Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: SslqWu+V5Z3F1JALWvJcMaRlnL3M1O51hqcIkdE37xc=
Subject key identifier: 9A:B2:54:B7:BF:CC:7D:31:67:FC:5E:C8:00:BD:30:21:49:8C:65:8B
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019CA945DE62732B36C69BD611EB79505D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: AE
Signing time: Sun 01 Mar 2026 12:00:54 +0000
Manifest this update: Sun 01 Mar 2026 12:00:54 +0000
Manifest next update: Mon 02 Mar 2026 12:00:54 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: 2/NfFmrb0fBljk17gAgvIO+4QKXWnSXq44hu+Os7QoE=)
2: _ThG8IVbzuqUhc1osI4_Rpmzqio.roa (hash: kZIjdDI7HB3X2nlD/j4MMUQcvs+mLLJs9i48KmxiWeQ=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:de:62:73:2b:36:c6:9b:d6:11:eb:79:50:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Mar 1 12:00:54 2026 GMT
Not After : Mar 2 12:00:54 2026 GMT
Subject: CN=9ab254b7bfcc7d3167fc5ec800bd3021498c658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:ad:76:2e:bd:ad:20:7a:19:0d:ce:38:6e:
3e:60:b1:32:aa:4d:a3:3a:92:50:12:1c:0f:62:09:
32:47:db:79:e5:49:84:05:c6:8b:9f:92:b6:9e:55:
72:b7:81:8c:b1:87:8f:04:d1:3f:2d:dd:79:63:20:
33:81:10:3c:96:71:54:6d:ea:ae:7f:04:8f:25:54:
d5:9e:0b:91:a1:c6:78:4b:92:5a:6d:f6:be:fb:b3:
6a:db:f7:3d:4d:b6:e0:ef:ea:3d:a7:a9:c6:15:63:
77:bc:89:b4:08:af:3b:c3:b0:19:0c:4f:7e:85:12:
fb:7e:83:ae:7f:23:e9:27:42:44:4d:29:fc:5b:75:
e5:5e:c3:1c:20:db:82:15:6b:9f:d0:b2:8a:06:6b:
76:b1:a8:4b:f3:9e:fb:56:16:4a:fb:87:04:f0:ac:
bc:18:53:63:ff:b1:07:52:bd:16:e3:6e:02:a2:00:
6f:c2:cf:7b:5c:6d:c5:23:8f:1e:ed:26:88:0e:4e:
4d:3c:9b:4b:41:29:b0:7a:7d:c8:77:b0:a4:e4:c3:
11:74:38:74:13:b1:94:ad:f5:d4:b8:10:f1:cb:8c:
b0:3a:09:16:29:45:4c:d5:bb:39:65:1d:bb:34:b5:
4a:17:f9:63:37:88:40:76:d6:17:4a:64:3d:27:37:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:54:B7:BF:CC:7D:31:67:FC:5E:C8:00:BD:30:21:49:8C:65:8B
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:92:a6:b5:ae:3a:99:12:d2:da:cd:fb:88:40:91:24:bf:
13:85:18:fc:b3:59:b3:f2:ab:dc:e8:4f:5f:00:fa:46:88:37:
6e:d4:7e:d6:af:ba:30:75:a1:97:63:3e:fa:ab:dd:c4:ec:ab:
77:cf:c4:a6:9d:ca:54:b7:eb:00:50:f6:61:bb:48:e8:f1:32:
84:13:ed:1c:ca:d7:43:de:8e:f4:41:ac:a9:75:dd:a2:ad:0b:
be:54:8e:7c:c1:e8:f5:ae:b8:3f:85:77:17:19:bd:78:82:14:
2b:73:9c:cf:c4:e7:3b:5e:4b:11:93:0a:db:61:fb:90:e4:b2:
9e:d7:c9:fd:17:7a:d0:e4:d4:ef:ca:24:9d:25:29:29:f8:4c:
d2:94:66:91:2f:33:a2:8f:37:5e:d5:05:b1:8e:13:b4:cd:87:
f0:92:da:a4:7b:18:f7:01:69:4a:d7:d0:06:a0:47:33:64:77:
f2:a9:7e:3a:8d:ce:7b:30:df:43:8c:b8:5c:6e:6f:7e:90:26:
92:7d:c5:f8:5b:78:55:4f:ff:c9:95:ae:0b:b3:ad:e1:55:10:
a9:07:cd:53:24:0c:44:de:81:fe:30:60:f9:63:f7:dc:c5:1f:
fa:7d:53:98:5c:b8:a4:8c:40:c2:37:6a:2a:bf:0e:a7:9b:fc:
18:5f:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:23:54 2026 by rpki-client