Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: WaprEP8/183B6Zkz2tiX1yd8xdxYl6YJBqicJ2CYvNc=
Subject key identifier: 37:E1:4B:40:EE:A9:61:D4:0A:7A:75:B0:E8:7B:6E:E8:72:A5:C5:20
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019CACB52EBE9F94A6A8339C450A2019EB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 15B2
Signing time: Mon 02 Mar 2026 04:01:20 +0000
Manifest this update: Mon 02 Mar 2026 04:01:20 +0000
Manifest next update: Tue 03 Mar 2026 04:01:20 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: Eg+cJvQWxGhPRQN7GmCNVTLC03i96YQjqR3kq0MI9/A=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:2e:be:9f:94:a6:a8:33:9c:45:0a:20:19:eb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 2 04:01:20 2026 GMT
Not After : Mar 3 04:01:20 2026 GMT
Subject: CN=37e14b40eea961d40a7a75b0e87b6ee872a5c520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:88:e6:df:0a:97:62:f0:28:a6:8b:0f:2c:
f2:26:9d:d8:01:17:2d:e0:37:e7:32:09:3d:f9:23:
ad:6b:cd:1c:32:d2:1a:e3:a0:bb:83:a1:9b:9e:ef:
c0:81:67:a3:41:c1:f6:48:f0:f5:39:42:7d:28:1c:
04:a9:fa:8e:dc:c2:7e:9d:26:98:9f:40:f8:68:82:
f8:9b:7a:a5:0f:86:49:18:97:62:58:38:a3:2b:70:
8b:1f:8d:e4:b1:c0:1d:b6:61:92:11:e5:74:e5:18:
b8:99:22:dd:c4:1b:01:da:ed:da:c2:e9:a0:10:ee:
86:22:a4:0e:42:bb:6c:97:7e:b6:21:95:aa:d0:b3:
78:0f:0f:89:b1:f8:33:98:ab:17:8c:b2:9b:b2:cd:
fe:35:98:f2:1f:18:cc:9a:b8:f3:b3:b8:11:90:f5:
bb:25:e4:e6:88:1a:ed:0d:0b:26:9b:8f:21:51:27:
61:2c:ab:ad:64:04:d7:26:8d:96:c8:eb:a8:5d:aa:
79:51:58:94:8b:47:f8:19:65:f0:72:43:b4:b9:30:
30:84:a3:66:0e:49:33:20:da:11:74:20:86:65:de:
a4:a6:b0:06:da:cf:13:ee:15:80:7e:10:a1:83:12:
23:f3:e2:5e:6a:70:cc:c3:e8:26:30:f8:2f:fd:b9:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:4B:40:EE:A9:61:D4:0A:7A:75:B0:E8:7B:6E:E8:72:A5:C5:20
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:39:e1:cc:22:62:ec:4c:ff:8e:a9:19:8e:e9:ce:f3:84:
ed:41:53:ed:63:cf:4f:0e:d3:2d:c6:68:44:ec:f1:33:34:90:
46:42:6f:75:1e:65:2f:da:22:2e:23:d4:41:1c:04:41:f8:95:
f7:4b:c1:ab:1b:7c:00:84:3d:00:9f:d2:bb:ac:17:2e:56:75:
ca:72:e1:1e:40:74:d8:32:4b:32:24:5e:b1:fa:2a:1c:b7:19:
4c:19:b4:7f:9d:5b:0f:cf:ae:2d:75:35:91:4e:40:24:56:ab:
fe:e0:09:04:e1:56:7a:d5:98:86:74:e3:f1:c3:70:d5:49:73:
3a:03:dc:ef:b8:3b:6d:3f:bd:f6:72:df:a0:73:d5:49:5e:bf:
44:e0:47:15:ad:14:38:ca:f4:7e:e9:5f:60:a6:19:82:51:bb:
a1:66:31:14:ee:8b:30:11:53:62:f1:06:98:5b:1a:ed:bd:01:
4c:82:a7:cb:1c:a0:17:2f:d1:52:84:30:c3:d5:ea:75:a1:78:
14:01:31:b7:9d:41:1f:f2:fd:0c:ba:fb:19:5b:19:29:9d:4e:
f6:2e:c6:d6:45:e2:76:db:cc:cc:aa:1f:28:b1:5d:b5:81:43:
0c:82:fd:3a:26:b2:6b:3b:21:99:22:c4:7b:7b:b3:05:01:71:
03:61:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:02 2026 by rpki-client