Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: WSSGl40h3OQyx5nbQWf4RXc01phUNmaHf+XOG/TyRPA=
Subject key identifier: D6:FD:AF:43:1D:05:B3:51:43:8A:49:2F:C4:11:0F:B1:AE:A7:D8:85
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019CAD22B01CBD10F5527679FA8B41EEFBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:57 +0000
Manifest this update: Mon 02 Mar 2026 06:00:57 +0000
Manifest next update: Tue 03 Mar 2026 06:00:57 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: QSrgufPTNtqKO+nw+Bq/5O9A1JBDPSfgNtmv2mmyskI=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b0:1c:bd:10:f5:52:76:79:fa:8b:41:ee:fb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Mar 2 06:00:57 2026 GMT
Not After : Mar 3 06:00:57 2026 GMT
Subject: CN=d6fdaf431d05b351438a492fc4110fb1aea7d885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:4e:13:53:50:f2:22:4e:29:41:5e:59:80:
96:97:81:a0:79:1c:90:0f:de:48:e6:11:51:67:a0:
bb:32:57:2c:b4:08:9c:ee:6d:bc:bd:a6:6a:4d:fd:
6f:71:e2:8e:c4:53:47:cb:bf:22:b1:88:e6:76:13:
8e:62:92:0f:46:d7:29:df:5e:44:f5:db:73:89:8e:
f5:6b:ce:c9:9b:11:85:88:85:1b:57:e2:93:34:c4:
55:01:54:70:cd:a9:f4:93:d6:e1:0c:ed:21:81:d1:
c8:e3:81:af:fc:4b:2f:ab:cf:10:5f:50:e0:b7:5a:
10:97:64:fa:4a:13:a1:aa:d5:22:36:66:0c:91:a0:
32:1a:43:d9:de:11:df:59:2d:f6:ec:4a:96:cc:d2:
d3:29:1a:80:16:68:45:95:74:39:71:fa:d3:dc:bd:
f0:2f:6d:24:e1:fa:45:42:62:7d:ba:cd:96:8a:f0:
96:99:51:fe:0c:0f:9b:64:97:6d:28:20:7b:c4:d5:
18:1d:48:c3:b8:e7:19:58:6f:c7:09:75:db:19:06:
74:e5:65:bf:c2:9b:3d:01:95:c0:8c:b5:4e:72:93:
97:c5:7a:9a:f0:e9:c1:4b:74:5e:15:69:46:cd:1b:
5a:15:79:e4:a9:ce:d8:6c:2c:c9:f0:62:d3:df:d6:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:AF:43:1D:05:B3:51:43:8A:49:2F:C4:11:0F:B1:AE:A7:D8:85
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:76:c3:82:a6:0c:27:35:63:bb:99:42:7c:18:31:79:c9:
27:ac:bf:3c:3a:9d:17:03:61:13:83:c1:6a:83:62:b8:1c:bb:
9c:75:91:e5:3f:ce:85:26:fe:27:05:25:d4:cc:06:c8:1c:fb:
da:4c:bf:75:4a:9f:6a:ce:e3:34:46:72:ec:8e:d6:c9:68:68:
8b:a1:a2:58:84:6f:e6:00:7d:17:1b:db:9c:0a:a3:3c:4e:b6:
c9:c0:48:e9:08:1a:03:0c:aa:ea:96:03:43:1d:94:d0:94:98:
a5:40:f5:40:cc:88:21:e5:3f:0a:be:f0:f1:71:94:c3:4d:6b:
66:cb:6c:fa:c6:b2:97:05:ab:5e:21:2a:d3:4b:47:73:c3:65:
79:0d:96:de:cb:32:1c:8a:b5:87:54:93:6d:36:72:12:5c:04:
c5:c5:21:d4:f1:f4:07:01:2f:aa:32:f9:78:90:2f:ca:00:49:
b5:9a:d2:26:29:64:c1:8d:4c:e5:25:b7:a5:ce:88:9d:39:8c:
66:9d:46:bd:29:6b:35:2d:8c:e4:4f:94:ab:69:9b:66:21:00:
96:a0:44:33:83:72:61:5d:92:15:94:93:98:5a:a9:7d:fd:99:
1b:f4:21:86:51:7f:ea:57:2d:54:4e:18:57:9d:70:99:80:a7:
25:eb:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:26 2026 by rpki-client