Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
File: 2yNWAARVt7WJTO0UaYWgqIifnkw.mft (raw, json)
Hash identifier: wYJ2IYDo920RnimlqnPu5X5JE0RYvJO59VT6xLn05Aw=
Subject key identifier: FF:AA:87:88:AE:8B:88:F9:5F:7C:B5:96:D0:CD:3D:E3:1A:F6:4B:96
Authority key identifier: DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
Certificate issuer: /CN=db2356000455b7b5894ced146985a0a8889f9e4c
Certificate serial: 019F8FB57A33F75C42680774B1219FAE9195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
Manifest number: 17E0
Signing time: Thu 23 Jul 2026 16:01:02 +0000
Manifest this update: Thu 23 Jul 2026 16:01:02 +0000
Manifest next update: Fri 24 Jul 2026 16:01:02 +0000
Files and hashes: 1: 2yNWAARVt7WJTO0UaYWgqIifnkw.crl (hash: N9EeL2aXcMfsUHXj4RjZBSstkWlzGFDkcrNQi+NZd6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7a:33:f7:5c:42:68:07:74:b1:21:9f:ae:91:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2356000455b7b5894ced146985a0a8889f9e4c
Validity
Not Before: Jul 23 16:01:02 2026 GMT
Not After : Jul 24 16:01:02 2026 GMT
Subject: CN=ffaa8788ae8b88f95f7cb596d0cd3de31af64b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:5c:95:4c:80:25:8a:54:00:73:6b:32:be:
9c:bf:bd:1c:ef:22:b9:e2:13:b7:b4:a3:d0:4c:be:
ab:31:66:a7:d0:b4:20:b3:45:b2:ee:1d:d2:8c:38:
c8:c2:ed:da:93:a3:14:f3:d2:e0:33:bd:85:ea:5f:
2d:ed:60:a0:70:60:fb:1b:7b:10:b2:fc:d0:46:ce:
c7:ab:62:0a:77:d3:53:b9:e0:81:d1:a8:3f:eb:71:
52:cc:fc:c2:a8:41:3a:f2:92:ec:f7:ab:72:45:bd:
3c:bb:eb:5c:17:05:f6:f2:8c:50:31:c0:3d:cc:7b:
c5:9e:57:b9:cb:45:71:e8:b4:21:4c:21:10:c6:98:
a9:b5:84:ee:62:74:29:28:84:6f:c8:09:41:46:7f:
23:cd:ba:fb:c6:c1:81:82:14:e7:31:fb:10:09:a6:
a9:c4:40:a4:32:9c:fb:c5:0b:d8:09:13:e4:b2:54:
2b:93:89:4c:67:d8:d3:db:c5:21:8d:3b:6c:1b:6b:
10:97:c4:d7:4a:5b:1a:65:a7:65:5b:63:c4:76:74:
72:70:14:87:3a:94:58:ae:97:c9:71:5e:51:7e:b7:
de:9c:c3:42:b4:c4:27:e0:7e:7e:c0:a4:9b:cf:1a:
0f:ff:ce:d2:eb:87:e3:a8:0d:20:f4:9c:60:d0:49:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:87:88:AE:8B:88:F9:5F:7C:B5:96:D0:CD:3D:E3:1A:F6:4B:96
X509v3 Authority Key Identifier:
keyid:DB:23:56:00:04:55:B7:B5:89:4C:ED:14:69:85:A0:A8:88:9F:9E:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yNWAARVt7WJTO0UaYWgqIifnkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9b87f8-ca94-483f-88ea-4863911412fa/1/2yNWAARVt7WJTO0UaYWgqIifnkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:31:aa:ed:7e:6c:40:af:8a:87:d6:55:99:f0:78:05:0d:1b:
b3:d9:cf:7c:4b:42:cb:23:ac:46:b7:ce:84:f8:b9:89:b4:1f:
21:18:84:38:52:2d:27:2c:b2:57:63:cf:08:74:f7:69:1c:ac:
7b:1a:3b:d5:c9:70:37:a8:05:f0:c7:cd:d1:e4:36:ca:86:35:
4c:f9:bc:13:1a:00:c3:06:ab:8a:64:dd:aa:53:3c:5d:30:65:
19:0f:79:29:46:0a:9c:e2:64:42:9d:e9:e4:50:b3:17:39:b2:
b0:2f:f8:a6:25:0c:af:a9:9c:90:7d:a1:9c:f0:63:ce:01:e4:
d2:8c:bc:26:d2:91:69:f3:c0:90:c4:ec:e7:15:63:0b:a7:ed:
11:c3:7a:84:a4:20:cd:c8:58:55:70:cf:7c:7f:2a:be:1e:95:
bd:f4:54:1b:b6:14:8f:b5:e6:9b:fd:9a:6d:e3:64:ae:d6:f7:
43:10:03:05:3a:33:d6:a5:ac:e8:e1:01:4f:b4:15:b8:92:04:
ad:ac:fe:49:1f:de:21:84:fc:0a:ad:e2:7a:b4:e8:f6:b5:72:
e8:6c:c2:ce:e4:d3:db:d3:ef:fd:63:87:6b:f6:30:39:f0:52:
f1:58:6b:72:00:52:b6:51:c0:01:1a:7d:70:b3:f4:81:90:1f:
f3:9e:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:16 2026 by rpki-client