Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: AVVo0hIaE1KY7E88Ftl1SiBc2LJswajRlHhtZFHJ+TY=
Subject key identifier: 2B:B9:BF:BA:8C:76:7A:37:50:D4:70:C3:DB:5D:7E:A4:0B:E0:95:50
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 01A0C557C902695FBDD03A4BE8E7FCBF585E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 119B
Signing time: Mon 21 Sep 2026 19:00:59 +0000
Manifest this update: Mon 21 Sep 2026 19:00:59 +0000
Manifest next update: Tue 22 Sep 2026 19:00:59 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: 162BUkDowcU89PfdY/o83spXgGC4pgYTKoZVh9N8NJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:c9:02:69:5f:bd:d0:3a:4b:e8:e7:fc:bf:58:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Sep 21 19:00:59 2026 GMT
Not After : Sep 22 19:00:59 2026 GMT
Subject: CN=2bb9bfba8c767a3750d470c3db5d7ea40be09550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:9f:b1:29:f3:b1:04:b1:9c:bd:10:aa:24:
30:d0:4c:0f:32:db:cd:43:7c:e5:0c:16:6d:2e:41:
e8:b3:dc:e1:31:8c:5d:de:ad:6b:58:81:72:68:49:
74:73:d6:1e:cf:53:ab:61:59:9f:94:10:02:de:ac:
37:d1:69:2f:91:60:2a:04:9e:95:01:30:5c:f2:29:
f2:94:0f:ab:66:7a:5a:cb:fb:42:79:f3:d5:76:b7:
46:f8:c0:55:45:ab:35:0c:03:e7:92:5e:5e:43:86:
57:35:14:33:fc:b8:c5:a3:49:d6:39:e8:81:90:87:
fb:90:b7:aa:8c:84:a6:5d:a7:09:40:b5:a1:91:29:
9f:b7:3d:64:4e:9e:78:9d:15:4a:dc:98:48:e5:58:
88:2f:2f:e4:4c:b1:4a:32:b1:b2:dd:98:37:91:16:
22:0e:7a:a0:ee:95:24:46:af:ca:17:4c:12:c8:8c:
66:34:09:a4:ab:bd:33:69:52:4d:40:0b:b2:d7:dc:
5d:19:e5:0d:46:44:fd:53:ba:c6:20:bf:8f:07:c7:
80:ce:5b:51:17:5f:a3:6c:d8:3e:51:15:c3:f8:f2:
f9:fa:d0:5c:ae:81:e1:4f:c6:34:44:1c:a0:ee:f3:
c2:13:cd:55:d1:b6:26:06:ea:81:2e:52:57:db:92:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B9:BF:BA:8C:76:7A:37:50:D4:70:C3:DB:5D:7E:A4:0B:E0:95:50
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:69:23:d0:1f:07:6f:4c:58:18:59:eb:ef:f5:16:dd:87:
66:85:0e:ce:6e:1c:93:c9:b0:5c:f8:cf:28:bf:3c:90:93:ba:
74:7c:2c:73:23:a4:2f:22:b7:68:2d:0d:7d:f3:46:50:f2:b0:
65:d6:2e:89:af:09:6f:e0:e4:bd:a2:52:01:15:37:f3:ba:6e:
73:c1:38:f5:df:ab:27:6f:11:8c:16:16:ff:34:80:9e:ad:52:
56:ed:28:51:cd:84:6f:de:f4:cc:51:49:13:b9:ca:37:70:5a:
08:ef:26:17:7a:fe:fd:f5:3c:59:72:c6:fd:97:43:37:23:99:
fa:fa:3e:0a:61:6d:1a:be:cd:30:25:c3:2b:0d:86:34:b9:69:
41:51:40:8f:b9:9e:43:6f:6d:be:00:7f:b4:2d:a6:d2:6f:fa:
64:75:00:f7:cf:db:06:af:c9:e7:76:c5:ba:0f:a5:f5:d5:6b:
2e:9c:4e:fd:e2:fd:29:e2:91:89:08:10:97:e7:df:ed:3e:09:
fc:0d:5d:bc:92:f1:64:3b:30:3e:d6:10:06:9b:4a:ca:08:2c:
85:6c:cf:65:5f:ab:3e:6c:07:af:52:36:f4:fd:bf:f5:e5:07:
12:cb:91:56:82:7c:bb:e5:9e:69:78:4c:bf:d7:b6:f6:33:2b:
6b:d6:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:31:04 2026 by rpki-client