Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier: YZ8es5RjMyI1mU4d0uTAD9hMA8Bo26zyUQY864yex7w=
Subject key identifier: 4A:EC:C1:49:C4:2F:C1:71:0F:D4:54:63:FD:60:55:5D:71:A8:9F:E4
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer: /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial: 01A0C6D848C01F06671FF3BE23E7652E503F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 02:00:58 +0000
Manifest this update: Tue 22 Sep 2026 02:00:58 +0000
Manifest next update: Wed 23 Sep 2026 02:00:58 +0000
Files and hashes: 1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 5zB0cVF3kxjlD2TEU47UIoqA9weM8DyqLw/002+9h5c=)
2: r2Z0mF-ld7ejJHAo1JnNl0agdIw.roa (hash: fBq7MnnqEMG6p2yBeqITh+XzH9thl2M1F8ElvslUqpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:48:c0:1f:06:67:1f:f3:be:23:e7:65:2e:50:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Validity
Not Before: Sep 22 02:00:58 2026 GMT
Not After : Sep 23 02:00:58 2026 GMT
Subject: CN=4aecc149c42fc1710fd45463fd60555d71a89fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:1b:fd:19:a6:5a:03:8b:cb:98:b8:11:b8:
99:c9:e1:51:a6:12:48:02:eb:b4:3a:eb:46:c5:43:
7b:70:b3:a0:97:33:d0:06:a1:58:30:99:4b:a2:b7:
c8:22:07:ee:2a:73:97:da:ba:c4:ac:be:16:8a:f2:
34:3a:b4:a9:33:4d:20:79:fc:bf:27:23:bf:12:dc:
da:09:0b:fe:77:86:1d:31:5d:71:e9:12:e2:a4:1d:
cf:a2:3a:97:19:a0:ac:b2:94:00:fc:06:57:d6:76:
9c:ff:a2:5e:ef:23:09:13:a5:c8:43:31:f7:0b:e1:
76:89:b3:b1:81:8c:b6:97:7c:fd:a4:20:1e:10:1c:
d0:9b:90:8b:51:bf:a0:d6:29:60:88:5f:24:42:c1:
ee:1e:4e:f6:84:f9:b0:f6:d2:89:72:00:66:d6:41:
65:ab:42:7b:3b:67:d5:55:26:b7:82:61:cc:ff:4d:
20:91:e2:3c:95:d2:4b:a3:8b:c2:dc:0e:1b:83:7a:
9b:02:7c:ec:f2:b3:14:18:06:07:43:4f:5a:ca:9a:
6b:a7:02:5e:2a:e1:80:49:b8:be:a9:e7:df:6c:9b:
04:9b:9e:b8:be:b7:5d:e2:f9:1e:f3:ad:61:ed:ad:
7c:e3:1a:c6:9a:7a:bc:71:6e:a8:85:e3:0d:44:e8:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:C1:49:C4:2F:C1:71:0F:D4:54:63:FD:60:55:5D:71:A8:9F:E4
X509v3 Authority Key Identifier:
keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:16:c4:ef:3e:36:08:19:f9:67:fc:77:f8:c0:50:a3:03:
db:7b:95:79:19:03:ac:ba:f5:ee:51:96:66:bf:1e:47:56:f7:
cc:0e:25:61:a8:23:ef:66:46:9b:af:60:88:be:3a:17:40:b8:
01:c1:bd:d7:18:b3:24:15:d1:2b:13:97:6f:5e:af:d8:d5:bd:
23:dd:e4:82:69:49:47:45:db:33:3e:c6:0c:6e:09:70:7f:0b:
d1:61:9c:36:67:3a:ee:f7:cc:85:47:bc:9b:9a:0a:18:98:c9:
86:06:b3:2a:26:d1:e7:ad:fb:f5:a8:ae:6b:31:8f:2e:79:46:
c2:c5:22:70:e9:65:8f:a3:f1:66:d2:45:b0:35:3c:c7:65:bb:
c2:71:6e:f1:bb:45:2b:cc:e6:86:0b:76:c3:d7:08:0f:b4:ce:
68:c5:4e:41:69:70:52:c4:fe:fa:dc:bd:dc:6c:1c:db:d8:f5:
0d:38:8e:1a:7d:bd:1a:97:31:8c:10:c3:db:92:61:80:49:ca:
82:e6:f4:39:d1:f8:d1:26:5f:e6:2b:6f:35:a4:b8:3a:2f:1d:
ff:2a:35:95:80:f1:95:3e:1b:c9:39:65:b9:64:4b:ba:37:37:
9c:0a:41:bd:26:e7:04:3e:df:96:8b:f2:b8:91:6c:d3:22:f0:
0f:3f:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:15 2026 by rpki-client