Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: 1NEPsBoCI0VMbFfRTIglbxVbtYmQfcDULiSRdltJSsg=
Subject key identifier: E5:B2:99:FD:39:E7:25:2D:3E:49:07:A1:28:AD:C8:57:8C:E7:1D:C7
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019FAAF55DD61CD6E22FFF66B5926C309268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 16F5
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: ncA53+K6jicExhgt0uUunV/5aEy2V8xdeZgDqZ6K+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5d:d6:1c:d6:e2:2f:ff:66:b5:92:6c:30:92:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=e5b299fd39e7252d3e4907a128adc8578ce71dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:67:e3:71:a8:ea:6e:40:11:c0:ce:77:f8:
e2:2e:73:86:b0:2e:ae:0a:e9:29:9a:3c:a1:6e:06:
61:67:03:21:81:01:ed:51:4d:b6:a8:d5:67:66:98:
76:02:39:ba:4b:1d:f3:8f:28:c3:6f:9a:77:9a:1c:
27:c1:2d:3c:d9:f3:13:b7:c0:2e:de:92:31:65:34:
df:78:ff:32:a8:c7:07:f0:02:a9:4d:a0:73:cf:d2:
5e:13:d2:4d:92:10:07:e4:b1:8b:54:7e:66:33:1d:
97:f7:2c:ef:07:bf:d9:19:f5:54:95:7c:39:cd:bb:
ba:10:82:0a:f5:52:ba:cc:ce:26:00:c9:52:82:c4:
9a:2b:53:23:4f:b9:c9:02:a4:47:8e:cc:0a:05:a5:
05:e8:37:4a:e8:d5:aa:dc:7b:c5:c2:e5:8f:3e:1c:
9e:5c:a4:a0:bc:46:8a:e0:7c:31:bb:0a:02:ef:fd:
af:c0:e9:05:6e:f4:7d:33:7e:a6:25:63:b7:83:e9:
cd:99:a4:eb:25:de:87:27:f8:55:38:59:8c:5f:a2:
20:27:07:2d:0e:7d:a4:08:7a:9e:8d:f6:39:0d:0b:
88:41:77:97:7b:02:45:73:14:d0:70:94:a1:d0:4b:
42:64:8d:d7:a4:46:b9:23:83:ce:e4:85:e4:63:55:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:99:FD:39:E7:25:2D:3E:49:07:A1:28:AD:C8:57:8C:E7:1D:C7
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:78:ab:c7:5e:f1:dc:5c:e3:55:50:79:27:fa:d5:2f:bd:c7:
56:0f:1f:ea:a1:5a:e2:c1:84:69:66:5d:1d:d7:60:c0:98:83:
98:3f:5b:2b:91:d3:8e:15:28:62:50:58:d4:3e:92:05:25:6a:
5a:f9:61:2a:32:9d:38:e7:74:31:d3:04:b2:7c:04:ad:32:26:
ca:d8:a6:81:db:e9:37:37:91:f8:2f:d5:67:fa:02:72:f1:21:
fa:f2:9e:fb:f3:cd:36:ab:15:2f:4b:a1:1e:99:19:57:45:fe:
54:b8:1a:5a:6e:3a:33:85:9e:7c:fd:b3:d3:07:ec:1f:5a:3b:
55:ae:74:63:1d:75:85:28:08:7c:6f:67:98:95:f9:7d:be:8a:
a3:e7:ec:01:be:6f:05:d8:e5:cb:92:78:d7:ac:88:b7:db:14:
62:3e:5b:48:31:9c:3d:9a:14:92:0f:87:3f:18:14:5c:53:0d:
cb:e4:0d:92:27:ab:0d:5a:5b:26:b4:39:fc:03:e4:4d:0a:8c:
38:0a:e3:6d:c4:31:c4:02:7b:fb:97:21:c4:56:6c:4c:57:29:
31:4c:14:d1:5a:af:e8:15:62:4f:45:07:ec:e2:e3:06:e6:dc:
d2:38:80:39:bf:48:81:69:69:09:be:bc:96:23:99:9d:08:65:
ea:ec:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:18 2026 by rpki-client