Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File: 2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier: RNYtGCiJWKWsvbc0mXibeC0svJA72qGnBJ2pLXPYGPM=
Subject key identifier: EB:72:69:7B:BE:6C:98:19:ED:91:60:7D:9F:19:6E:84:F0:0B:7C:52
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial: 01A0DC172BCEA08659E953FB4612E3CBEA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number: 02A1
Signing time: Sat 26 Sep 2026 05:01:41 +0000
Manifest this update: Sat 26 Sep 2026 05:01:41 +0000
Manifest next update: Sun 27 Sep 2026 05:01:41 +0000
Files and hashes: 1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: kp7+XDx6gWyDIVR/JwbydqS61DIiTvNFsvYIvVz0YI4=)
2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:2b:ce:a0:86:59:e9:53:fb:46:12:e3:cb:ea:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Validity
Not Before: Sep 26 05:01:41 2026 GMT
Not After : Sep 27 05:01:41 2026 GMT
Subject: CN=eb72697bbe6c9819ed91607d9f196e84f00b7c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:ed:49:4f:5c:bd:ff:21:f1:ea:a8:28:aa:
3a:fb:bb:54:88:21:b2:ae:43:5d:3c:45:69:d3:02:
8e:e8:ab:49:b1:09:44:22:25:6d:79:66:7d:b0:13:
78:64:4e:98:0a:07:54:07:c4:8d:81:26:6c:1c:bb:
51:54:23:da:2b:26:40:3c:94:93:18:96:ac:e6:57:
c1:ba:90:53:2a:82:37:64:2c:75:0a:35:36:d3:fb:
ac:4f:61:27:2e:d6:0e:e7:17:e7:a4:a4:5c:e0:1f:
55:59:a6:1d:30:a0:0e:c6:4f:67:61:7e:30:13:ca:
8f:de:81:da:47:8a:b7:50:26:7c:96:51:54:94:2b:
0a:c8:0a:2a:72:d7:e3:bb:9c:d6:cd:84:3a:a3:9a:
71:c3:ea:d3:d7:bb:df:b4:82:9a:1b:77:ad:7d:98:
f6:ae:2d:db:38:5a:fe:50:49:85:dd:67:d4:1c:be:
e7:89:9f:9f:bc:99:f9:a5:5e:70:48:eb:d1:46:56:
da:3a:3b:11:d4:bd:25:96:fc:9d:13:55:6c:37:6d:
5e:e3:3b:cd:a5:04:d6:c1:91:fb:84:73:da:68:69:
e7:ee:20:d2:a0:2c:8f:9c:1a:0d:d5:71:94:71:b1:
4c:98:fa:56:a1:e4:ca:3f:69:e9:d6:bc:71:6b:99:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:69:7B:BE:6C:98:19:ED:91:60:7D:9F:19:6E:84:F0:0B:7C:52
X509v3 Authority Key Identifier:
keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3e:41:9d:00:7c:2c:32:40:d6:aa:d5:be:ee:b8:c1:1e:b2:
a1:ae:ff:83:ff:b6:31:bf:1a:64:fd:72:a7:b2:6d:a1:ab:35:
03:6f:4f:92:e7:a0:14:e3:37:63:96:3d:cc:58:be:9f:64:fa:
2b:e7:e4:9d:eb:2e:b9:c7:b3:75:c2:18:23:8a:51:49:b5:bf:
0c:02:28:fe:af:c9:be:75:26:97:cf:16:ea:ae:39:1b:aa:54:
57:dd:78:ac:4b:45:97:1c:95:04:7e:c4:05:75:68:bc:45:ba:
8c:0c:e7:31:de:56:ba:fd:2f:52:1b:ec:eb:20:48:3c:be:c7:
89:d1:b0:72:67:19:ed:d8:8e:1c:42:4f:20:c0:12:83:c3:5a:
73:30:77:14:0c:14:c2:93:3d:be:f8:3c:ab:a1:9e:12:89:42:
d5:ae:31:f0:ea:8a:26:09:a3:a1:96:23:55:82:43:8f:37:11:
b0:4e:33:dd:01:02:e8:e7:86:ff:56:08:0b:21:ea:03:f8:22:
d5:ae:57:49:15:71:7a:6d:a1:46:23:7b:e5:24:cf:2c:41:80:
ec:bf:2c:ee:5d:e4:55:a0:ba:00:bd:9f:8d:7f:ed:e7:42:8c:
f6:e4:32:f3:14:50:07:8d:99:5d:c3:7f:06:4e:8e:e0:55:c4:
60:b3:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:48:15 2026 by rpki-client