Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: TVnVr50yKY9OThdR2mmptmjNExcUxB9RSMG2qtCzgSk=
Subject key identifier: CC:B4:46:AE:BC:D2:37:9A:1F:1D:4C:3C:CF:EE:7F:D3:C5:61:98:CD
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019FA86209C9135766B75DB9D2F7AEA7C32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 12B6
Signing time: Tue 28 Jul 2026 11:00:24 +0000
Manifest this update: Tue 28 Jul 2026 11:00:24 +0000
Manifest next update: Wed 29 Jul 2026 11:00:24 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: Ae4taAoKMVuXa7ap98JYBRiJbQYLJkLExMD4WGO8R0k=)
2: fGMBgR4dRlgN7od53q3XJYWFyYQ.roa (hash: w9q5mkecYPBNy8Mimx20Bl4XPGkfo1gV/P3fG9sJ0A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:09:c9:13:57:66:b7:5d:b9:d2:f7:ae:a7:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jul 28 11:00:24 2026 GMT
Not After : Jul 29 11:00:24 2026 GMT
Subject: CN=ccb446aebcd2379a1f1d4c3ccfee7fd3c56198cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:21:ab:5f:19:34:7c:12:83:54:d4:5e:58:
a5:1c:d6:65:aa:7f:12:eb:b8:cc:16:57:a3:65:85:
08:ac:a8:3b:6f:9c:b3:4d:a7:76:e6:bc:0a:9e:5e:
15:a8:e3:68:37:6d:c2:1b:e0:eb:f0:1a:c7:fa:f3:
3b:44:02:c7:fe:be:4c:9e:ec:a8:f3:19:8f:28:51:
4b:f4:84:97:e9:0b:a5:8c:99:90:9f:69:66:98:f7:
8a:b0:d8:9d:42:b8:fe:36:59:6a:83:8a:a6:33:42:
4a:80:cb:6f:5a:b2:2b:34:ad:c4:68:4a:b8:02:d3:
81:bf:44:e9:1a:99:e4:a3:ee:f5:3d:de:2a:64:04:
b6:f0:4f:e5:33:5a:fc:56:04:59:57:54:5d:e1:5f:
f8:41:42:bc:67:35:c9:ae:b3:f8:7f:32:a4:a3:4e:
87:a1:79:2c:83:33:b0:f9:00:a1:dd:0f:37:11:9d:
c8:dd:74:18:c4:f4:55:1c:55:d0:2f:b0:8c:e0:6d:
3a:76:74:ad:03:cd:ae:bc:b4:61:ff:27:61:49:f9:
e8:40:2d:19:c0:f8:7c:81:46:59:c5:a4:09:35:7e:
57:20:03:bd:95:9a:82:6f:0f:58:6d:4f:83:a0:d8:
5a:4a:9d:c5:3b:7c:80:27:fa:7a:07:a9:a0:bc:5f:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B4:46:AE:BC:D2:37:9A:1F:1D:4C:3C:CF:EE:7F:D3:C5:61:98:CD
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ce:f3:23:7f:76:a5:00:c1:a4:09:ce:75:ce:ab:fe:ad:dd:
e2:4d:8c:c7:ff:6e:31:1f:38:bf:be:1b:d4:fb:be:35:11:3c:
0a:21:ff:e0:7a:45:49:b4:ac:5a:7d:26:4b:97:8c:91:74:56:
e9:cd:b3:db:64:a7:f0:61:33:e4:df:96:9a:3e:dd:62:10:22:
b3:5a:c7:38:1f:78:e6:31:6a:b2:c3:ab:99:07:35:98:f0:44:
b3:ee:14:a5:83:db:66:4b:02:9f:46:22:81:71:35:8f:cf:56:
ec:5d:e2:a7:9e:59:6d:7d:ca:82:03:df:84:3d:3e:ed:cd:d7:
55:08:7b:1c:ca:03:03:78:b9:54:7f:db:43:03:d8:f2:77:01:
9a:2f:68:b3:d6:b0:55:7a:16:4c:16:2f:ef:bf:38:52:42:c5:
42:c5:40:ec:cc:d6:91:64:85:5b:3e:99:8f:67:81:45:6b:97:
f4:e3:79:ec:d5:72:e7:67:02:72:06:2e:d8:d7:4d:6f:e7:54:
5d:97:59:8c:45:00:7d:40:41:1b:54:7d:4a:7c:d9:42:40:ff:
5e:49:23:f9:34:0c:2b:98:b9:e2:cb:48:3a:cd:b8:b2:84:fa:
9a:be:a2:bd:1f:8b:1a:38:d0:2b:6f:f7:06:dc:d3:60:b7:ae:
85:4f:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:07 2026 by rpki-client