Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: /TOD9IeCJcFMOCE7yJHXXZ196Xh7iVgagrkaVNuzEhs=
Subject key identifier: EB:34:47:5B:66:F4:6A:E9:E4:55:5E:C1:F2:9D:0A:80:90:49:1B:6A
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019D99D0E152C5796DCD11067473140B302F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 15E3
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: HEEq++BmkPCy+NdvNJdiheLfKgXGaaHPVdAfmCR55Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e1:52:c5:79:6d:cd:11:06:74:73:14:0b:30:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=eb34475b66f46ae9e4555ec1f29d0a8090491b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:d6:9d:50:eb:2b:c7:3f:13:40:96:64:60:
19:fa:b8:d5:29:2e:c1:ae:fb:c9:c2:75:63:ee:d6:
87:7b:21:e1:3a:71:20:09:b7:1e:e4:eb:da:9c:57:
db:4f:38:fe:b7:ee:f4:35:41:79:40:3a:b6:88:d4:
3d:cd:f7:fe:d6:81:9f:22:1c:89:57:8f:90:1b:7b:
ff:18:10:6a:38:22:82:6c:5a:7d:24:3d:b9:40:c8:
84:15:70:13:fd:40:3f:82:e2:0b:45:fe:39:5d:a1:
5c:48:eb:df:bb:d0:ce:06:26:a2:21:a8:54:1f:91:
57:51:7e:cb:61:00:88:14:42:5b:5e:70:21:6e:c0:
79:4a:3c:28:c9:21:0c:b2:4b:5a:01:07:b4:e1:60:
50:4b:78:e6:20:78:ec:37:b6:5c:42:2f:1c:d5:4f:
fc:e2:46:7f:97:43:24:31:8d:8d:22:cc:70:23:2e:
b7:ad:f0:e4:58:70:74:10:b5:3a:33:85:36:4b:7f:
8d:29:b9:e8:92:ea:ee:20:df:d9:46:5d:5e:38:20:
0a:49:cc:70:5e:33:07:59:6f:fc:09:8f:36:c8:16:
38:d8:8b:28:ff:76:71:a5:43:b4:32:af:45:ad:06:
02:57:21:5b:53:29:4c:7b:b5:ee:77:6a:48:cd:09:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:34:47:5B:66:F4:6A:E9:E4:55:5E:C1:F2:9D:0A:80:90:49:1B:6A
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7b:af:bc:25:dd:f9:96:fd:fb:d7:4c:1d:7b:0b:81:6a:ef:
ed:10:e7:34:3f:df:8a:e8:f5:52:e2:ff:67:4d:99:5f:be:c9:
1b:9f:a3:1d:2d:59:89:00:27:13:28:69:60:88:41:fa:57:30:
e1:db:32:95:05:23:38:91:07:44:e2:84:ae:eb:df:45:c1:0d:
5c:39:31:48:44:e2:3b:70:27:d0:ad:db:78:1b:17:93:7c:dc:
7b:17:78:7d:d7:72:eb:01:a8:b8:9d:0e:cc:d0:04:72:0d:e0:
d1:7c:3f:df:85:fe:22:0f:9e:9b:74:a7:fd:dd:6e:b4:54:3b:
0a:d8:56:ed:67:ea:91:3d:a1:34:04:84:23:90:49:a1:43:5f:
b0:45:d8:69:93:c5:7f:fa:74:73:cf:22:71:0a:f3:9d:85:ff:
48:72:46:b0:83:89:9e:52:3f:41:06:d0:60:27:75:bd:01:b8:
01:6b:96:57:72:fa:08:b9:e5:dc:1e:2f:d1:a9:fd:29:03:84:
6f:41:90:bd:d7:30:35:d9:aa:bc:16:22:d3:e7:03:f5:13:2f:
c4:47:09:81:cc:0c:6b:93:74:e2:e3:ea:fb:eb:c8:54:36:0a:
bf:2c:3e:70:1e:f6:ff:c0:b8:fe:ec:ff:50:19:8a:da:d0:75:
d0:e4:ea:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OFSxXltzREGdHMUCzAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGZmYTA0NWIzNWIxNmRjOTk0MTllM2UwZTZlMTZlNmVk
YjQ3ZTkwHhcNMjYwNDE3MDUwMTM2WhcNMjYwNDE4MDUwMTM2WjAzMTEwLwYDVQQD
EyhlYjM0NDc1YjY2ZjQ2YWU5ZTQ1NTVlYzFmMjlkMGE4MDkwNDkxYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13XWnVDrK8c/E0CWZGAZ+rjVKS7B
rvvJwnVj7taHeyHhOnEgCbce5OvanFfbTzj+t+70NUF5QDq2iNQ9zff+1oGfIhyJ
V4+QG3v/GBBqOCKCbFp9JD25QMiEFXAT/UA/guILRf45XaFcSOvfu9DOBiaiIahU
H5FXUX7LYQCIFEJbXnAhbsB5SjwoySEMsktaAQe04WBQS3jmIHjsN7ZcQi8c1U/8
4kZ/l0MkMY2NIsxwIy63rfDkWHB0ELU6M4U2S3+NKbnokuruIN/ZRl1eOCAKScxw
XjMHWW/8CY82yBY42Iso/3ZxpUO0Mq9FrQYCVyFbUylMe7Xud2pIzQkiDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs0R1tm9Grp5FVewfKdCoCQSRtqMB8GA1UdIwQY
MBaAFNmP+gRbNbFtyZQZ4+Dm4W5u20fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAt
ZWUyNWQyYzViNDEwLzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84MTQxMTUtMDk5My00YTFmLWFlMTAtZWUyNWQyYzViNDEw
LzEvMllfNkJGczFzVzNKbEJuajRPYmhibTdiUi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXuvvCXd
+Zb9+9dMHXsLgWrv7RDnND/fiuj1UuL/Z02ZX77JG5+jHS1ZiQAnEyhpYIhB+lcw
4dsylQUjOJEHROKEruvfRcENXDkxSETiO3An0K3beBsXk3zcexd4fddy6wGouJ0O
zNAEcg3g0Xw/34X+Ig+em3Sn/d1utFQ7CthW7WfqkT2hNASEI5BJoUNfsEXYaZPF
f/p0c88icQrznYX/SHJGsIOJnlI/QQbQYCd1vQG4AWuWV3L6CLnl3B4v0an9KQOE
b0GQvdcwNdmqvBYi0+cD9RMvxEcJgcwMa5N04uPq++vIVDYKvyw+cB72/8C4/uz/
UBmK2tB10OTqBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:24 2026 by rpki-client