e5:dc:d6:6c:bd:8b:a8:e6:e0:99:c5:59:9c:
bd:90:40:46:5e:42:16:4c:26:b8:14:94:80:09:63:
03:61:e8:ee:7f:91:b6:89:f9:a1:d7:ca:f2:32:82:
19:dc:83:40:03:28:4e:b8:ca:83:60:61:69:70:72:
1e:89:61:07:65:90:bf:df:41:a3:ca:6a:29:0a:fe:
1d:22:76:f0:ce:1b:70:d6:77:14:7e:28:73:a8:8f:
ca:a6:91:e9:9d:ac:7d:a4:6d:27:0e:34:fa:91:79:
3c:5f:9e:0f:dd:4f:44:55:2a:70:c5:ca:9b:16:29:
11:bb:79:3e:5f:9f:06:21:21:5d:c5:5d:66:76:ee:
8c:b5:19:ea:68:c5:b9:4e:91:31:a1:bf:ad:bc:87:
fd:6b:04:fb:eb:a2:90:b0:cc:3a:5d:cb:1f:62:1c:
9d:94:03:97:fb:16:04:22:67:73:ae:98:77:32:6a:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:87:B8:4F:FF:DF:B3:04:76:9B:E5:A8:73:20:3D:00:69:79:07
X509v3 Authority Key Identifier:
keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:bc:a8:1f:e8:ff:59:44:c2:ed:f3:f2:b0:e5:35:ff:b2:
d9:42:a3:82:21:bd:b6:9e:68:78:13:b0:61:24:06:a6:50:9c:
5a:7a:54:00:4a:b3:44:d9:f3:c7:b8:47:4f:48:2c:5e:aa:7b:
a7:c0:37:fc:9c:38:76:22:d3:70:1c:ee:91:dd:61:91:a2:c6:
82:1f:7c:40:e5:17:53:e8:e5:f8:73:88:ab:10:aa:57:f0:ff:
3b:4d:f2:31:12:c7:dd:56:5a:c8:80:15:f7:68:be:18:46:84:
c2:45:63:a8:d2:ab:74:96:67:de:70:73:9d:dd:f6:fc:7a:67:
a5:e6:1b:ae:97:2b:53:5c:37:b7:69:2b:de:d0:95:06:76:97:
34:e5:bd:fe:53:0b:45:ea:aa:6e:4f:c1:d1:1f:38:f3:b0:f6:
03:d7:e9:ac:1b:45:6a:f7:0f:cd:ae:06:5d:09:28:e6:3a:26:
14:23:95:9a:c1:09:08:2f:77:c9:bb:da:76:12:21:24:32:b6:
80:ed:90:57:13:fe:fa:0d:b2:2e:c9:1e:68:a2:b3:7c:8e:5c:
08:c3:7a:e9:1f:65:e2:09:b4:7e:ce:bc:11:0a:b0:b4:bc:44:
ac:fa:f3:b8:8f:6b:93:8e:bd:c7:8f:63:83:91:cb:5f:62:fb:
5f:8a:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:00 2026 by rpki-client