Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: k+9YiouYZUnxn9CFrr94CPiRjCGLGDJYkfcjahDfrTM=
Subject key identifier: 01:BF:D7:7E:97:D8:0F:90:A4:7B:B0:39:E1:FB:2D:9F:58:1C:6F:29
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019FAABE3069AF1E2FBC86E58B09FDDC6217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 17EE
Signing time: Tue 28 Jul 2026 22:00:18 +0000
Manifest this update: Tue 28 Jul 2026 22:00:18 +0000
Manifest next update: Wed 29 Jul 2026 22:00:18 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: 6Rw2KadlMao75zRjz91Olmckn22dgYDPCk5B97Mz4F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:30:69:af:1e:2f:bc:86:e5:8b:09:fd:dc:62:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Jul 28 22:00:18 2026 GMT
Not After : Jul 29 22:00:18 2026 GMT
Subject: CN=01bfd77e97d80f90a47bb039e1fb2d9f581c6f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:30:47:16:00:f3:f1:c9:48:54:75:e7:1c:
43:13:ab:86:a2:12:64:db:ed:ab:89:b1:b9:b1:13:
bb:8f:97:2e:02:d9:b8:74:35:6a:0f:99:58:f4:51:
87:ab:11:d0:05:a1:76:7e:c4:da:76:24:b5:98:7f:
a7:aa:05:80:b0:d4:fc:7e:30:b5:f4:61:9d:29:41:
28:c4:69:19:7c:1f:fb:83:fe:25:18:68:e0:e9:60:
22:7c:dc:c3:76:ce:28:94:cc:af:1b:72:c1:65:7f:
cb:e4:dd:1f:7c:83:58:b8:e3:91:52:55:a1:5e:21:
66:5b:19:bd:09:b4:1b:ce:52:28:a3:ba:89:e0:92:
ab:7a:6a:fc:3c:74:d0:5e:2d:8c:74:a4:29:ab:f8:
6c:94:88:4b:a5:6f:4f:32:14:e2:8f:8d:5d:1c:c3:
ad:d3:22:1a:e8:7b:ef:6c:3f:56:b9:41:18:f7:f7:
4d:5f:be:e9:c8:7d:cb:4e:7d:45:ea:1c:d0:49:a0:
14:df:c5:2d:89:f1:da:4f:dd:d3:f6:8b:2a:b2:16:
cb:39:9a:14:48:a3:86:3c:26:c3:98:e0:b3:17:ca:
5f:c8:46:62:0a:7d:31:8b:cf:5e:f0:57:7c:f6:38:
52:45:60:73:32:29:a5:6a:a1:bb:0e:1f:c1:e0:fa:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:D7:7E:97:D8:0F:90:A4:7B:B0:39:E1:FB:2D:9F:58:1C:6F:29
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a7:75:47:9a:77:db:b1:6b:da:74:ac:3c:13:b0:bc:88:34:
9b:2f:5e:e8:61:34:53:74:59:d3:cc:ec:f9:15:26:93:09:df:
a2:8a:c6:b0:f2:23:05:c9:28:34:a3:e0:ce:53:34:8c:23:55:
18:44:12:d5:c5:13:a1:65:a1:62:64:0b:78:e5:d5:17:f1:b5:
ed:22:1e:45:d3:ea:79:45:78:03:1c:04:8a:1f:cc:b4:7f:37:
9c:97:75:54:83:91:47:39:36:d7:71:16:45:d0:97:64:62:ce:
17:d0:96:e6:06:f5:88:14:c3:06:01:d1:93:78:74:18:32:ba:
0b:a6:0f:e8:b9:d1:a9:18:f6:82:0c:a7:c6:c3:f9:4b:a1:3a:
7d:07:c0:00:ec:ba:47:9f:17:aa:ab:fa:97:1f:96:b9:db:99:
7d:82:ff:0b:06:e6:a2:7a:d7:85:5d:40:06:ba:b6:43:22:90:
1f:0d:a6:5b:0e:f5:eb:47:87:e3:f6:b5:23:3d:ef:e9:41:ec:
b8:0b:52:14:8a:92:4b:ed:32:25:f5:f5:05:f8:e8:ad:0a:01:
61:6e:3b:a2:f8:00:f8:cd:dd:6e:36:42:25:cf:a8:b2:64:a8:
b9:80:d5:8e:72:6a:71:8b:d8:11:f8:52:66:80:b0:18:8d:ac:
24:15:9e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvjBprx4vvIbliwn93GIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5
ZjllNGMwHhcNMjYwNzI4MjIwMDE4WhcNMjYwNzI5MjIwMDE4WjAzMTEwLwYDVQQD
EygwMWJmZDc3ZTk3ZDgwZjkwYTQ3YmIwMzllMWZiMmQ5ZjU4MWM2ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6QwRxYA8/HJSFR15xxDE6uGohJk
2+2ribG5sRO7j5cuAtm4dDVqD5lY9FGHqxHQBaF2fsTadiS1mH+nqgWAsNT8fjC1
9GGdKUEoxGkZfB/7g/4lGGjg6WAifNzDds4olMyvG3LBZX/L5N0ffINYuOORUlWh
XiFmWxm9CbQbzlIoo7qJ4JKremr8PHTQXi2MdKQpq/hslIhLpW9PMhTij41dHMOt
0yIa6HvvbD9WuUEY9/dNX77pyH3LTn1F6hzQSaAU38UtifHaT93T9osqshbLOZoU
SKOGPCbDmOCzF8pfyEZiCn0xi89e8Fd89jhSRWBzMimlaqG7Dh/B4PpXXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAG/136X2A+QpHuwOeH7LZ9YHG8pMB8GA1UdIwQY
MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt
NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh
LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqd1R5p3
27Fr2nSsPBOwvIg0my9e6GE0U3RZ08zs+RUmkwnfoorGsPIjBckoNKPgzlM0jCNV
GEQS1cUToWWhYmQLeOXVF/G17SIeRdPqeUV4AxwEih/MtH83nJd1VIORRzk213EW
RdCXZGLOF9CW5gb1iBTDBgHRk3h0GDK6C6YP6LnRqRj2ggynxsP5S6E6fQfAAOy6
R58Xqqv6lx+WuduZfYL/CwbmonrXhV1ABrq2QyKQHw2mWw7160eH4/a1Iz3v6UHs
uAtSFIqSS+0yJfX1BfjorQoBYW47ovgA+M3dbjZCJc+osmSouYDVjnJqcYvYEfhS
ZoCwGI2sJBWeyA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:55 2026 by rpki-client