Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier: HwYeR0Tq1N/TSzgROp0yy1TQTTqyejUL5oaBuG7k/zE=
Subject key identifier: 7A:54:EE:8B:D5:96:95:AA:CD:38:72:08:39:6B:CC:23:60:11:0D:26
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer: /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial: 019CAC46FFBE8ED819F3E6117BEA34C49833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number: 1568
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: H/bRNEAx9GgCsqFkMmSFjdp1Ks0RFGFtKvfHEOpTfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ff:be:8e:d8:19:f3:e6:11:7b:ea:34:c4:98:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=7a54ee8bd59695aacd387208396bcc2360110d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:b0:7a:e0:b5:f3:91:84:c6:76:17:f2:99:
1d:67:21:3b:ac:a3:b5:0a:4c:cc:07:9f:57:36:fd:
94:54:5c:89:b2:6b:06:de:df:c0:e2:2f:86:fd:89:
a5:4e:df:32:94:59:73:4c:95:0a:62:e5:77:3c:22:
fd:50:41:bd:98:30:76:55:eb:98:ac:67:5c:20:38:
df:f4:cd:35:28:a0:f0:7c:fa:72:d2:ac:1d:52:d1:
33:81:be:c4:39:ef:5b:b6:30:56:4d:94:6c:db:b5:
f0:9a:b9:a9:b8:2c:d0:f5:fa:83:2a:05:24:5c:3b:
56:c3:17:d4:06:a7:13:3c:e5:27:ed:d6:a4:0f:5d:
2e:16:52:61:d2:fa:ed:2c:73:ad:09:e1:03:a3:4e:
7d:af:5f:b1:0d:40:ff:bf:56:71:a5:4f:07:c2:61:
1a:21:c6:71:b5:3c:9c:80:51:72:d3:2a:79:50:5c:
34:d8:39:e0:12:82:93:53:fe:31:df:84:fc:75:42:
93:79:a0:20:11:80:ff:5a:30:12:f6:99:f7:35:36:
e9:f1:44:b2:54:6d:e6:54:60:f7:c0:1f:ca:cf:e2:
91:b6:b0:1b:95:95:d0:57:96:ae:fb:25:da:1b:8f:
47:a4:7d:2e:73:34:0c:28:82:2d:0e:42:1e:1e:49:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:54:EE:8B:D5:96:95:AA:CD:38:72:08:39:6B:CC:23:60:11:0D:26
X509v3 Authority Key Identifier:
keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b8:fe:c1:8b:50:71:1f:90:4a:a3:c8:c3:a8:d4:bd:c9:23:
2f:5c:79:dc:86:fd:ea:65:7d:7c:fb:32:3b:11:0d:b8:61:f6:
23:e6:69:f0:f9:93:42:c5:da:73:8b:f2:86:18:ba:e1:03:64:
a3:0d:fa:c3:89:82:1b:49:85:73:1f:94:22:cd:c9:6d:43:f7:
c1:a4:27:03:74:59:17:dc:32:da:91:b7:59:b1:f9:0a:de:78:
43:e4:59:b7:14:f1:48:e3:b4:fe:ef:f4:24:8f:1b:e6:2a:07:
92:7a:0a:f2:3e:ab:fa:e7:36:4a:c8:16:e1:cd:12:e8:3a:2b:
60:18:6b:c1:d0:c8:b8:00:b8:df:0d:e0:82:7f:b7:04:7a:69:
29:c7:11:3b:f6:34:93:f6:cf:cc:59:44:03:d6:c8:7d:5c:6a:
1a:6b:0b:20:89:29:86:d0:06:11:a3:01:63:f5:22:d9:9b:30:
05:af:42:4f:40:e9:3c:cf:ef:14:9b:9a:44:6b:55:78:a6:e5:
c3:ad:3c:a1:be:2f:d6:50:b7:3c:ff:f5:14:32:37:df:7d:ee:
10:f4:0a:9f:5e:b9:29:73:c1:ee:e3:80:a5:31:a0:e6:16:72:
53:76:24:34:e1:58:f8:0d:8c:0b:f7:88:b5:3d:57:07:59:e9:
af:69:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:43 2026 by rpki-client