Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: drYcgynHWlj4nD9v65bfRCIDMz1VXLiG/9qFo12zGmY=
Subject key identifier: 55:A6:A4:4D:D5:80:5B:89:E6:C4:EB:48:08:58:51:AB:F8:3B:50:20
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 01A0C2FBC49FA9AA980A78EB3E22DE901B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 08:01:14 +0000
Manifest this update: Mon 21 Sep 2026 08:01:14 +0000
Manifest next update: Tue 22 Sep 2026 08:01:14 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: w79/knXi8H8LR5FgJlobJ7UOvg0NBXvlSDpJaFpaKF4=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:c4:9f:a9:aa:98:0a:78:eb:3e:22:de:90:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Sep 21 08:01:14 2026 GMT
Not After : Sep 22 08:01:14 2026 GMT
Subject: CN=55a6a44dd5805b89e6c4eb48085851abf83b5020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:3d:b7:b9:ab:ce:6c:4a:9a:6f:3c:99:ef:
cc:ba:5c:ee:88:e5:b8:86:4f:3f:97:50:87:0b:f2:
a0:c6:52:90:7e:55:57:42:78:76:4f:fc:0f:9b:47:
c9:11:a6:40:f8:07:97:d8:82:5b:6f:bc:22:bf:2b:
0c:37:86:04:33:ae:8c:53:e6:79:eb:bb:de:c8:d9:
f1:d4:2d:a8:72:2e:cf:aa:66:28:c7:f3:ee:b3:06:
90:31:c2:0f:e6:d6:4b:ae:d3:7c:08:6a:03:a4:7e:
ee:b7:62:2d:24:73:88:2b:d9:90:b8:55:76:7c:0c:
53:d2:14:4b:f9:5a:01:1f:15:ce:64:28:ba:49:11:
2c:75:ee:a2:28:29:34:81:68:71:23:e7:da:e9:fe:
d7:2b:7e:4c:92:91:6e:09:61:58:8d:67:52:22:27:
17:7f:a5:54:18:26:3a:c6:98:b6:20:68:9a:16:bd:
84:8b:40:92:b3:a8:14:ca:9f:54:46:53:02:cb:c7:
e6:b8:df:32:cc:2d:90:99:d1:90:d6:1f:fa:aa:96:
64:aa:86:9d:a4:44:ab:47:0e:d3:01:fb:64:fa:9a:
59:27:11:86:89:71:48:a9:e1:2c:d9:1a:a7:20:5e:
31:45:82:a8:cd:af:6b:d0:b4:02:5c:20:d8:10:b1:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:A4:4D:D5:80:5B:89:E6:C4:EB:48:08:58:51:AB:F8:3B:50:20
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:e8:11:91:79:fb:94:35:ae:dd:18:1b:56:f6:34:6f:fe:
4a:ef:67:40:71:d7:7a:ce:c9:38:2a:ef:99:4f:79:55:0a:2a:
76:a7:15:65:71:88:83:fb:fd:59:44:01:a6:7f:da:6c:1f:7e:
b8:56:f3:63:1f:85:48:e1:85:8e:11:a5:31:8e:26:37:ef:f2:
1a:dd:e8:fb:da:36:fe:44:97:ee:83:26:03:86:74:23:44:e8:
ac:b3:3e:51:5e:4d:07:f7:e7:fa:b6:f3:61:2b:9c:17:2c:75:
90:87:a6:7f:e0:df:12:fd:62:4c:42:61:76:ec:66:aa:22:9b:
c4:c9:2e:c2:8f:95:2d:0b:47:24:9c:49:54:4c:58:b8:91:fa:
6d:46:1b:8a:47:f1:30:19:0a:68:b3:5a:67:ad:af:89:2a:f0:
4d:19:f8:bc:ff:e8:14:16:7a:71:09:92:74:de:a0:e5:fe:27:
16:fc:f4:71:e9:e8:b8:92:e4:87:bb:c5:fd:f9:43:02:bb:aa:
2c:e6:57:14:56:85:4a:c6:5e:d9:b3:1e:6b:15:09:65:cc:d4:
1b:a4:0c:e6:d3:19:19:f1:07:0c:9a:b9:24:5d:f8:43:6a:99:
9f:3b:2e:23:f2:24:ef:5c:5a:4d:e6:61:a2:1f:7b:7e:24:20:
d9:3b:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:57 2026 by rpki-client