Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: eX9FRrMfKBiE1fUPG2q9jTWaKEMqqM8b9mMTsChZ/Fk=
Subject key identifier: 39:E3:35:C7:3B:E8:8F:4E:28:DF:AA:6B:80:EA:47:78:9D:41:BD:7A
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 01A0D426AA651F67F612E7DCF7F76629EB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 1888
Signing time: Thu 24 Sep 2026 16:01:38 +0000
Manifest this update: Thu 24 Sep 2026 16:01:38 +0000
Manifest next update: Fri 25 Sep 2026 16:01:38 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: pxlcagJed2Q/+e0fDreDUZMGIfdoO7j3sszD0AejnjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:aa:65:1f:67:f6:12:e7:dc:f7:f7:66:29:eb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Sep 24 16:01:38 2026 GMT
Not After : Sep 25 16:01:38 2026 GMT
Subject: CN=39e335c73be88f4e28dfaa6b80ea47789d41bd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:40:f8:31:e7:88:36:09:ff:04:47:69:d8:
b6:cb:d3:59:56:fb:9d:84:a1:34:8f:b8:d0:7e:c4:
87:79:f3:f7:81:f4:87:3f:56:82:cf:1d:c9:da:f7:
20:9e:1b:90:bc:db:77:39:27:96:43:2e:8f:e4:b8:
50:6b:06:af:be:07:7e:93:f5:d0:17:67:81:f9:c4:
9e:92:e1:4b:80:ec:dc:a1:71:5e:26:1e:18:f5:8d:
ef:62:5e:7d:5f:98:1a:4b:cb:9d:41:da:53:3e:0a:
bb:99:35:d9:55:ba:19:d0:45:31:55:6a:34:59:d3:
fe:45:3b:5f:51:27:d0:8a:2c:f3:01:3b:d8:eb:28:
c5:d3:89:61:55:9d:c5:b8:c3:16:fa:bc:72:c5:56:
6b:fe:72:ca:1a:47:3a:02:08:12:7a:8c:10:e1:75:
9f:41:a7:97:60:00:55:e5:4c:19:38:b9:9f:09:e1:
82:11:d6:92:03:6c:ad:6f:bc:f1:5e:68:a1:4a:e8:
f9:0d:36:9e:99:e5:dd:90:64:98:1a:c9:1e:ec:1c:
c1:a4:c7:e3:d9:c8:74:f0:8b:a5:bf:f3:9a:bd:25:
fa:7b:ac:fc:28:aa:e3:69:33:88:ce:7d:74:75:f7:
29:35:3a:e1:73:1e:77:1e:81:fa:d7:23:2b:7f:ec:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:35:C7:3B:E8:8F:4E:28:DF:AA:6B:80:EA:47:78:9D:41:BD:7A
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:63:99:18:4a:07:e9:77:c3:45:90:83:81:d0:8e:e0:0e:ce:
67:63:c3:52:0b:8a:26:96:30:99:ab:c9:99:6a:f9:3b:f5:3d:
b8:d9:94:21:a5:24:7d:ab:53:cc:b4:0a:6c:68:2b:d0:73:2e:
5e:61:4c:2a:d7:3b:a4:53:ff:33:71:55:ab:bc:29:8a:20:8d:
2d:db:94:e3:54:18:44:be:4e:d9:5f:b1:49:c6:a6:18:ae:9d:
ad:55:29:81:9e:65:de:79:6a:2d:0c:f0:7e:39:2f:e7:cb:30:
d6:8e:42:e6:a3:2a:9a:c4:09:2e:0f:4f:e6:36:f0:f0:4b:00:
c4:84:fa:4f:13:fa:65:7a:5c:4d:37:af:23:1f:d8:13:7b:70:
d4:d5:4f:18:c7:0d:7a:9b:6e:ab:eb:fe:e1:54:3c:95:e0:98:
b5:3a:15:e2:72:86:92:17:08:c2:92:76:a5:60:d9:d6:5c:b6:
2c:02:16:4c:31:9c:b1:53:d6:42:8a:d7:b6:d7:f4:5a:66:e0:
dc:46:11:42:cd:89:50:29:ab:de:51:e7:9d:c1:d4:e9:e6:bb:
ec:c9:03:f7:ef:aa:c0:ba:0e:1b:eb:f5:0f:21:dd:a2:e5:af:
dc:2c:fd:fe:d8:d5:82:6b:5a:43:2b:01:7e:74:bf:57:21:72:
7f:c2:c2:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJqplH2f2Eufc9/dmKetbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM1NjAwMDQ1NWI3YjU4OTRjZWQxNDY5ODVhMGE4ODg5
ZjllNGMwHhcNMjYwOTI0MTYwMTM4WhcNMjYwOTI1MTYwMTM4WjAzMTEwLwYDVQQD
EygzOWUzMzVjNzNiZTg4ZjRlMjhkZmFhNmI4MGVhNDc3ODlkNDFiZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1A+DHniDYJ/wRHadi2y9NZVvud
hKE0j7jQfsSHefP3gfSHP1aCzx3J2vcgnhuQvNt3OSeWQy6P5LhQawavvgd+k/XQ
F2eB+cSekuFLgOzcoXFeJh4Y9Y3vYl59X5gaS8udQdpTPgq7mTXZVboZ0EUxVWo0
WdP+RTtfUSfQiizzATvY6yjF04lhVZ3FuMMW+rxyxVZr/nLKGkc6AggSeowQ4XWf
QaeXYABV5UwZOLmfCeGCEdaSA2ytb7zxXmihSuj5DTaemeXdkGSYGske7BzBpMfj
2ch08Iulv/OavSX6e6z8KKrjaTOIzn10dfcpNTrhcx53HoH61yMrf+ySQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnjNcc76I9OKN+qa4DqR3idQb16MB8GA1UdIwQY
MBaAFNsjVgAEVbe1iUztFGmFoKiIn55MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEt
NDg2MzkxMTQxMmZhLzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85Yjg3ZjgtY2E5NC00ODNmLTg4ZWEtNDg2MzkxMTQxMmZh
LzEvMnlOV0FBUlZ0N1dKVE8wVWFZV2dxSWlmbmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmOZGEoH
6XfDRZCDgdCO4A7OZ2PDUguKJpYwmavJmWr5O/U9uNmUIaUkfatTzLQKbGgr0HMu
XmFMKtc7pFP/M3FVq7wpiiCNLduU41QYRL5O2V+xScamGK6drVUpgZ5l3nlqLQzw
fjkv58sw1o5C5qMqmsQJLg9P5jbw8EsAxIT6TxP6ZXpcTTevIx/YE3tw1NVPGMcN
eptuq+v+4VQ8leCYtToV4nKGkhcIwpJ2pWDZ1ly2LAIWTDGcsVPWQorXttf0Wmbg
3EYRQs2JUCmr3lHnncHU6ea77MkD9++qwLoOG+v1DyHdouWv3Cz9/tjVgmtaQysB
fnS/VyFyf8LCMg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:06 2026 by rpki-client