Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: CsRAdvBvL3goTCmI58vp5u9e+GOywG9RnUnxa7FBm+A=
Subject key identifier: AF:6A:D9:36:3A:EA:45:F5:4B:6B:26:04:82:16:A0:2A:5D:A2:70:61
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019CAAC5FD593DA207B7A488898210D1F1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 15B1
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: 4pwY/p+G5bVVh37Bb3xDv6qwCepHqHx3lD5MtVm/oCU=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fd:59:3d:a2:07:b7:a4:88:89:82:10:d1:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=af6ad9363aea45f54b6b26048216a02a5da27061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:ba:6e:62:59:c5:58:63:5b:a3:de:6f:0b:
26:ed:ad:91:1e:dc:56:19:a3:14:a3:18:a2:6d:18:
9b:f3:80:a6:aa:c6:5c:ac:85:96:b3:58:d4:67:e7:
a8:6d:6b:10:ee:bd:a8:a5:ca:5f:21:84:b0:4d:1d:
d2:18:b6:26:6f:ff:06:dd:39:6f:39:ef:fd:61:ab:
fd:e2:b9:50:02:7f:59:a0:3a:42:5e:59:be:75:1d:
a0:13:3b:67:d9:f7:8d:ec:ca:01:ca:f1:8c:e1:77:
0b:ad:a4:f0:61:c1:a7:a9:ad:cb:00:18:b0:ab:25:
09:5f:bf:d5:47:cf:ce:70:51:70:e6:69:9e:93:6f:
b9:b8:0a:0c:dd:6e:01:15:7a:3a:79:d9:46:11:ac:
47:ca:b0:01:bd:7f:a9:56:f1:4a:f1:12:a3:2d:cf:
68:94:c9:53:51:27:da:91:84:26:d0:ad:d2:9c:1f:
8f:b0:8b:16:da:15:06:ea:09:5d:d7:6c:d7:2b:e8:
57:5e:4c:2a:fc:f7:c0:17:48:30:d2:0d:36:f6:78:
9d:d6:59:64:bc:18:b5:44:52:1d:d3:72:55:0f:57:
80:86:0f:2f:b3:35:ce:74:30:52:bc:f9:38:84:ae:
21:df:ff:c2:6d:35:d7:a0:6d:1e:f5:58:ee:6b:d0:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:D9:36:3A:EA:45:F5:4B:6B:26:04:82:16:A0:2A:5D:A2:70:61
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:28:15:13:65:d0:f5:ee:58:6c:63:a0:3f:42:e7:69:4b:
4f:77:b4:6e:f3:87:73:ba:b9:2e:f2:ce:3b:2f:66:a7:d8:4b:
c7:a7:7d:2e:b0:f5:43:eb:cd:83:73:9f:cb:6d:6e:88:11:da:
ed:f6:0d:70:2e:d4:0f:57:25:8e:8d:f9:34:50:79:ce:96:2d:
ce:c1:39:60:0f:b9:01:7a:6f:2c:6e:5a:86:4e:81:2f:d0:57:
5c:30:1e:1b:37:32:19:e4:e7:0f:0d:73:fc:73:c7:69:bb:cf:
75:14:15:7c:e9:cb:6c:bb:e5:de:d5:18:1a:af:72:1e:2c:19:
f2:ae:af:f3:51:1a:4a:c1:c8:f8:e2:eb:0c:32:3b:3b:cb:d0:
8c:e0:be:da:10:6e:20:e7:3f:48:a5:e6:06:40:78:58:a2:da:
03:95:d2:f3:2a:b5:7f:8d:dc:60:64:c4:4c:2a:a1:4b:94:d7:
7d:03:03:5d:92:cd:e9:3a:3c:a1:c6:83:fb:22:60:4c:8e:a0:
a2:a5:58:d4:41:5b:65:1e:d5:b9:b7:81:43:db:a2:41:7e:99:
b8:c2:19:66:68:b8:33:aa:cb:cf:95:84:de:e7:2c:ce:45:92:
3d:7a:87:a3:7f:95:b2:6f:94:be:5a:d0:28:a4:65:ec:76:cb:
75:39:66:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxf1ZPaIHt6SIiYIQ0fHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjYwMzAxMTkwMDI3WhcNMjYwMzAyMTkwMDI3WjAzMTEwLwYDVQQD
EyhhZjZhZDkzNjNhZWE0NWY1NGI2YjI2MDQ4MjE2YTAyYTVkYTI3MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nq6bmJZxVhjW6Pebwsm7a2RHtxW
GaMUoxiibRib84CmqsZcrIWWs1jUZ+eobWsQ7r2opcpfIYSwTR3SGLYmb/8G3Tlv
Oe/9Yav94rlQAn9ZoDpCXlm+dR2gEztn2feN7MoByvGM4XcLraTwYcGnqa3LABiw
qyUJX7/VR8/OcFFw5mmek2+5uAoM3W4BFXo6edlGEaxHyrABvX+pVvFK8RKjLc9o
lMlTUSfakYQm0K3SnB+PsIsW2hUG6gld12zXK+hXXkwq/PfAF0gw0g029nid1llk
vBi1RFId03JVD1eAhg8vszXOdDBSvPk4hK4h3//CbTXXoG0e9Vjua9D6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9q2TY66kX1S2smBIIWoCpdonBhMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvsoFRNl
0PXuWGxjoD9C52lLT3e0bvOHc7q5LvLOOy9mp9hLx6d9LrD1Q+vNg3Ofy21uiBHa
7fYNcC7UD1cljo35NFB5zpYtzsE5YA+5AXpvLG5ahk6BL9BXXDAeGzcyGeTnDw1z
/HPHabvPdRQVfOnLbLvl3tUYGq9yHiwZ8q6v81EaSsHI+OLrDDI7O8vQjOC+2hBu
IOc/SKXmBkB4WKLaA5XS8yq1f43cYGTETCqhS5TXfQMDXZLN6To8ocaD+yJgTI6g
oqVY1EFbZR7VubeBQ9uiQX6ZuMIZZmi4M6rLz5WE3ucszkWSPXqHo3+Vsm+UvlrQ
KKRl7HbLdTlmZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:35 2026 by rpki-client