Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: YByR2H92sJNUYx30nQ1ql2iidOviXz4FUloYHMQrIes=
Subject key identifier: A5:D3:C3:84:1E:9F:83:01:52:C2:B1:88:B2:BB:9A:CD:17:5F:6A:0C
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 019F92112D7768437E5FA8F391BC92ED7C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 0334
Signing time: Fri 24 Jul 2026 03:00:26 +0000
Manifest this update: Fri 24 Jul 2026 03:00:26 +0000
Manifest next update: Sat 25 Jul 2026 03:00:26 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: gairCwT/k++fwwmh8ufCJGZZ1S+cdMIE6lainsaiSn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:2d:77:68:43:7e:5f:a8:f3:91:bc:92:ed:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Jul 24 03:00:26 2026 GMT
Not After : Jul 25 03:00:26 2026 GMT
Subject: CN=a5d3c3841e9f830152c2b188b2bb9acd175f6a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:3d:e8:f8:7a:10:a2:c3:1b:c9:ce:b4:e9:
24:9a:4e:94:a4:b4:1f:07:60:88:34:9c:aa:80:79:
16:5b:e4:47:76:51:0a:55:43:e1:84:62:d4:4a:77:
a9:e5:26:d2:69:27:25:16:fa:5b:39:3f:7d:85:01:
1c:1d:f8:8e:a3:9b:e8:da:22:83:0f:3f:2b:6f:34:
cd:07:52:6e:3d:85:c9:c8:5b:76:78:1b:71:f4:e3:
d5:b1:1f:81:a6:c6:42:2a:6c:0e:26:ba:68:7c:e6:
c9:57:1a:85:d4:85:5d:13:49:e5:81:83:8c:db:bb:
5c:86:eb:ff:bd:bf:0f:d3:1c:dd:5a:12:a2:bb:d4:
01:fc:e7:11:da:d9:76:60:9a:b2:7f:11:ef:06:a0:
9d:9f:46:ce:d7:0b:61:16:ae:25:aa:bb:41:99:be:
15:e2:d0:f6:79:33:4e:ce:db:ee:fd:29:b9:63:35:
b0:b4:39:77:17:4e:f2:cf:47:ce:29:5d:22:43:66:
e3:78:68:9d:d3:11:4a:ce:5f:93:89:46:34:9e:66:
13:7e:cb:1d:3e:a9:88:dc:c5:bb:af:bd:b2:8e:08:
16:c1:01:66:f6:7b:fe:ad:bb:59:2c:5b:cf:14:a0:
ac:26:ca:40:e0:8a:a9:07:c7:d8:96:65:96:98:a3:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:C3:84:1E:9F:83:01:52:C2:B1:88:B2:BB:9A:CD:17:5F:6A:0C
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:81:51:e6:f1:b2:a5:ac:4d:78:ce:f1:78:b9:f4:0f:47:eb:
04:0e:fe:54:c0:cb:ca:d3:d2:38:9b:ec:76:e5:4b:5c:1a:a9:
22:d0:22:3e:34:d1:75:2f:c2:a6:25:b9:bf:e2:da:01:bf:66:
bc:03:cb:b3:e6:f4:fb:a6:c1:2c:df:80:a8:49:a9:a8:b5:fe:
a7:ed:f1:ac:0a:c0:68:34:10:85:a8:25:ee:96:a1:e4:c9:5e:
bf:58:44:91:1c:3f:f0:62:13:67:54:2f:ce:67:ff:f6:c6:d8:
be:a1:8a:16:3c:36:2d:f1:40:5d:40:41:a5:bb:21:76:6d:a2:
49:0a:53:88:93:f9:95:c0:49:ca:00:c7:b7:93:68:08:ed:50:
b0:8d:0a:df:3c:6b:00:d5:5b:31:f6:c6:ab:a0:55:0e:9d:0e:
9a:90:9c:eb:54:eb:b9:1d:5f:ed:90:94:16:14:4a:c5:70:e8:
ff:b2:e5:5b:54:28:1a:04:39:50:77:d1:a8:50:00:6e:b8:d0:
5e:95:e7:fa:01:86:76:95:6f:35:7d:39:c8:a8:26:cb:42:3c:
fe:ed:56:f6:e0:eb:17:b0:ec:2c:30:c9:99:5a:75:c6:b6:d7:
00:b0:8f:9f:8f:bd:5d:86:39:3e:c1:61:91:6c:95:2a:f6:8d:
b2:5b:fa:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SES13aEN+X6jzkbyS7XxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmVmMDUzZmE2NzQ4MWVlMjc3N2E3MjczYWQxOGE0MzFj
M2JhYjEwHhcNMjYwNzI0MDMwMDI2WhcNMjYwNzI1MDMwMDI2WjAzMTEwLwYDVQQD
EyhhNWQzYzM4NDFlOWY4MzAxNTJjMmIxODhiMmJiOWFjZDE3NWY2YTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj496Ph6EKLDG8nOtOkkmk6UpLQf
B2CINJyqgHkWW+RHdlEKVUPhhGLUSnep5SbSaSclFvpbOT99hQEcHfiOo5vo2iKD
Dz8rbzTNB1JuPYXJyFt2eBtx9OPVsR+BpsZCKmwOJrpofObJVxqF1IVdE0nlgYOM
27tchuv/vb8P0xzdWhKiu9QB/OcR2tl2YJqyfxHvBqCdn0bO1wthFq4lqrtBmb4V
4tD2eTNOztvu/Sm5YzWwtDl3F07yz0fOKV0iQ2bjeGid0xFKzl+TiUY0nmYTfssd
PqmI3MW7r72yjggWwQFm9nv+rbtZLFvPFKCsJspA4IqpB8fYlmWWmKOaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXTw4Qen4MBUsKxiLK7ms0XX2oMMB8GA1UdIwQY
MBaAFNsu8FP6Z0ge4nd6cnOtGKQxw7qxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUt
NjMwZGYzNTdlNTdkLzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUtNjMwZGYzNTdlNTdk
LzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoFR5vGy
paxNeM7xeLn0D0frBA7+VMDLytPSOJvsduVLXBqpItAiPjTRdS/CpiW5v+LaAb9m
vAPLs+b0+6bBLN+AqEmpqLX+p+3xrArAaDQQhagl7pah5Mlev1hEkRw/8GITZ1Qv
zmf/9sbYvqGKFjw2LfFAXUBBpbshdm2iSQpTiJP5lcBJygDHt5NoCO1QsI0K3zxr
ANVbMfbGq6BVDp0OmpCc61TruR1f7ZCUFhRKxXDo/7LlW1QoGgQ5UHfRqFAAbrjQ
XpXn+gGGdpVvNX05yKgmy0I8/u1W9uDrF7DsLDDJmVp1xrbXALCPn4+9XYY5PsFh
kWyVKvaNslv6dQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:32 2026 by rpki-client