
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
File: 2ygv2JcxfCyt17E5afbwFcOX4F0.mft (raw, json)
Hash identifier: /RLjAqSJkyJcUilhBH0oJumwe1hkUe8aqkgKnzxaKGM=
Subject key identifier: 6E:CB:2D:B7:A4:A3:5B:29:38:AA:90:09:37:CB:39:28:EC:FD:B5:30
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019D273ADAD51DC55AD92ABE720A0781D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
Manifest number: 07E5
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: 2ygv2JcxfCyt17E5afbwFcOX4F0.crl (hash: kp5x9ZybxiUQV6lHBUDMZAoAW6eG/E2wVdjj2vfswMg=)
2: 5_M5mOxDjDkgwkAca1tXv2jpthQ.roa (hash: xBboSwWLCofMIytfTnyu9mKMvX+dSAJG4UOMJtzKnkA=)
3: JvCqnDgnG_NMUFGCTVJgzecfD7c.roa (hash: AcWZWGCS7jwVQ2QXY4DUEvQhQzrEr9Bgn3uL02QHLvA=)
4: q2cwbHgodll5mTiws3YOiqyA-i8.roa (hash: p3hYIacztdEjHfwDJyx/+pczxs7JhRz6S+sXnyC782Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:da:d5:1d:c5:5a:d9:2a:be:72:0a:07:81:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=6ecb2db7a4a35b2938aa900937cb3928ecfdb530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:93:b2:74:47:88:06:dd:7f:12:fc:9d:8f:
28:39:a3:24:dd:75:ac:27:fb:96:f8:bc:59:66:da:
64:8a:1c:6d:60:ae:cd:71:fd:25:b0:46:de:ac:ed:
cb:f7:7b:c0:d4:c1:0b:1b:e3:4f:b0:55:6e:56:da:
b8:64:e3:f2:f3:47:57:1c:91:f0:8a:32:a9:a6:a6:
24:60:0d:52:6c:7f:77:10:05:78:16:5f:8b:c6:72:
76:28:f4:2e:ad:43:ba:5e:09:29:e9:75:4e:da:6c:
b7:b8:e0:d3:00:ad:11:a0:63:27:87:31:39:5c:5b:
23:48:26:3c:6f:81:4f:05:49:37:ad:4f:05:e2:25:
6a:38:2f:95:fb:dc:7d:ed:f2:f4:9c:4b:00:e1:31:
3a:8c:b1:f6:eb:99:f9:f8:fc:8f:b0:bd:c6:a0:04:
10:99:78:5b:27:3c:82:8f:b3:d8:66:61:83:4c:3b:
f3:20:c9:90:fc:24:b6:a5:07:51:13:7d:28:d0:1c:
66:8d:0d:43:67:90:35:8c:3d:b7:10:fa:46:b7:92:
48:73:77:70:5e:40:b5:1a:13:45:c4:a3:34:3e:e8:
58:1f:37:8f:5e:95:e4:a2:3e:fd:c3:b1:7b:c4:90:
48:f0:70:5a:16:d8:40:bf:82:22:2d:f1:dc:d4:6a:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:2D:B7:A4:A3:5B:29:38:AA:90:09:37:CB:39:28:EC:FD:B5:30
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:c7:c4:89:54:47:59:71:25:d4:d0:bf:15:0d:d2:71:d2:
ef:e5:b2:53:0f:d2:4b:bf:dc:12:22:67:b4:60:b7:ba:85:25:
03:1e:1b:cc:1c:bd:99:d9:79:3b:54:ea:da:3c:bc:5e:7f:5c:
a2:6c:7a:72:a9:89:6a:cd:2b:23:ad:48:9f:63:ce:a5:97:3a:
03:4c:4a:e2:ac:74:b8:d4:8d:70:82:a7:47:e8:8b:3a:9f:73:
10:84:06:07:58:9d:a0:46:88:18:02:bc:bc:c3:f9:47:67:84:
b2:5e:5f:64:45:e8:61:09:7f:9c:f7:b5:d8:ad:b6:a7:9d:e0:
b8:b5:8f:bb:b9:14:31:e7:b5:e3:ad:13:af:1f:60:5b:fa:bb:
5f:bc:ff:00:67:f7:86:55:7b:7d:0c:c6:cd:6a:02:c5:98:72:
48:c4:67:25:a1:13:07:0f:48:da:73:ca:32:27:c9:d0:9b:29:
5b:06:8e:23:50:17:6f:6a:97:3a:c2:4b:aa:09:73:9b:ab:98:
6f:74:c4:f3:9f:ed:8a:41:9e:ca:86:e6:a1:5a:45:9f:3e:e4:
8f:fe:e0:89:89:ec:80:cf:9a:39:dd:bd:c5:d1:bb:63:be:53:
d8:10:d9:7c:df:24:35:67:50:cc:aa:c2:5c:6c:71:78:46:df:
3e:ce:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client