Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: 9bep/50FCqU8/rzOo2orMgo0EVvL+C6mSIqjQFAzikQ=
Subject key identifier: C6:A1:D9:33:C9:33:A7:0B:C4:AC:A8:21:93:C6:F8:24:EC:EA:B6:CC
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019D9A3EF4453B0407DC34349A06578AC4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 162D
Signing time: Fri 17 Apr 2026 07:01:50 +0000
Manifest this update: Fri 17 Apr 2026 07:01:50 +0000
Manifest next update: Sat 18 Apr 2026 07:01:50 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: tPFADZqIm4F11zAgF33Lof5J+HssZJh1EAy3Wi6bQuE=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f4:45:3b:04:07:dc:34:34:9a:06:57:8a:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Apr 17 07:01:50 2026 GMT
Not After : Apr 18 07:01:50 2026 GMT
Subject: CN=c6a1d933c933a70bc4aca82193c6f824eceab6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:35:2f:02:6f:20:f0:e5:05:07:fc:c9:c9:
76:15:7a:9b:23:37:58:a8:a4:75:b3:e6:18:b4:82:
5d:ac:2b:9a:a3:82:21:e9:5a:ec:2b:e4:cf:54:5c:
e5:77:2c:05:73:ef:58:33:c0:ee:c1:98:71:b2:fa:
2e:41:db:ab:75:88:00:d6:d3:50:c1:79:a2:c3:8e:
f2:af:02:ef:db:38:96:bf:43:32:de:7e:f6:51:14:
0b:3e:37:00:e6:8c:da:83:98:47:b4:a0:a0:11:64:
ce:41:5b:02:1f:da:52:81:0c:bd:d7:8f:fb:81:b3:
79:78:2a:72:1e:25:ac:ff:98:08:b6:87:9f:d1:ce:
19:a7:ec:8b:61:40:7a:df:3d:61:a7:49:09:15:a6:
64:05:c8:fe:c5:d9:29:ff:ab:6f:5f:88:d8:31:2b:
92:c1:ae:cf:2b:64:d9:42:2f:52:de:2a:86:81:c8:
3b:42:e3:92:5b:80:5e:13:2a:ba:36:90:14:f1:8f:
e6:e1:b0:d0:d7:c7:81:71:14:1d:46:ab:8a:af:13:
e1:b9:1f:32:85:ae:0b:8f:69:59:96:b7:de:2c:3e:
31:1d:35:c1:db:05:c7:e3:c7:0d:2f:c3:37:f6:a2:
ec:5a:1e:cf:0e:30:10:4c:9a:0f:5b:c9:72:79:0a:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:D9:33:C9:33:A7:0B:C4:AC:A8:21:93:C6:F8:24:EC:EA:B6:CC
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:ac:fd:8b:d4:fc:ad:77:9a:73:f5:10:78:34:9b:95:c8:
04:9b:15:e5:8d:57:35:e0:c4:ef:4c:1a:56:c1:00:3f:af:7b:
69:b6:0f:6b:ac:76:78:97:24:6d:56:97:5e:00:32:7d:ee:9e:
c8:61:6e:8f:8d:97:67:a3:33:4c:1e:80:b5:65:b8:22:f2:46:
81:fa:5c:16:23:33:f5:0e:41:3d:5f:80:ad:87:dc:bb:39:04:
33:11:12:ab:06:38:0b:8a:8a:36:11:a4:44:2a:19:6f:ae:ad:
db:60:b9:6c:43:90:3f:89:f3:2a:fe:86:dc:38:6c:72:cf:3a:
b8:64:4a:c8:3b:92:fb:f5:28:1c:ef:50:a5:3c:7f:18:9b:48:
f5:23:55:b8:63:94:ce:c2:e0:f9:de:94:71:6f:ed:9f:47:1c:
58:38:2b:dc:9d:59:c7:a7:05:ab:39:c3:86:cf:92:ee:ed:93:
16:b9:d4:d7:4a:c2:e1:d0:a9:29:eb:81:15:33:d7:6b:fc:f6:
85:1c:4b:99:b5:72:70:90:35:c6:b0:65:47:03:07:44:10:a1:
0f:1e:f1:10:6e:8a:e1:e1:6c:90:48:b5:7d:99:93:62:42:91:
13:ca:74:3a:43:8d:77:58:c8:22:1b:4f:5f:c1:cf:b5:4a:ea:
8e:38:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:55 2026 by rpki-client