Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
File: 2yMD6WgDeTw8SM2lIHpB505Qy3w.mft (raw, json)
Hash identifier: E4juwkttSBt6h9+ZPwFBwbQSWDPYw6s7FvBRlo8AnG0=
Subject key identifier: A0:34:B4:75:3C:3B:CE:B6:69:32:9A:54:DA:D4:48:A6:63:45:DE:05
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019EBF919B9136DCF90B9DA547263DCE1E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
Manifest number: 01C3
Signing time: Sat 13 Jun 2026 06:00:51 +0000
Manifest this update: Sat 13 Jun 2026 06:00:51 +0000
Manifest next update: Sun 14 Jun 2026 06:00:51 +0000
Files and hashes: 1: 2yMD6WgDeTw8SM2lIHpB505Qy3w.crl (hash: B3TjN0j1ZvdiTwxZhkYdcTGDUZQFB8UL5kVMLGZgfTk=)
2: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (hash: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=)
3: tWwcWIpfF2Sob3tTCthPUMEmXKM.asa (hash: eqrztr28wK8mN68dhDydVVjwxooCmv9jYQIoq2fm2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:9b:91:36:dc:f9:0b:9d:a5:47:26:3d:ce:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Jun 13 06:00:51 2026 GMT
Not After : Jun 14 06:00:51 2026 GMT
Subject: CN=a034b4753c3bceb669329a54dad448a66345de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:4d:ec:91:9a:83:ae:f3:a3:54:f2:6e:d4:
94:ce:9b:2c:c5:98:49:0c:9a:02:2c:75:e1:19:73:
b5:e5:c3:71:70:a6:3d:e8:ca:28:0a:10:89:b3:4a:
1b:41:ec:22:7b:a0:11:92:ad:19:35:05:e9:8d:38:
5e:5b:03:e0:00:e3:8a:a3:cd:35:98:ac:fc:ed:9f:
29:d0:33:31:70:88:74:82:d3:f1:4f:25:ef:6b:59:
c1:ee:5b:7a:27:99:63:30:81:90:56:30:76:4b:54:
03:51:e7:4f:86:60:29:4f:87:28:a7:ed:6d:4e:ab:
6c:5a:02:76:a9:cb:fd:07:48:04:1e:12:6c:ab:0e:
f1:1f:67:bc:98:9b:cf:69:a2:a2:a0:06:c7:5e:42:
c4:94:b1:66:41:4c:4e:b9:f7:a4:6a:46:a4:36:7f:
02:22:3a:ca:02:a1:20:74:96:94:01:b4:0f:63:36:
f5:9e:f2:00:fa:ec:8d:82:0e:db:10:69:09:e9:ff:
7e:7d:d0:00:1a:64:fe:ef:6d:85:9c:32:31:1b:dc:
5d:a4:25:e6:72:c1:48:8a:54:42:21:10:aa:a2:70:
1f:a5:07:c6:dd:15:60:61:f2:e9:61:24:3a:fa:e0:
24:10:9f:b9:aa:d5:95:46:1e:1b:c4:ca:b9:e7:15:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:B4:75:3C:3B:CE:B6:69:32:9A:54:DA:D4:48:A6:63:45:DE:05
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6a:38:91:88:31:63:94:f9:18:ac:c9:a0:f3:e5:57:67:e8:
aa:7a:f9:49:e5:f9:a1:94:16:31:bf:f4:e9:eb:30:91:ce:e9:
83:3b:e9:7e:43:f6:cc:3d:68:17:56:38:11:cc:99:5e:ac:2f:
1e:b0:08:13:de:2b:81:28:a8:f8:e8:a2:34:73:2d:8c:9a:47:
c4:b4:89:94:e7:65:56:54:84:d6:eb:a8:b9:73:9f:6d:29:a6:
a6:6f:97:66:ee:42:dc:81:c3:fe:d6:cf:64:b4:89:4f:94:92:
01:dc:f6:35:18:8b:ab:cd:33:45:02:9c:df:32:d4:0d:2c:c7:
1c:f4:24:fd:4a:92:f1:21:69:87:93:b2:fe:e0:00:ea:2c:09:
c2:db:23:ff:e8:c1:53:0e:f2:82:b7:d4:d8:02:66:3c:e3:33:
fe:7b:4e:dd:35:55:3b:0c:61:88:6f:19:29:4f:60:57:bc:a1:
25:24:4e:e6:26:7d:99:68:72:a7:d7:41:82:66:ea:a1:e8:79:
b7:43:b4:fc:cf:10:42:f1:1c:01:5a:fd:21:b9:a1:d5:19:8e:
cd:4a:0b:8f:93:69:bb:5b:1a:49:13:cf:ad:74:56:4f:63:da:
51:3d:64:69:85:e3:4b:a7:8c:88:1c:f1:b7:dd:c3:04:14:9b:
2a:c4:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:00 2026 by rpki-client