Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
File: 2y7CKma1skmGOV_u1_tbkOKMm-Q.mft (raw, json)
Hash identifier: 8JoMaZoULHUjiZpucenWQLLfxzIAvCJKQcp1w3ZF/fU=
Subject key identifier: 99:0D:4B:A0:1B:27:61:62:A1:1D:C0:0C:CD:81:45:43:CB:ED:03:27
Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Certificate serial: 019FA907B71B31F9A1E0C4A1A0D7415F8975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
Manifest number: 0202
Signing time: Tue 28 Jul 2026 14:01:22 +0000
Manifest this update: Tue 28 Jul 2026 14:01:22 +0000
Manifest next update: Wed 29 Jul 2026 14:01:22 +0000
Files and hashes: 1: 2y7CKma1skmGOV_u1_tbkOKMm-Q.crl (hash: eqgyO8o1Czmb5R+dBr/iYP8dbtD3m/IYT7MEJ4p+x8w=)
2: 5OcccwQslADzpJ8HL6Y7KqGcVVU.roa (hash: irYRIWXEtiw19tZuoevHJTgjYRjpfkAs2mq69Ns5wSo=)
3: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (hash: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0=)
4: Wc5ljSD5VjkVZd4v1ISBd1k6dNQ.roa (hash: jyDuHZmz8mqWG2X7hHBWucB2QcY/4S07R3yhK3xzlzg=)
5: t-YR2UdrGJYsX4ZnfkqO15T5g9I.roa (hash: 21jzaahsgBvVI66l1ZAF+dhUPihnDJv9H/MfKJOkhNs=)
6: uOrZo6gF2WVlF4nc6xlIIShI6cM.roa (hash: 4dFwviDJ3qVWkRoE0eY86El9WripywfdZeQ8NNS5Yl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:b7:1b:31:f9:a1:e0:c4:a1:a0:d7:41:5f:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4
Validity
Not Before: Jul 28 14:01:22 2026 GMT
Not After : Jul 29 14:01:22 2026 GMT
Subject: CN=990d4ba01b276162a11dc00ccd814543cbed0327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:01:1d:52:d3:ec:ce:fe:01:3b:e2:06:02:
ab:02:5b:6d:5c:22:66:ed:99:da:cb:7c:e2:a8:5a:
99:59:50:4b:65:b0:6e:fd:c9:19:bd:65:d3:0d:03:
25:d3:d3:78:36:c6:a1:21:c2:29:89:14:79:73:23:
59:0a:21:bd:08:ce:55:0f:1f:27:2d:d8:1b:92:ef:
05:43:f9:b9:49:02:93:b9:98:29:a5:33:f8:ac:3c:
d5:fe:ce:61:54:1a:63:12:21:97:59:f0:e5:c4:d1:
91:00:14:9d:5d:f8:b3:e1:0b:92:b0:25:d2:c1:bc:
00:ff:b7:de:5d:42:92:51:e5:63:01:be:ff:d3:69:
70:06:a8:e8:e0:88:20:9c:38:7b:96:ff:cb:d8:86:
15:77:49:46:42:3f:7f:a0:32:a7:ff:04:e2:62:11:
7f:21:dd:69:68:5a:63:b0:81:1c:cc:f8:3f:4f:a5:
27:98:29:3e:5f:9b:0f:14:da:83:47:a2:19:12:3b:
e2:50:90:c4:82:e9:4c:c3:94:16:29:48:09:0f:a8:
3e:2c:dd:b0:63:82:b7:e9:21:07:49:89:bc:c3:8a:
78:b5:be:ac:b5:f8:03:27:cb:1e:eb:f6:67:f1:7d:
26:81:d7:e1:84:cd:89:4b:cb:dd:04:28:2f:dc:3d:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:4B:A0:1B:27:61:62:A1:1D:C0:0C:CD:81:45:43:CB:ED:03:27
X509v3 Authority Key Identifier:
keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6c:93:63:42:b6:5b:62:37:0c:b8:36:47:03:4c:f6:e4:f3:
51:68:40:69:78:f3:d3:3d:5d:6f:ef:f1:a4:36:a6:8c:4a:11:
4d:29:48:c8:00:8b:64:09:19:ad:ed:3d:27:87:22:1c:a2:ad:
f2:d1:cb:4d:ec:4b:1c:7b:44:90:93:2c:7d:13:1a:c3:c7:32:
e3:31:c0:44:0d:ed:14:09:4c:f8:c3:f0:69:30:c3:83:3e:ef:
60:00:a3:90:92:47:0f:e1:0b:14:c2:dc:27:bb:34:40:77:fb:
1c:6d:63:09:3d:64:9a:c0:79:3e:59:93:3b:08:72:43:e1:fb:
03:d2:9b:da:53:33:e0:6c:e9:4a:76:17:a4:42:43:ad:08:21:
f1:dd:65:f8:84:43:5b:0f:2a:28:6a:8a:b9:e8:d9:e3:02:9c:
54:e6:22:08:d5:bd:0e:54:8b:8b:2a:5c:c4:a3:b3:35:4a:d3:
0a:67:2b:2f:ba:8e:50:27:24:8b:86:60:74:5f:dd:3d:70:c2:
f0:8e:70:60:40:17:c4:59:83:07:71:10:6b:0c:36:82:05:44:
8d:e7:ab:36:4a:d4:47:98:ec:8e:b7:5c:b0:37:f4:75:79:60:
36:d4:a2:1a:c2:86:91:b7:a1:89:d1:0a:ea:b1:f8:1d:db:52:
91:c4:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:06 2026 by rpki-client