Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: nDK8Wb6RlaglzSNrXOwAeH6T7zhh2L2jfYGmxrO3kas=
Subject key identifier: B3:8C:9D:3B:84:97:87:5E:C7:52:50:DA:1C:24:32:45:38:EC:9E:21
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 019D2816B1BDAAE056E69AD6D8E17E034BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 01F4
Signing time: Thu 26 Mar 2026 03:01:09 +0000
Manifest this update: Thu 26 Mar 2026 03:01:09 +0000
Manifest next update: Fri 27 Mar 2026 03:01:09 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: 1Q4X6k6KBYJpHQpNdmP1VTr9aclNrJqbgpHrwhB0NUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b1:bd:aa:e0:56:e6:9a:d6:d8:e1:7e:03:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Mar 26 03:01:09 2026 GMT
Not After : Mar 27 03:01:09 2026 GMT
Subject: CN=b38c9d3b8497875ec75250da1c24324538ec9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:91:23:30:f5:3a:79:d0:94:db:ab:f2:4c:
47:50:15:fb:5e:9a:79:5c:70:2c:2f:6a:ab:93:d8:
1c:ec:ad:a5:a3:5b:cb:1b:db:ce:af:8b:b4:0e:ee:
a2:6c:24:c0:9f:bd:1e:0d:1a:44:ec:4f:e9:d5:b8:
c8:cf:b4:f2:6e:84:fd:ba:9a:aa:12:da:fe:f4:e5:
23:e5:c4:20:84:0e:90:bb:a7:a5:a3:95:50:e2:a3:
6b:83:fa:05:c8:b1:0a:94:0c:5e:f1:66:7b:4a:3b:
3e:5c:95:48:d6:d0:76:41:b4:09:e9:db:f6:51:72:
89:68:5b:5a:e2:70:d5:3b:65:ca:86:fb:94:6c:6d:
9b:d5:7a:e8:42:59:45:63:c1:18:dc:2b:23:40:dd:
0f:d6:04:f5:0a:7d:4e:3c:8e:f5:35:e5:c7:e0:87:
ac:cd:cc:9b:0c:c6:e4:c1:cb:0a:fb:f9:a4:5c:49:
3d:84:b0:4a:24:57:10:5b:92:6a:ce:6e:ae:97:69:
55:0b:0b:b8:9a:d1:3c:94:40:d2:e8:60:8a:4a:a2:
17:31:3f:6b:0d:72:24:29:b1:8b:a3:b0:21:c6:41:
70:39:a7:84:24:f6:b5:dc:ac:e3:cf:f6:b3:ac:5b:
9d:ec:43:52:e2:c5:af:c7:a3:93:49:1f:e2:9d:c0:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:9D:3B:84:97:87:5E:C7:52:50:DA:1C:24:32:45:38:EC:9E:21
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a6:db:c6:1d:d3:c7:7a:53:bc:ff:70:82:db:9d:e9:3d:34:
7c:e5:a5:e0:4b:04:1d:63:eb:0b:fb:dc:27:c8:b1:bf:d2:14:
1c:7e:c6:29:1a:19:15:2d:cf:c5:82:32:2d:f9:43:5c:54:dd:
55:0f:08:f3:37:62:2a:05:3f:19:61:5b:50:b7:9f:64:31:59:
a8:1b:0f:7c:9f:c3:bc:41:76:de:5e:26:e9:ec:cd:3f:6c:c0:
af:69:eb:ab:82:ce:26:fb:fa:65:e9:94:36:69:2c:37:10:1a:
88:17:bb:6b:23:5f:71:5b:1d:56:b4:23:0f:ba:b9:41:a1:f6:
d1:fb:e1:db:67:e6:f1:68:83:1d:f6:eb:99:93:cb:b2:07:ac:
6d:47:83:47:31:4a:1d:a9:72:22:4b:d4:d9:c0:b8:93:00:8f:
50:1e:0a:b1:29:2c:7d:46:f8:0a:e3:04:cb:df:79:81:0f:07:
37:8c:a6:3a:9d:09:c8:ea:5b:81:af:73:bc:99:f1:44:b1:c0:
a7:90:9a:b8:b3:96:72:e4:11:93:d6:a5:cb:f9:a1:88:1a:10:
9b:c6:33:3f:7c:56:b8:5a:55:2b:6b:b3:4e:73:08:d1:43:57:
86:3c:8c:db:68:d9:f8:bd:29:be:4a:95:62:cd:f2:e5:6f:42:
56:76:17:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrG9quBW5prW2OF+A0usMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMmVmMDUzZmE2NzQ4MWVlMjc3N2E3MjczYWQxOGE0MzFj
M2JhYjEwHhcNMjYwMzI2MDMwMTA5WhcNMjYwMzI3MDMwMTA5WjAzMTEwLwYDVQQD
EyhiMzhjOWQzYjg0OTc4NzVlYzc1MjUwZGExYzI0MzI0NTM4ZWM5ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8WRIzD1OnnQlNur8kxHUBX7Xpp5
XHAsL2qrk9gc7K2lo1vLG9vOr4u0Du6ibCTAn70eDRpE7E/p1bjIz7TyboT9upqq
Etr+9OUj5cQghA6Qu6elo5VQ4qNrg/oFyLEKlAxe8WZ7Sjs+XJVI1tB2QbQJ6dv2
UXKJaFta4nDVO2XKhvuUbG2b1XroQllFY8EY3CsjQN0P1gT1Cn1OPI71NeXH4Ies
zcybDMbkwcsK+/mkXEk9hLBKJFcQW5Jqzm6ul2lVCwu4mtE8lEDS6GCKSqIXMT9r
DXIkKbGLo7AhxkFwOaeEJPa13Kzjz/azrFud7ENS4sWvx6OTSR/incAKUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOMnTuEl4dex1JQ2hwkMkU47J4hMB8GA1UdIwQY
MBaAFNsu8FP6Z0ge4nd6cnOtGKQxw7qxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUt
NjMwZGYzNTdlNTdkLzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jMTBlOTAtYmMxOC00ZmQ3LWI2ZGUtNjMwZGYzNTdlNTdk
LzEvMnk3d1VfcG5TQjdpZDNweWM2MFlwREhEdXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKbbxh3T
x3pTvP9wgtud6T00fOWl4EsEHWPrC/vcJ8ixv9IUHH7GKRoZFS3PxYIyLflDXFTd
VQ8I8zdiKgU/GWFbULefZDFZqBsPfJ/DvEF23l4m6ezNP2zAr2nrq4LOJvv6ZemU
NmksNxAaiBe7ayNfcVsdVrQjD7q5QaH20fvh22fm8WiDHfbrmZPLsgesbUeDRzFK
HalyIkvU2cC4kwCPUB4KsSksfUb4CuMEy995gQ8HN4ymOp0JyOpbga9zvJnxRLHA
p5CauLOWcuQRk9aly/mhiBoQm8YzP3xWuFpVK2uzTnMI0UNXhjyM22jZ+L0pvkqV
Ys3y5W9CVnYXew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:13 2026 by rpki-client