Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: Ukai1pJacxnrJAF3uYxNtHuErHRnu5VoFUz5BJp6oos=
Subject key identifier: 3B:50:AE:4B:FF:7A:20:8D:86:B3:C2:E2:AA:A3:45:E8:C6:D7:FC:5D
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 01A001A5B9361C3F8030B135FC65B8B1332E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:00:32 +0000
Manifest this update: Fri 14 Aug 2026 19:00:32 +0000
Manifest next update: Sat 15 Aug 2026 19:00:32 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: /+AKrmWV1TwlkTWD4imvN3Ra17pup78wzSmfj0sJUfE=)
2: 7CuuMu75v2ke5Xdx3b9qKN7n4Y4.roa (hash: 4EY3GSH/tIrLwl1yZXfEtQ+XZsJnpbfMvJM5DC8DJrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:b9:36:1c:3f:80:30:b1:35:fc:65:b8:b1:33:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Aug 14 19:00:32 2026 GMT
Not After : Aug 15 19:00:32 2026 GMT
Subject: CN=3b50ae4bff7a208d86b3c2e2aaa345e8c6d7fc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:08:19:80:11:a9:ab:a6:98:47:4c:2e:5f:
b7:c5:91:9e:10:34:8d:c4:78:df:e1:cb:0a:3b:65:
bf:62:da:4c:5f:9b:64:84:5c:3f:e6:cc:11:82:e8:
39:06:89:31:86:b8:fe:a6:41:2d:90:00:7d:33:ce:
db:53:09:64:a3:3e:36:25:15:73:bd:b2:e6:9d:40:
0b:81:61:a1:af:eb:e7:e3:6b:58:6f:e4:0b:e5:f7:
cf:37:64:39:f1:16:63:38:c0:18:9f:0b:52:4c:89:
11:e3:a5:ad:35:e1:ae:6e:3e:2f:7f:b5:4b:68:70:
92:04:a0:ea:5d:c7:8b:7d:6a:52:5b:f8:54:97:a9:
38:4c:8a:1b:8c:5f:e9:95:08:e7:f5:14:92:c8:0b:
d7:68:78:c2:93:15:85:69:fa:5d:86:0e:2b:53:bb:
0c:95:b6:28:e5:6c:77:e7:37:f2:dd:ca:d0:0b:52:
f7:0c:b5:0c:a6:d1:42:22:36:23:0b:ae:4c:eb:b4:
e4:0c:0d:58:17:d9:6a:26:2b:49:f0:a2:dd:aa:63:
ae:1c:84:7b:71:2c:20:d3:31:e8:6c:37:fb:6b:ff:
6a:91:d2:59:2b:18:06:c5:b0:01:41:e1:4d:49:05:
94:23:16:a4:01:21:0a:01:d1:78:c0:34:6c:a5:00:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:50:AE:4B:FF:7A:20:8D:86:B3:C2:E2:AA:A3:45:E8:C6:D7:FC:5D
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:73:85:2f:9e:65:9c:58:aa:66:41:7b:07:bb:2f:42:df:28:
4a:63:f6:e7:0e:58:d4:82:35:0c:d7:33:52:11:28:0d:28:c1:
ee:78:f4:a2:3f:8b:4a:7d:ed:e8:a0:c6:20:67:91:7c:c4:4b:
7c:14:f3:67:ae:c2:75:f7:e4:a5:29:20:4d:e3:23:15:09:91:
d5:19:2c:d2:8f:84:de:cf:ec:30:84:70:bb:2f:2d:fe:75:e4:
1c:da:b8:f3:2d:6a:87:b0:69:6a:af:61:19:3b:14:8f:ad:8e:
80:0c:6d:b2:2a:72:b3:b3:40:d7:a0:91:10:76:ce:f3:74:bf:
d1:09:0a:1b:07:87:dd:1a:3b:32:51:16:bc:2c:51:32:63:f7:
dd:36:da:8c:22:fe:c3:0a:cc:21:78:85:48:43:f2:3a:00:66:
26:07:70:3c:41:d5:4b:6b:de:ba:79:1f:f5:74:31:b7:4f:bc:
75:c2:9c:14:53:75:f8:11:9a:65:69:4d:8e:91:ec:d2:08:a9:
dc:16:60:e4:66:5f:a8:5f:91:b7:be:80:1b:16:2f:7f:c5:29:
d0:ac:18:38:fb:f3:52:1d:f1:3a:ee:18:6f:b3:5e:90:84:d1:
b5:2f:86:b3:21:91:a5:75:02:8f:df:89:de:2f:fc:d7:48:f4:
b1:5b:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:53 2026 by rpki-client