Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
File: 2SLY1F-YXcOJbJF2p9SNdljLT2g.mft (raw, json)
Hash identifier: ThYbg/FFj+2pnwTg4RBIrP1cXNN/1NgMJt6WlhwQNdc=
Subject key identifier: C6:D8:B2:42:C0:F5:E4:7B:4F:A5:91:69:D1:2A:32:2C:42:00:EF:FC
Authority key identifier: D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
Certificate issuer: /CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Certificate serial: 019CAA58C6FA389E0ED8A6A7D0BA637FDF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: 2SLY1F-YXcOJbJF2p9SNdljLT2g.crl (hash: PxcGfKteCu2PviN1Ow5z7gELi3Uo92IJZl/hohWov+E=)
2: YmwUCnBD8zc7hnCaYzFS1FXBKks.roa (hash: yImSLDVjhlkQ0X2UIt+K01tSFGalTr+lR1Nbf7LaW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c6:fa:38:9e:0e:d8:a6:a7:d0:ba:63:7f:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d922d8d45f985dc3896c9176a7d48d7658cb4f68
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=c6d8b242c0f5e47b4fa59169d12a322c4200effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:04:09:f5:71:02:6e:a6:2f:c4:45:fe:1c:
d1:ba:1d:67:f7:e2:26:a8:25:6b:94:3b:b9:be:4f:
69:be:e4:b3:55:13:58:6d:58:08:89:6b:16:fc:a8:
bd:ad:ce:96:5d:b1:7c:61:a5:f0:66:b5:6a:20:a1:
c9:93:51:67:69:17:22:c3:8e:89:f8:8d:85:0d:2c:
7e:66:fb:0a:32:8b:42:60:85:02:20:a4:92:cb:35:
cc:72:0d:9a:b8:e4:29:fe:ab:8f:c2:f0:e4:88:c9:
ee:4d:c2:30:ca:3b:76:72:2c:ca:81:80:61:78:e6:
27:9d:24:f2:3b:f6:a2:61:65:33:45:bb:1f:f4:d4:
c7:f2:4a:31:2d:b7:3a:7b:84:74:70:92:e6:55:87:
70:0a:59:7d:55:9f:cc:78:63:73:e4:43:98:39:c8:
6b:2a:6d:bb:9e:90:78:9d:76:4b:39:22:1c:d7:f2:
88:5a:01:ad:e7:79:fa:2d:89:5d:b8:95:9a:58:a3:
b7:42:86:13:9b:c1:dc:43:ba:3f:c5:b6:9b:99:b1:
68:ee:2e:3b:5a:9b:b6:9a:3f:ce:e4:64:6b:ea:61:
d2:d4:d0:d3:ba:49:6c:54:48:db:4e:0f:d8:60:6f:
e6:8f:33:44:d8:7e:70:63:ee:50:d8:99:c4:1e:80:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:B2:42:C0:F5:E4:7B:4F:A5:91:69:D1:2A:32:2C:42:00:EF:FC
X509v3 Authority Key Identifier:
keyid:D9:22:D8:D4:5F:98:5D:C3:89:6C:91:76:A7:D4:8D:76:58:CB:4F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SLY1F-YXcOJbJF2p9SNdljLT2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9002e2-dc04-4c39-9235-54d5d04e346d/1/2SLY1F-YXcOJbJF2p9SNdljLT2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:2e:e0:8f:f0:b1:06:b6:e2:fd:39:8a:53:d9:82:19:e6:
8a:c1:cd:5d:d8:ea:ba:d2:01:87:87:3a:9e:d3:34:d7:e6:3b:
16:5e:30:93:6b:1a:7d:5b:2d:7e:d5:0b:bf:30:c3:0a:8d:d4:
78:22:98:b6:57:c9:05:03:33:44:2e:f4:a4:60:a4:41:ba:d2:
9b:ef:bb:94:5d:b2:7c:db:7a:6e:ff:cb:83:33:39:c6:4d:43:
57:15:df:cf:3c:0e:87:a0:d5:c1:e0:e7:4c:0e:e2:14:11:63:
5f:af:13:eb:fa:32:70:b4:0b:bd:b4:fd:ee:f5:95:4c:29:73:
e7:8a:ac:68:0f:76:c1:f1:31:6c:8a:be:73:71:a0:d0:c0:53:
98:e5:a7:23:89:fb:76:3b:b5:7c:cb:7f:52:1f:88:1b:c9:aa:
35:93:71:25:3f:53:b0:52:21:ad:77:ad:31:d6:a4:ef:8a:cc:
13:85:f0:89:b7:a8:b6:96:50:5f:fc:8e:12:3c:d8:00:61:6d:
05:de:0b:42:c2:a3:c4:01:c5:c7:7e:f5:45:4f:e6:36:9f:da:
ec:64:3e:9f:72:a1:df:1b:26:24:e3:01:58:1d:6f:e7:0f:6e:
b6:fe:5d:55:5f:0d:32:3d:2e:ec:4e:53:7c:e8:82:8d:f9:6b:
9a:b3:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:42 2026 by rpki-client