Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: 9bkTe4jsbgfROybNw/NP3aKzDi88TfoE2bZE61st9ig=
Subject key identifier: 67:1D:04:6F:FD:1A:95:81:1B:01:40:8F:B7:5C:C3:25:2B:B4:09:4B
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019DA3AEC0EE4CCF3BDE73E9DBBC98BD2352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 0130
Signing time: Sun 19 Apr 2026 03:00:31 +0000
Manifest this update: Sun 19 Apr 2026 03:00:31 +0000
Manifest next update: Mon 20 Apr 2026 03:00:31 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: 7iUtu/078+QrDqyuiPeaLvnZBg5WBJLjqJez1+aGPyg=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:c0:ee:4c:cf:3b:de:73:e9:db:bc:98:bd:23:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Apr 19 03:00:31 2026 GMT
Not After : Apr 20 03:00:31 2026 GMT
Subject: CN=671d046ffd1a95811b01408fb75cc3252bb4094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:bb:5b:4a:40:c2:50:8a:65:58:b7:5f:02:
42:ed:9d:a1:ea:30:1b:ad:04:fe:db:6b:a4:50:e6:
2c:7d:a4:46:f3:67:cc:07:1a:3d:4a:fc:a9:5c:b5:
cb:96:e8:5c:c0:20:91:1f:d6:2b:30:31:80:38:d5:
0d:51:d5:56:18:98:d8:9b:de:69:87:a7:5d:b7:17:
31:e5:df:d5:85:b5:93:d2:0e:df:f0:64:85:23:e9:
3d:92:66:6b:7d:36:70:bd:16:23:81:7c:c8:dd:f4:
dc:08:09:2f:ff:c9:36:1d:ae:03:39:ff:d0:a4:7d:
f1:df:6d:14:c4:24:dd:bf:b3:e3:c1:ea:57:f1:87:
a8:51:8b:f9:4a:f9:0e:e4:09:9b:94:61:58:05:8e:
29:ed:ed:eb:52:af:eb:c1:88:eb:4e:64:1e:28:c5:
94:50:bc:c6:1f:8b:fa:b7:0f:34:fa:35:ba:7d:c1:
fe:1d:8e:b7:16:34:86:ae:b2:fd:e4:de:76:3f:bf:
e6:a2:c8:eb:5d:43:34:48:e2:b4:97:0f:9d:b7:68:
34:6f:f3:db:42:0d:0f:ad:e8:34:3e:57:e5:b4:0d:
00:52:6f:37:e8:30:f7:1f:90:98:be:2b:94:58:33:
65:a1:0d:75:a2:cc:c2:56:60:ba:ab:6b:1a:49:16:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:04:6F:FD:1A:95:81:1B:01:40:8F:B7:5C:C3:25:2B:B4:09:4B
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:a0:ef:33:8b:61:e8:46:a8:e8:bd:b4:0e:b0:81:be:d8:
d2:41:82:c3:84:71:0e:33:e0:f4:9f:d8:82:1e:ea:61:ef:50:
cc:fd:c0:7a:b5:60:0f:b2:8b:99:ba:11:e0:2b:4e:7a:51:1e:
bd:0b:5b:e8:af:b8:b0:f0:23:88:24:9d:62:a6:74:f6:6f:68:
60:2e:0a:7d:32:ea:3c:8b:e7:0a:4d:e4:2e:c8:d9:d4:6c:d4:
cf:40:a4:5d:a8:d2:76:37:40:e9:d0:2e:19:54:4e:a7:23:61:
32:39:d8:c2:91:7c:92:9e:d2:a3:4e:a2:2a:c2:aa:8f:5f:f8:
e3:e7:9e:18:cc:9c:32:db:5b:93:0f:78:90:61:dd:a9:00:7e:
91:fd:f1:c1:e4:72:bd:75:b2:44:36:15:6f:b6:1a:e3:6f:e4:
06:ef:77:d8:ce:98:74:07:ff:7a:dd:85:ff:fb:f2:d5:fc:de:
4b:05:32:c1:3e:26:33:89:7d:f3:97:b8:90:a8:81:c9:a0:97:
35:de:7f:a5:89:d9:64:d6:0c:ce:01:db:b4:c5:54:5a:61:bc:
d0:f4:45:27:4e:06:b7:49:84:f7:12:47:72:4a:b9:b9:83:6c:
8e:02:f6:a6:ad:d4:9a:d1:a6:c7:1e:e3:ba:54:5c:42:98:64:
c5:ce:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:42 2026 by rpki-client