Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: ZJ9fWXIci0ya+19Kf2Ro6Em7zUCU+tEIsyDQOnajYXo=
Subject key identifier: CD:7D:03:BC:03:F8:B0:A6:47:05:84:23:C0:33:68:5B:48:F8:5F:3F
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019D9AAC1FE7607A52591E88C4A164AFEB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: SNvn8IAyf/i2Vd8R2ZMNPtnXQz12QY1o7GSNzW9KF2c=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1f:e7:60:7a:52:59:1e:88:c4:a1:64:af:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=cd7d03bc03f8b0a647058423c033685b48f85f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:8a:68:08:7e:ef:2b:45:bd:91:b8:86:c4:
c9:76:89:e8:c8:c7:e0:70:77:a7:fe:ee:94:24:0b:
c8:2a:ec:1e:07:73:5b:5e:6c:86:b0:97:7f:6c:b7:
cf:7b:d3:5c:86:9f:02:b3:8a:e4:c4:39:1c:6e:9a:
e7:bb:e5:ba:ba:3a:06:8e:bc:62:04:ed:8d:4d:34:
2c:be:08:a4:01:c5:ee:16:91:c5:23:ec:d6:b3:ab:
f3:38:db:4e:cb:ba:99:c9:d6:0a:63:13:18:90:09:
e7:1f:0e:0c:2c:51:56:89:dd:81:1c:11:d2:3b:fc:
e6:29:e8:67:89:71:e7:eb:c9:09:36:cd:ab:6f:74:
03:bd:39:ea:d7:ff:59:ea:e9:42:61:ba:2e:7e:cd:
f7:97:9c:84:ab:98:7b:43:3e:7c:a8:54:43:37:fc:
ec:f8:a3:4f:4f:23:40:c9:c2:cd:6d:2e:87:b8:da:
69:f8:e7:a8:a0:bb:3c:ac:39:e4:f0:cb:44:fd:6f:
0f:f4:1b:dd:bb:9a:6c:17:b4:6b:0f:99:48:57:c1:
3f:8b:5d:7d:a8:00:34:69:92:67:2c:10:e3:0c:ee:
47:80:ad:d4:22:04:8d:bf:e7:19:f7:ee:c3:f5:02:
c3:ca:59:cc:97:f3:7f:00:0a:ed:80:5f:30:da:01:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:03:BC:03:F8:B0:A6:47:05:84:23:C0:33:68:5B:48:F8:5F:3F
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:0b:f0:44:2d:55:f9:16:c0:1d:c3:f3:97:d4:63:1e:97:
1b:cc:81:ab:04:b8:c9:9f:48:23:f3:39:7f:00:67:b4:c0:18:
f2:d4:ca:da:39:0d:2b:64:72:87:53:32:67:5e:bd:75:29:1c:
e6:7a:35:03:6e:4b:41:56:ec:7d:ca:09:74:6c:54:0c:fe:3d:
9a:e9:ab:2c:f4:50:d4:c3:87:aa:21:27:61:78:0e:ad:88:f6:
11:66:b3:4e:d3:72:c3:e3:f5:22:7f:c5:bd:d1:b1:10:91:32:
b9:d0:8e:95:c9:53:23:3d:9a:05:f6:b2:9f:32:b5:d9:9d:0d:
64:9b:d8:5b:9c:85:9c:55:e1:b0:35:45:61:63:b3:c4:f0:06:
73:d8:32:e0:3a:44:36:65:a8:a1:c5:f4:95:69:6f:95:f8:90:
fc:75:fe:01:17:97:df:55:1a:14:9a:fe:f3:e0:71:b6:6a:1e:
0a:d9:04:28:6c:be:a7:f3:64:30:25:17:01:fb:ef:a9:7d:0d:
39:ec:96:f7:0f:e3:cf:77:2a:69:cd:18:a1:01:da:d6:73:17:
19:5a:3d:14:69:10:1a:a2:8e:46:1b:06:71:3c:43:a1:4a:32:
fd:31:80:eb:33:6d:c1:54:56:ce:0c:78:b4:83:08:59:e2:a5:
fb:a7:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:07 2026 by rpki-client