Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: eyeEOFompIkfpHPPqrHkbF38u1EXvcr/K3lpEMoQ7jA=
Subject key identifier: 15:08:E1:3E:EE:F2:FB:1E:3E:32:F3:C4:31:5C:BE:B3:DA:38:B6:CB
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019D284E500CF5BEB5EA8821A9E06145781A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 15F2
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: 1-DvsSSfIpJZDV3xPHOJo0DctRuY.roa (hash: NZc7Jrn95ssvSPyZ3Ab2YcErt8Xet8QyonFr2zEF4Wc=)
2: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
3: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: z7I84kwNcAQ/GZauz6nkBMr4Xf5quDAdMxfV+isuTlA=)
4: 6kHXGgT89v6lDauvrrIDf_tZADI.roa (hash: 4Bzh7brDF5yrfdZSSwARwJRw98UbYl61jVu1+dOgNwM=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
9: y6ZMA0bem_ypGe2FfpEWzTN8nno.roa (hash: 7OMxhExrtHyZxin9THZMP8/My2Hk6Y9f4O3yqoFNYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:50:0c:f5:be:b5:ea:88:21:a9:e0:61:45:78:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=1508e13eeef2fb1e3e32f3c4315cbeb3da38b6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:99:b9:08:ba:c3:81:6a:f3:77:da:7b:f9:
e9:21:fd:08:08:71:66:62:ca:10:87:d1:5a:87:4d:
72:17:c3:bf:9f:d6:0c:32:c5:96:8d:d0:21:05:ba:
9b:82:02:41:b9:01:88:22:d7:74:fe:82:10:64:8b:
3f:fa:b0:c0:a3:e7:23:0d:10:18:3a:19:4e:32:ef:
fe:7d:7f:2a:32:6b:19:e9:f1:43:49:c7:e0:24:93:
89:a1:03:68:95:00:87:6a:c2:77:e4:23:b8:1e:57:
18:ce:bb:c0:90:a7:9d:3a:38:12:03:87:57:76:36:
be:1f:32:29:58:be:c0:70:c2:6f:57:41:f2:bc:88:
37:80:72:44:61:96:93:cf:06:4d:d8:af:d0:36:ab:
43:f8:2c:18:de:97:c8:a5:df:89:e3:bf:a0:4f:48:
08:14:59:14:8f:10:9b:58:87:fa:b5:af:0d:b0:26:
fb:9c:b8:fb:11:54:57:99:b6:67:4d:d2:e8:62:0f:
9a:aa:b4:b4:58:04:81:3c:7c:d9:6c:69:18:b3:8c:
84:d0:d9:26:63:58:e4:a8:cb:9b:38:b1:ec:e5:c4:
e7:3b:c1:fa:52:6e:70:9f:df:e3:27:2f:17:fd:b8:
c1:e2:ea:cf:79:fd:b8:ba:eb:7e:54:8e:ef:3d:4c:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:08:E1:3E:EE:F2:FB:1E:3E:32:F3:C4:31:5C:BE:B3:DA:38:B6:CB
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ae:aa:58:cc:d1:73:25:8f:6f:23:23:2c:05:1a:09:c7:2d:
89:e6:69:11:d5:b7:88:d4:f6:1c:7e:88:d6:8d:99:61:1f:f7:
d2:89:c5:cb:e7:ef:8b:b9:f9:73:6a:16:0f:f9:54:8c:41:18:
40:54:23:8a:95:c6:26:a5:fc:69:3f:c3:49:3d:48:db:6f:8f:
10:4c:7a:39:f9:26:fa:17:37:ad:bb:93:36:d6:59:2b:1f:ec:
70:96:06:8c:2f:23:96:8d:15:8c:27:5e:4e:4e:d6:56:8b:8d:
6c:8a:e0:d4:6b:82:9e:40:00:7f:f3:d5:e6:73:b1:23:62:48:
a0:55:78:d6:ed:d4:de:de:b8:04:e1:b5:c7:28:d7:0d:a1:4a:
95:8b:d1:11:6d:a9:e6:a0:3d:a3:87:5f:2c:07:c1:95:92:e1:
ce:16:98:fa:d8:6d:ed:8e:3f:78:98:7a:d0:1e:77:fa:0a:60:
55:b6:41:a9:de:71:dc:5a:10:d5:73:2b:9f:ee:64:2d:20:ba:
ea:cc:27:a5:ac:55:53:b5:28:53:60:2c:ab:3c:ce:31:50:d2:
7c:65:fc:6a:18:41:e1:19:dc:14:ff:75:f7:2b:d9:0d:2a:8e:
54:bb:98:de:f3:e2:ed:df:a6:c2:47:c3:61:ed:2a:d9:6a:4e:
c4:fa:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:49 2026 by rpki-client