Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: d2XIcmeGscJi/qo5anV1k0X+dHjG+gueMSgcGIUtspE=
Subject key identifier: 4B:4C:30:BD:36:26:77:4B:61:7C:77:7A:F9:E0:90:CD:68:81:7E:D6
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019EBF5B429765A806F4DA727774C27C6D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 167B
Signing time: Sat 13 Jun 2026 05:01:29 +0000
Manifest this update: Sat 13 Jun 2026 05:01:29 +0000
Manifest next update: Sun 14 Jun 2026 05:01:29 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: FfcniR53NQ5ZUM28Sgva5BPAyqkiBzP0ITeWruRE9Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:42:97:65:a8:06:f4:da:72:77:74:c2:7c:6d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jun 13 05:01:29 2026 GMT
Not After : Jun 14 05:01:29 2026 GMT
Subject: CN=4b4c30bd3626774b617c777af9e090cd68817ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:01:c0:c2:be:b5:26:89:3a:f0:17:50:1e:
af:42:36:dd:2c:d8:89:fa:9b:22:4e:08:a8:00:79:
e8:d6:1d:f4:81:1f:7a:4a:9b:28:01:74:44:58:99:
36:cc:6b:b5:64:80:7d:0f:c5:81:97:e6:75:a6:01:
fc:5a:64:6e:69:06:4f:1e:79:71:f1:a9:07:7b:5b:
58:be:58:cf:be:4f:75:d2:ea:1c:9a:99:35:eb:04:
3f:46:99:d1:43:63:a1:a6:97:64:7a:07:01:df:77:
14:c9:c4:5a:e7:26:e1:51:e6:dc:0e:8c:8e:38:a0:
9d:cf:0e:75:94:b5:a5:04:aa:53:eb:a0:0d:2d:9b:
f1:e7:81:de:62:be:02:47:34:d6:a8:69:5d:6e:9b:
ac:a9:d1:d5:d8:42:b2:be:4c:98:95:01:97:8c:a3:
ee:f6:43:6d:7b:8e:34:74:79:b3:a8:29:75:f6:4a:
f1:2c:45:48:43:49:92:4b:9c:31:5a:19:6e:db:06:
66:39:0d:af:67:03:ec:20:35:4e:b5:78:b0:29:8c:
cf:ca:f9:98:81:7f:3d:1c:49:6d:e4:b4:dd:47:23:
a5:fc:72:92:05:97:7e:2c:4c:4f:e4:7d:d2:2a:c5:
29:ed:9f:de:92:31:f6:31:bb:0c:79:03:94:9e:f8:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:30:BD:36:26:77:4B:61:7C:77:7A:F9:E0:90:CD:68:81:7E:D6
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:7d:4f:ef:d7:e1:ce:6d:b1:26:31:37:7e:77:06:df:a9:
08:94:8a:12:15:60:40:0c:ec:13:ff:bf:fa:88:96:a1:f4:52:
b9:c9:93:cc:77:14:28:ff:04:ef:0e:04:df:4d:70:4e:a7:51:
86:b9:db:a8:ae:e5:d1:b9:fc:a8:ea:ea:21:bb:74:06:29:d2:
4c:b6:c1:6a:cc:ca:6a:b7:74:4f:92:e2:86:b6:7a:5a:db:f3:
9d:42:40:bc:4b:af:07:38:a7:3b:98:9e:00:fc:99:cb:18:ce:
12:a8:62:a5:d5:57:22:0a:4a:27:73:1d:d8:26:1d:c3:a4:b0:
2d:e0:61:ae:d1:52:ef:9f:64:62:c9:51:7f:d3:f5:aa:e6:5e:
a0:d9:87:ec:09:da:ad:3f:db:49:da:6a:e7:74:e3:91:34:f3:
a7:01:e0:70:88:90:ea:b3:93:7e:5e:1b:8a:92:22:e1:89:fe:
1a:d8:24:3d:f1:32:f5:5d:22:82:25:d7:44:d8:d5:9d:1d:69:
2b:5d:3d:3e:ac:dd:04:36:73:b7:0a:83:3d:13:a1:45:df:1f:
cf:3e:ca:55:14:59:13:bb:1b:0f:8f:40:b7:53:e9:52:f5:36:
c4:d3:c3:40:9a:bf:52:24:ca:45:7a:3f:97:d7:9b:c5:48:1f:
e7:93:43:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/W0KXZagG9Npyd3TCfG1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjYwNjEzMDUwMTI5WhcNMjYwNjE0MDUwMTI5WjAzMTEwLwYDVQQD
Eyg0YjRjMzBiZDM2MjY3NzRiNjE3Yzc3N2FmOWUwOTBjZDY4ODE3ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnwBwMK+tSaJOvAXUB6vQjbdLNiJ
+psiTgioAHno1h30gR96SpsoAXREWJk2zGu1ZIB9D8WBl+Z1pgH8WmRuaQZPHnlx
8akHe1tYvljPvk910uocmpk16wQ/RpnRQ2OhppdkegcB33cUycRa5ybhUebcDoyO
OKCdzw51lLWlBKpT66ANLZvx54HeYr4CRzTWqGldbpusqdHV2EKyvkyYlQGXjKPu
9kNte440dHmzqCl19krxLEVIQ0mSS5wxWhlu2wZmOQ2vZwPsIDVOtXiwKYzPyvmY
gX89HElt5LTdRyOl/HKSBZd+LExP5H3SKsUp7Z/ekjH2MbsMeQOUnvjeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtMML02JndLYXx3evngkM1ogX7WMB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8x9T+/X
4c5tsSYxN353Bt+pCJSKEhVgQAzsE/+/+oiWofRSucmTzHcUKP8E7w4E301wTqdR
hrnbqK7l0bn8qOrqIbt0BinSTLbBaszKard0T5LihrZ6WtvznUJAvEuvBzinO5ie
APyZyxjOEqhipdVXIgpKJ3Md2CYdw6SwLeBhrtFS759kYslRf9P1quZeoNmH7Ana
rT/bSdpq53TjkTTzpwHgcIiQ6rOTfl4bipIi4Yn+GtgkPfEy9V0igiXXRNjVnR1p
K109PqzdBDZztwqDPROhRd8fzz7KVRRZE7sbD49At1PpUvU2xNPDQJq/UiTKRXo/
l9ebxUgf55NDgg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:37 2026 by rpki-client