
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: 5NhWAQ38Kl5OZTMKJcoMi5mCQl0uFDcxt1KxaHH+pps=
Subject key identifier: 82:3E:C0:7E:A2:00:93:50:6B:84:27:38:96:A3:84:24:B1:CF:35:DE
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019D99D0D6AA275E13B6DBD9A00033A7BEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: mKNaUYbLelufFCfa4BBH2hPGxi5zOBH3w0JbHHE5qZw=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d6:aa:27:5e:13:b6:db:d9:a0:00:33:a7:be:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=823ec07ea20093506b84273896a38424b1cf35de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:04:7c:39:98:e4:a0:ff:1e:9b:38:76:75:
9d:95:71:80:59:59:04:a7:fd:f1:5a:6b:15:77:62:
08:b4:39:c3:2a:84:2f:42:9f:e4:5c:12:33:d5:d4:
fc:2a:b9:1e:4d:5b:95:d1:4f:c9:5c:de:cc:a9:55:
b5:de:00:02:44:c9:7a:c3:49:d2:ce:18:17:e4:b7:
13:46:b3:7b:3b:c5:5d:20:57:af:3e:6f:b0:36:61:
ef:07:37:51:f1:47:7e:d1:70:fb:71:42:4b:59:77:
e8:19:7f:bb:76:d0:96:4d:cb:f2:b6:bd:6d:7c:ad:
a4:10:d5:90:5e:2a:84:f5:72:f2:c5:96:d5:62:5f:
1f:ef:a5:79:af:58:e3:eb:31:9b:39:fa:5d:ce:2b:
39:6a:42:c6:c2:57:e8:c3:6d:4c:d3:cb:ea:f9:73:
a8:03:72:15:a6:cd:25:c1:ff:3e:da:df:a5:02:dc:
2c:89:db:f2:d2:d6:2a:aa:19:10:fb:5c:86:7d:d9:
73:51:51:74:b3:f8:f1:5e:2a:62:ab:2a:d5:2d:49:
c7:04:7b:d6:cb:1f:aa:03:10:f9:26:54:5d:b9:1a:
a3:9a:df:75:02:8e:44:1c:1a:4f:4c:bb:4a:4c:8a:
34:1b:b5:fa:99:7b:7d:d5:23:0d:e3:88:79:02:9e:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:C0:7E:A2:00:93:50:6B:84:27:38:96:A3:84:24:B1:CF:35:DE
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:c2:2c:60:ff:fc:92:21:36:6d:f2:32:ba:8b:a8:fd:c9:
1d:26:e5:98:31:16:85:ca:8e:b7:97:9a:f1:f7:3a:7b:b5:65:
35:ef:57:34:02:54:f3:29:45:80:c9:2a:18:af:a2:28:24:f1:
64:4d:56:d0:c8:ab:26:aa:8a:ce:59:ce:ff:0b:cf:bf:82:d7:
76:7a:cb:36:1c:8f:4b:c0:72:b4:1d:6a:97:35:02:3f:44:e8:
e5:d8:0c:2c:8c:36:9d:a3:d9:e0:4d:f9:de:00:58:a6:9f:e1:
66:6b:a6:07:bc:b0:68:c2:a2:07:1e:14:b4:1f:00:62:34:9e:
ca:22:d4:b2:29:2b:54:aa:d4:96:fe:9f:47:f4:b1:d8:34:95:
b6:15:f1:72:1a:3f:c6:5a:c6:8a:7e:6d:15:8d:28:d8:be:a7:
90:89:35:15:15:20:96:b8:24:ee:5c:6f:4a:cf:7d:d7:08:e1:
4c:76:17:9b:f5:67:ee:f8:8f:e1:29:ef:59:50:07:9a:99:eb:
2a:8c:b8:e6:c3:f1:2b:5b:46:d9:80:d7:64:52:1b:fa:3f:a5:
3a:ed:02:5f:36:61:19:e2:c1:ec:60:eb:2c:d9:fe:fd:e2:41:
c0:4e:32:1c:8e:a5:34:2c:98:50:b4:8e:f8:13:4a:5b:d0:18:
91:f1:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:06 2026 by rpki-client