Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
File: 2y7wU_pnSB7id3pyc60YpDHDurE.mft (raw, json)
Hash identifier: 6u8dMuXoD0dxQeLD/jEAp7phAdzWOhBq0bszVmTGbiU=
Subject key identifier: C1:94:3D:5C:3C:8C:8B:49:2E:D4:ED:08:DC:5B:31:0B:19:84:3C:96
Authority key identifier: DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
Certificate issuer: /CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Certificate serial: 01A0CEC80FC1E097582F00C2C6A06A503FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
Manifest number: 03D8
Signing time: Wed 23 Sep 2026 15:00:12 +0000
Manifest this update: Wed 23 Sep 2026 15:00:12 +0000
Manifest next update: Thu 24 Sep 2026 15:00:12 +0000
Files and hashes: 1: 2y7wU_pnSB7id3pyc60YpDHDurE.crl (hash: rlWi8/d5FoS+46xCLNrE4ZWxfJIuvYjfRW+N1h/+CNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:0f:c1:e0:97:58:2f:00:c2:c6:a0:6a:50:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2ef053fa67481ee2777a7273ad18a431c3bab1
Validity
Not Before: Sep 23 15:00:12 2026 GMT
Not After : Sep 24 15:00:12 2026 GMT
Subject: CN=c1943d5c3c8c8b492ed4ed08dc5b310b19843c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:91:49:d0:c4:d7:0b:78:68:a5:ca:6e:b8:
49:b0:23:f3:bd:74:5f:43:ba:bd:39:4e:ef:b6:8f:
1d:6f:81:9a:93:fe:a5:3f:34:e1:fd:d7:80:62:2a:
80:21:42:5c:94:9a:a0:40:a9:5e:04:68:c2:05:f9:
5a:56:47:5d:ac:d1:77:64:c3:a7:9e:1c:95:13:2e:
eb:d1:78:31:02:fd:70:c2:2e:fb:d4:55:ac:b5:10:
6c:18:ac:6c:86:09:57:db:fa:b5:ab:e8:39:9d:9c:
aa:d6:8b:3f:ae:50:c4:51:0a:42:f3:d2:97:ac:d3:
95:e6:b6:6a:ce:8f:e1:ad:c3:dd:d4:6a:c3:db:e2:
40:82:b9:68:b9:5f:39:65:23:e6:f9:cd:68:82:d7:
e4:d2:2e:a0:0d:78:4a:3a:63:3b:a2:7c:12:bd:c0:
1c:3c:49:3d:d4:7d:00:0f:17:db:99:92:29:9d:03:
57:3a:d5:af:37:0e:b1:1b:e1:9b:4e:0e:76:c7:dc:
5e:27:77:94:67:ae:e3:4e:0f:2d:ac:4d:f4:66:9c:
1a:c7:bd:56:3e:98:48:53:73:34:95:f4:89:db:4e:
e4:4f:79:4c:e9:16:74:8f:20:e8:5e:42:6f:80:7f:
3a:ac:40:1c:ab:ce:ea:eb:81:eb:53:82:df:53:2a:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:3D:5C:3C:8C:8B:49:2E:D4:ED:08:DC:5B:31:0B:19:84:3C:96
X509v3 Authority Key Identifier:
keyid:DB:2E:F0:53:FA:67:48:1E:E2:77:7A:72:73:AD:18:A4:31:C3:BA:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7wU_pnSB7id3pyc60YpDHDurE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c10e90-bc18-4fd7-b6de-630df357e57d/1/2y7wU_pnSB7id3pyc60YpDHDurE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:eb:e7:28:e3:2c:e4:ea:c9:65:94:cf:6e:14:33:ae:d5:db:
1b:ee:35:f4:1b:d7:b1:a9:cd:b6:88:c5:5e:dd:ca:33:6e:0f:
40:c2:d5:b9:27:b3:50:ee:d3:c4:39:7c:d6:25:1c:fa:39:4c:
7d:3e:fe:94:1d:14:a6:96:b2:ba:1b:d6:fc:ac:9c:d3:39:dd:
10:45:40:07:53:ed:54:df:5c:5b:c3:5b:14:01:a6:da:8a:fa:
e5:eb:95:b4:b8:c9:e6:f9:cc:9c:78:4b:74:46:bc:1a:74:3c:
00:f1:7f:5d:77:85:f6:ad:6f:bb:11:a5:3a:59:a8:b5:6f:ab:
a9:df:0d:06:0d:09:14:cf:9a:a9:87:44:04:e9:2b:0c:05:34:
9c:2a:e2:9e:ba:4c:c5:fc:17:ec:88:40:34:86:8b:78:df:2e:
40:e1:8d:a5:e6:2b:0f:3f:f3:bb:11:5c:9c:85:3c:fb:8f:3c:
93:90:4b:07:fc:39:05:1a:8c:36:5a:85:5b:1f:3e:9a:89:54:
bf:c9:f1:ab:1b:8a:85:96:ef:b8:12:d6:8d:e5:ed:6e:65:ac:
ce:76:69:24:2a:f2:83:d5:51:eb:33:b3:b7:53:11:b7:36:46:
b4:b2:a4:3c:f7:19:37:00:eb:c0:e8:a7:c0:53:4a:0e:5e:77:
5b:7c:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:08 2026 by rpki-client