Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: 69Y15fadbDL3cxH+RWcEDJTvdQ2fLo7Chsjh58Z7Z78=
Subject key identifier: 92:1C:B0:22:D7:96:7B:54:BE:C9:39:41:0A:F3:DA:95:F4:06:02:01
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 01A0C77C605EEEF64B840B3F73ED51D23F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 02D1
Signing time: Tue 22 Sep 2026 05:00:12 +0000
Manifest this update: Tue 22 Sep 2026 05:00:12 +0000
Manifest next update: Wed 23 Sep 2026 05:00:12 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: uH6RVd8jVhqCq1xp454J0l8UDezlMrkU72ZDZcnIZS0=)
2: Ledh3ytks4vVvPQKVNZW-CywdME.asa (hash: wEkbzVsTHAI/hZOOB5TftO5Vy9bP7K1YrPCHKKhTjg8=)
3: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:60:5e:ee:f6:4b:84:0b:3f:73:ed:51:d2:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Sep 22 05:00:12 2026 GMT
Not After : Sep 23 05:00:12 2026 GMT
Subject: CN=921cb022d7967b54bec939410af3da95f4060201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:60:a5:e9:a5:16:d1:3d:01:59:a8:4d:e0:
a1:e4:de:94:97:ce:7d:75:66:df:52:57:6e:8b:22:
2f:7a:c1:eb:04:43:bf:54:61:28:b9:a3:bd:ab:89:
88:0a:e7:73:52:f0:38:48:87:36:dc:e3:88:b0:2a:
61:63:3c:80:e5:79:47:59:11:f8:1a:88:5e:79:35:
f5:c0:29:1f:fd:13:8b:93:d7:62:a0:0b:63:25:e1:
1c:00:b7:b6:4d:54:85:9a:19:f4:3f:2f:1d:ac:04:
e0:30:2b:e9:d6:73:f6:35:6c:9d:d9:fc:80:bf:ab:
20:90:29:e4:0f:cf:a4:bf:0d:77:c1:13:6d:d8:aa:
93:a4:ca:e2:e3:1e:05:79:27:99:3d:d1:50:07:59:
2c:d1:cf:75:04:03:42:1d:96:d0:41:f5:98:70:2e:
ae:70:3b:82:12:f2:d7:9b:61:0f:ae:d0:44:23:b8:
6b:a3:44:73:0b:3a:86:58:f6:0c:d4:13:85:66:7b:
70:ce:c4:90:a6:29:38:10:62:88:ec:7b:51:35:b7:
10:64:d5:39:9a:45:44:d3:0d:9a:cd:79:09:8b:10:
f4:73:b9:f9:5a:8b:ea:7d:5b:3a:38:ce:ed:19:1c:
13:0c:50:f1:be:f4:43:55:88:28:a0:9a:f4:fa:12:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1C:B0:22:D7:96:7B:54:BE:C9:39:41:0A:F3:DA:95:F4:06:02:01
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:fa:34:a7:71:d5:32:68:e1:0b:d7:4e:09:cd:dd:2d:ef:
79:1d:8e:28:60:41:e7:f7:bf:55:de:50:eb:c1:f7:0d:a2:d8:
63:89:1a:7a:db:c1:69:f6:b9:1d:8e:4c:21:05:f7:dd:91:6a:
c5:1a:b8:84:a4:5d:f5:3e:f0:1f:ff:aa:f7:5f:17:93:3f:b2:
27:dc:cc:fe:2b:7a:30:63:34:98:e3:c3:da:b2:72:d3:42:96:
b5:0d:1c:32:82:89:74:55:84:2c:e6:d4:1e:42:c6:94:62:5b:
3d:25:b2:ab:c8:5b:36:35:15:79:da:a8:61:65:48:30:27:67:
c1:f7:6a:6d:18:1b:5d:25:31:41:b9:48:a8:b8:37:9f:61:a2:
51:30:1d:1b:62:3b:c5:42:dd:88:9d:4b:7c:c0:22:c1:5e:87:
a9:9e:93:57:0b:9f:2a:a1:24:28:62:c7:cb:13:82:54:53:51:
ce:0f:e0:6d:60:8b:f4:0f:62:7d:bd:57:18:03:12:5a:bf:0b:
b3:66:13:a9:75:83:91:72:ae:9e:78:a1:8c:19:be:81:bc:d0:
6c:49:3e:72:df:e0:c7:5d:f2:5b:33:0a:ea:1c:5a:46:e6:1b:
4c:32:a5:4c:08:15:14:23:85:bf:51:18:f4:dd:50:26:e3:02:
5c:06:18:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:28 2026 by rpki-client