Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: 4WKTbF3aZ6XizcUIDkoaimbB4zYpR+oM0bU29FWiI6o=
Subject key identifier: 5B:50:17:C6:A0:2C:C3:5D:8D:60:65:0A:2A:B0:DE:2D:E7:72:10:21
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01A0C7B34A9431292F9EF537589520477C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 06:00:11 +0000
Manifest this update: Tue 22 Sep 2026 06:00:11 +0000
Manifest next update: Wed 23 Sep 2026 06:00:11 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: OcSRhgPDHWvgP7y1D/SwyvalUdgZNkwPsCUvgnWp0A8=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:4a:94:31:29:2f:9e:f5:37:58:95:20:47:7c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Sep 22 06:00:11 2026 GMT
Not After : Sep 23 06:00:11 2026 GMT
Subject: CN=5b5017c6a02cc35d8d60650a2ab0de2de7721021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:65:e9:50:7c:81:db:5e:54:4d:0c:82:35:5f:
fb:46:2e:9a:de:8b:fd:d2:56:72:b3:25:a9:7e:19:
11:23:cf:4e:31:56:19:1a:bb:7a:c9:68:f8:fc:11:
3a:79:6c:a9:d6:87:19:e9:05:ac:72:06:3b:f0:c9:
80:0d:12:8f:67:70:a1:14:5a:e4:5c:27:72:a9:a2:
ab:9f:c4:71:65:cb:bd:37:4e:1f:f6:89:06:b6:ef:
ac:8f:d1:16:d4:18:12:4c:d8:ad:b0:cf:74:c1:11:
76:09:e0:7a:2f:74:f6:ee:64:a4:b5:3e:08:08:76:
06:fb:f9:94:e0:62:fb:cc:27:18:a0:37:8a:51:5e:
fc:4b:86:c2:53:aa:1a:c6:6b:d1:68:89:2d:64:9e:
19:46:61:84:43:2f:02:4c:b3:6e:02:0e:2d:90:7e:
ff:fa:91:4c:1f:5b:cc:74:b4:36:bb:ff:22:47:c3:
26:29:3e:77:9e:c4:cc:9a:5a:45:dd:46:1e:a4:fb:
11:72:4e:46:84:5a:94:6c:7f:41:32:d5:58:95:3c:
bf:f6:31:26:5e:78:9b:20:30:3c:42:52:61:bb:78:
ca:9c:a6:8e:01:01:71:41:c7:d9:6a:45:c1:1d:e0:
f2:d8:50:cf:d4:b9:18:ec:1f:1f:97:a6:3a:50:dc:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:17:C6:A0:2C:C3:5D:8D:60:65:0A:2A:B0:DE:2D:E7:72:10:21
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:9e:81:59:ae:69:47:48:49:f2:8a:67:e4:86:40:0e:c7:
a0:3d:5f:43:76:c2:b9:c8:46:c9:ea:9d:e3:3f:92:7a:29:c0:
17:f0:f4:09:ed:90:a0:56:62:bf:55:24:94:c3:34:0d:5d:24:
5d:a7:b1:35:63:6f:54:61:3b:ac:b4:10:bc:57:ec:1b:32:cc:
c3:37:7d:61:2e:b7:b2:f4:1c:e3:4b:52:aa:de:aa:94:25:f6:
50:16:9f:6a:7c:a2:ca:9c:51:a9:b2:12:24:2c:60:fc:95:d4:
d9:e3:e4:c3:18:68:11:f2:f9:d8:cf:e6:5a:af:0b:98:cd:b2:
04:3b:ba:76:a5:5b:84:eb:48:06:d2:dd:b5:59:b6:ec:49:4d:
e4:9b:b7:1b:bb:e6:42:49:a1:e7:c7:8b:72:14:53:07:4f:76:
18:a0:3b:85:21:54:a4:96:bb:35:cf:c8:b3:39:ee:77:a1:dc:
f0:bc:21:2b:e4:2d:b6:1b:42:93:fe:f1:88:86:3f:ef:a2:c7:
a8:cc:8e:b9:8c:92:21:94:df:14:63:e6:36:36:dc:c5:42:ae:
1a:21:20:92:5d:8d:a0:81:f3:19:03:3e:45:b4:9a:de:76:2c:
1e:90:f4:06:80:57:0a:3c:4d:cc:b3:7c:ab:0d:d0:05:9d:4e:
1e:56:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:07:50 2026 by rpki-client