Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: vqUnEqaHjWigV6B0AtK9JyMf4WuMlE+P0HoRQKaQEsI=
Subject key identifier: D1:6C:2E:1D:27:9D:31:C5:7A:88:D8:DA:74:DB:07:11:65:16:7F:F4
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 01A119AB2D318C48D7E91063CB7AF143A6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 18AC
Signing time: Thu 08 Oct 2026 04:00:10 +0000
Manifest this update: Thu 08 Oct 2026 04:00:10 +0000
Manifest next update: Fri 09 Oct 2026 04:00:10 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: jnI8leHc0Dhgc1Hod0W6LJqzV5gKIK0zRhlHoj6uiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:2d:31:8c:48:d7:e9:10:63:cb:7a:f1:43:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Oct 8 04:00:10 2026 GMT
Not After : Oct 9 04:00:10 2026 GMT
Subject: CN=d16c2e1d279d31c57a88d8da74db071165167ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:db:3a:94:ed:d1:97:c3:cd:1d:5a:c6:6f:
fe:d8:ee:4b:f3:2a:a9:a0:6e:fe:2d:3f:98:4a:b1:
a9:fc:41:e9:7f:c8:33:57:09:50:fb:14:31:a7:4d:
59:2a:57:32:0d:8c:50:10:1d:24:5e:f9:2f:93:c9:
ab:eb:d0:01:ed:bf:4d:b5:18:5e:cc:73:80:8a:c1:
ab:ed:20:75:21:4d:9b:79:d7:7d:6d:df:3f:5b:da:
3a:f9:60:4d:2d:5c:9e:08:2f:57:6a:9b:fb:88:bb:
ab:d3:89:47:e2:7a:7f:ea:b0:e5:4b:8d:80:61:d9:
6f:1e:01:9e:e9:07:5b:47:08:04:72:63:42:e2:41:
09:1c:4b:17:66:c0:8f:e9:cc:3c:6d:4a:06:59:96:
f7:9a:07:8d:1a:e6:12:bc:ab:32:05:f3:4e:20:dd:
2a:45:83:2d:71:67:b2:4d:0a:bd:64:61:e4:a7:a3:
0c:97:9b:80:c1:ab:cb:ab:76:3f:c9:b2:62:b4:0c:
cc:04:66:7f:1e:65:49:d7:cf:ae:78:3e:83:65:4d:
a6:90:5a:45:60:91:f9:7f:ee:63:8d:55:4d:d6:32:
45:65:f1:87:7c:07:43:0c:10:2f:f8:f4:eb:db:0a:
a2:c7:02:96:98:8d:80:ed:04:2c:96:fd:9d:90:c4:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:2E:1D:27:9D:31:C5:7A:88:D8:DA:74:DB:07:11:65:16:7F:F4
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:1f:ec:98:1a:42:da:f3:06:4d:fe:47:43:d2:c2:ff:9e:
18:8e:c9:e2:1c:f4:a9:c3:7f:93:22:73:d8:44:8a:81:71:62:
f5:7a:9a:ee:7d:05:bf:24:31:e6:d4:94:6b:b3:57:02:84:ae:
32:c0:33:f5:13:15:48:08:32:40:fd:2f:78:68:85:07:2e:18:
60:7f:f7:b3:f3:40:35:fc:01:0e:2d:17:69:ff:ac:12:57:2b:
06:26:b5:37:cf:01:ff:e5:44:42:be:94:eb:0f:66:e2:74:1b:
46:70:1c:66:0d:fe:4d:f0:20:da:09:5a:cd:9a:d3:c1:02:f4:
44:98:fd:72:cc:f4:92:d1:78:50:86:61:8a:05:31:57:52:39:
25:99:0a:df:d0:77:ba:60:71:86:89:f0:2c:e7:10:9e:90:af:
7b:8b:5a:95:1f:33:34:c4:16:c7:02:ca:19:88:8f:06:87:5a:
fd:5e:c6:3f:81:f6:90:76:24:d0:f2:ca:28:17:ed:74:00:00:
64:9f:20:62:58:3c:a0:19:11:6d:97:40:c3:d8:a4:cf:bd:a5:
35:1c:83:a3:35:29:6b:08:1e:9f:14:c4:56:c1:8c:ab:f6:29:
65:6e:5e:2c:3b:d5:f7:f6:7a:92:6c:20:3f:c3:44:69:2d:ec:
82:21:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:44:42 2026 by rpki-client