Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: dFnzAfEE/YBfh8zaDCJzyOrPa3AQmtPK7xAHwVHi3cc=
Subject key identifier: CD:BD:2B:AF:39:85:05:98:47:26:CF:25:A9:B8:91:09:C4:B0:CD:23
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019FAA197C44112E727394751B76A9F9B1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 1740
Signing time: Tue 28 Jul 2026 19:00:24 +0000
Manifest this update: Tue 28 Jul 2026 19:00:24 +0000
Manifest next update: Wed 29 Jul 2026 19:00:24 +0000
Files and hashes: 1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: nwxN7AUsZgxUEHg/bUnI61UwMk/jQBc0JELIX4B4MzQ=)
3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
4: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
5: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
6: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
7: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
8: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:7c:44:11:2e:72:73:94:75:1b:76:a9:f9:b1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jul 28 19:00:24 2026 GMT
Not After : Jul 29 19:00:24 2026 GMT
Subject: CN=cdbd2baf398505984726cf25a9b89109c4b0cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:75:00:47:ef:b0:27:bf:69:5f:07:7b:b6:79:
2a:1d:5f:b0:49:e6:4e:5e:1d:f2:d3:3b:7c:e2:e3:
c2:6d:ee:70:20:c6:14:fe:fc:75:22:ba:5c:53:e6:
38:75:41:5b:3b:18:db:1f:b9:36:84:97:77:0a:d8:
0d:66:b2:b4:25:a4:e6:a4:55:6c:33:86:06:6c:21:
7a:b3:af:b6:61:19:d9:d6:18:64:ff:25:48:72:68:
8b:1c:50:a9:2f:df:99:c7:b7:81:74:a4:9f:51:d0:
6c:5e:15:77:13:75:be:f1:c3:1f:6a:87:fa:ae:e1:
e1:12:90:f9:44:35:4c:97:a5:81:e0:bc:27:e1:d4:
15:3b:dd:fb:69:cf:7b:69:ef:48:de:1d:35:bd:57:
f1:47:fa:81:96:e7:e7:98:c1:57:f2:b2:a3:47:73:
75:e3:ec:0d:cd:23:bc:d3:7c:0d:bb:a4:45:f1:72:
c5:b3:4c:9e:b5:ea:32:2b:60:dc:4b:07:8d:d6:58:
a5:b1:8c:a0:ea:8d:9e:ad:a0:ab:aa:62:13:0b:70:
60:dc:e3:94:01:8c:86:31:90:0b:31:0f:79:a6:3c:
e1:b7:75:2d:e4:32:21:ee:ab:79:f8:9e:1e:40:a3:
70:82:03:8a:52:38:15:90:21:a0:9b:22:df:bb:07:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BD:2B:AF:39:85:05:98:47:26:CF:25:A9:B8:91:09:C4:B0:CD:23
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:43:d3:41:db:2b:e7:ae:90:15:a3:25:ae:4c:d4:2a:44:3e:
4a:d0:03:5f:35:8d:32:57:bd:1e:09:ea:5d:eb:64:20:f5:c4:
b5:d7:f6:17:dd:fc:07:9e:03:5e:59:cc:27:80:5a:cb:70:85:
26:3b:1b:5d:62:5e:f6:33:3b:ea:25:2a:eb:a4:1a:f3:96:fb:
4d:d8:dd:e4:81:8d:cd:4a:3d:1b:d1:a5:7a:a4:02:04:a1:d9:
32:f0:98:5a:e3:7a:49:06:2c:fd:12:6a:c9:7d:a9:13:c9:f6:
c3:fc:27:8a:8c:11:35:b3:fc:75:de:d0:80:11:ac:7f:63:5a:
42:1e:67:2c:8e:72:aa:5a:7a:35:38:13:c8:bb:63:dd:ef:59:
86:9a:01:e1:3e:8b:d3:8f:f9:00:84:b3:74:00:bd:80:ac:7e:
7e:f3:c5:fc:4d:c3:1d:c2:c8:ab:e9:58:9c:c0:cf:92:5a:e2:
7b:4c:28:8c:d2:b4:41:de:eb:17:e3:d7:aa:66:43:62:55:f6:
6f:4b:d1:eb:08:82:ba:fc:db:4d:f8:d9:4d:38:3a:94:9d:69:
c5:0a:3d:e3:b9:f0:5e:06:e6:e4:7e:37:fa:2e:e0:60:4d:43:
28:ae:9c:01:e5:99:02:01:59:6e:db:e0:94:e7:95:0c:5c:c4:
01:17:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:50 2026 by rpki-client