Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: FXtbu/9pKCRyUJ0rUBd2xuqWw4mgGdkVhZhV9V97YGE=
Subject key identifier: 95:30:24:FA:AA:53:1C:A0:34:11:C9:C1:A4:C5:1E:B2:00:38:6D:6A
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01A0D4CB2CFCB0B51C74F6CD9711016142F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 17DB
Signing time: Thu 24 Sep 2026 19:01:19 +0000
Manifest this update: Thu 24 Sep 2026 19:01:19 +0000
Manifest next update: Fri 25 Sep 2026 19:01:19 +0000
Files and hashes: 1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: vQ7pP45gH9EV3FwuRm8RpZ3HP+ym9H3+Amee5Pa5HTo=)
3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
4: PDdsyfueJWkvrU3pYkbjZMgu1h8.roa (hash: 26bjggiQNB80rvMQOyTV/5L/llpmJn8tcdmihtANmPA=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:2c:fc:b0:b5:1c:74:f6:cd:97:11:01:61:42:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Sep 24 19:01:19 2026 GMT
Not After : Sep 25 19:01:19 2026 GMT
Subject: CN=953024faaa531ca03411c9c1a4c51eb200386d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:e2:31:18:06:b3:d4:65:e7:29:3e:6d:bd:
8d:3f:19:9e:38:4f:b0:62:34:b7:c2:3d:ae:1a:71:
20:7b:9c:91:ad:55:83:64:bd:59:65:14:87:60:2b:
5c:c4:fb:38:65:d3:be:59:c7:fe:47:a5:92:91:1d:
8c:49:bd:33:64:30:85:ad:4f:e5:03:1e:44:ec:6c:
a8:b0:b6:b5:94:52:c6:7d:c5:53:e8:e0:a2:49:bd:
81:23:80:83:95:27:62:05:82:ed:7b:2f:8b:d4:d6:
59:87:04:73:fa:c6:24:94:6c:a5:46:3b:99:f4:d5:
da:07:98:42:30:60:ec:7c:8b:e7:56:cb:7b:fe:38:
c5:49:e5:11:c5:8d:00:87:03:58:11:32:b5:ce:47:
d4:ef:c0:96:29:41:bf:2a:c4:64:68:2c:73:70:ab:
67:e2:4c:d1:7a:e3:21:fb:c4:44:81:b9:52:42:51:
24:d1:9c:9a:7d:c2:7b:17:0c:51:0b:79:5c:ff:ce:
eb:68:3e:d8:26:55:37:6d:19:a1:af:5e:16:a7:45:
10:85:e0:f1:36:5a:ac:00:0b:c5:07:b1:14:07:56:
0e:da:fa:a2:dc:a4:99:a4:c2:aa:29:84:64:fe:1f:
db:51:c0:ab:1c:37:fd:22:46:ea:7b:c1:0f:99:07:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:24:FA:AA:53:1C:A0:34:11:C9:C1:A4:C5:1E:B2:00:38:6D:6A
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:cc:dd:99:3b:a7:59:d7:56:08:ab:62:18:5b:44:8c:db:
9a:3f:ea:7e:09:4c:3c:dd:4b:0d:9b:83:4e:72:8a:12:45:ce:
0e:9c:3a:7a:24:b3:db:00:1b:94:8d:29:e3:41:a3:af:33:1c:
c8:56:78:2a:b4:58:20:df:33:15:37:2f:f8:04:22:ac:0a:e4:
a0:ae:80:df:a2:17:17:10:ea:92:37:37:dd:b9:ec:be:5e:fa:
de:19:f2:b7:3f:6d:c1:12:e6:68:84:e1:ee:c4:fe:a2:40:4d:
82:dc:04:37:0f:88:99:c5:f2:7c:5a:67:ad:37:fa:2c:0f:70:
10:b8:22:a1:aa:be:9a:12:e6:e0:41:82:db:4a:40:68:23:77:
6c:12:90:dc:08:4a:6d:ce:9d:04:9b:df:92:dd:c6:e5:3b:4e:
99:3a:91:36:8b:76:20:df:f2:01:13:38:d7:a8:32:ba:d3:ad:
ae:0c:5e:9d:1d:82:01:18:0d:d0:a1:05:6c:ff:c5:59:32:b2:
dd:2f:fd:45:e7:d2:9b:a6:ab:33:cf:e5:0b:74:e7:76:ae:94:
c4:f3:90:0c:83:b6:05:ba:88:5a:a8:8a:b5:01:1d:9f:32:a8:
b1:b7:db:a6:05:05:0a:30:8a:1b:69:91:7b:59:17:b1:cb:f8:
a1:f3:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:18:49 2026 by rpki-client