Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
File: 2YJH0_gUctu6Btvqm9GceF0Yur4.mft (raw, json)
Hash identifier: WI3O3h2Ss3RFjR0HV2Y2c3J7LCDJ/1rINxlarfAeVZs=
Subject key identifier: 37:ED:CC:05:28:29:12:FC:AB:3F:96:97:EE:99:56:94:94:53:02:1A
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01A0D6B9AEA526F954ACC99C281D01149FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
Manifest number: 17DC
Signing time: Fri 25 Sep 2026 04:01:28 +0000
Manifest this update: Fri 25 Sep 2026 04:01:28 +0000
Manifest next update: Sat 26 Sep 2026 04:01:28 +0000
Files and hashes: 1: 1ecdqUBqZQ3YMtDjCwQiKG8xYaQ.roa (hash: zv1q8HwWUf+KPLhWoNogvMuGlLQD526bjlEhoqB7/Us=)
2: 2YJH0_gUctu6Btvqm9GceF0Yur4.crl (hash: WL+GWPzCkA2GVQXWoEh4cKOStMWu58IVdSf+GpMD/tw=)
3: GczknFyVtiqKEdHd2-B_sb0p9T8.roa (hash: Uc7AtvGKZCQRXYTh0ShgjFxEu/21BkvS76LHDyC+CfU=)
4: PDdsyfueJWkvrU3pYkbjZMgu1h8.roa (hash: 26bjggiQNB80rvMQOyTV/5L/llpmJn8tcdmihtANmPA=)
5: ebjipFWkeRZ-FSLav9L063nACkg.roa (hash: 0BfNaXE7ist80wZpP4f8ndfGepYT1Q0OuP1Q88o/qgc=)
6: ffgs48VKPcr0qhMfZ8lwTlauDcc.roa (hash: smkj6/63EM/vzHvbo2HV23N0B61WRHhbXBiGwfiPVjs=)
7: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (hash: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA=)
8: xpkIemYjOTmWtKVmdzbJYcakWgs.roa (hash: fDGVOUTWmgFsRhq58PpHOedFqewxoUtUKqyowz57wYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:ae:a5:26:f9:54:ac:c9:9c:28:1d:01:14:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Sep 25 04:01:28 2026 GMT
Not After : Sep 26 04:01:28 2026 GMT
Subject: CN=37edcc05282912fcab3f9697ee9956949453021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:43:0a:e8:3e:9e:e7:78:d7:9b:da:b1:0f:
1c:99:f5:8e:e7:3a:dd:7f:0d:12:ae:a2:75:96:8f:
36:4f:2e:64:be:bc:96:0c:f6:20:e8:97:bc:46:09:
d7:03:81:27:1c:60:c8:06:04:19:24:78:fb:8e:31:
b8:5e:68:75:30:f2:fc:52:bf:c8:34:ca:dc:9f:1c:
4d:1f:6e:76:f3:8e:0d:34:e7:bc:7a:85:fd:16:05:
c8:8c:8b:52:1d:5f:8e:b7:62:6f:1b:43:12:f0:58:
79:03:7d:9e:a5:d1:6a:a9:09:7e:e0:3d:a5:45:54:
15:46:06:4b:40:60:f1:e2:47:4d:f4:31:52:44:9e:
5a:f0:2c:5d:77:15:cc:30:25:90:73:79:aa:d2:0e:
40:82:c5:5c:ed:3d:80:84:92:fb:54:13:d3:70:de:
ad:2a:51:3f:e6:16:14:a7:44:2c:17:93:64:f9:fd:
7c:a0:87:e2:b3:57:53:3d:2c:b8:44:c5:a0:5e:58:
c2:5d:d5:3c:28:22:5d:df:48:ba:86:a1:c1:8a:e6:
2c:db:60:8a:99:59:01:ec:82:e1:6c:0a:0f:99:f3:
e1:33:5a:8f:64:4f:a7:e5:71:02:c5:44:58:9b:97:
90:42:f0:70:7e:57:a8:54:c5:1b:72:79:26:89:45:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:CC:05:28:29:12:FC:AB:3F:96:97:EE:99:56:94:94:53:02:1A
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:04:7d:87:84:81:f9:cf:b4:7b:40:33:ff:e8:29:a7:ac:
2b:fe:9b:1e:fa:71:4f:e0:6c:9c:3a:8c:47:3a:e3:ef:28:41:
42:95:22:27:cc:4c:0c:20:ed:7f:81:35:1a:78:8d:e0:3d:bb:
49:3e:f7:e6:b1:73:fb:d3:ea:9f:eb:e7:36:7e:a0:db:29:36:
96:5d:4a:c5:90:43:22:83:42:ed:db:d2:1e:3c:d3:ef:56:38:
da:e0:6d:27:8a:48:22:80:d6:d9:59:e2:0b:cf:53:73:b4:10:
8c:33:b8:15:42:bb:cc:8f:88:4b:dd:99:09:06:a9:54:18:d0:
1c:ac:0c:48:55:33:c8:96:4b:fc:10:38:b6:18:41:ce:b1:ce:
cc:4d:21:af:30:49:0b:5d:c2:f0:54:2b:e6:c2:b7:06:6e:6a:
dd:e2:e9:a1:1a:b9:ab:78:5c:12:34:68:4c:04:fa:3e:12:38:
d7:6d:1f:ac:61:89:7e:3b:98:63:6d:0f:0a:ee:e5:3a:5f:59:
81:f3:a5:f6:28:1b:24:b9:f2:ac:f9:64:5f:75:20:ff:f6:ec:
85:29:f2:68:1c:30:df:f7:ca:97:fc:43:60:d8:8f:64:35:02:
85:a1:e7:de:a4:8e:ff:73:90:a3:64:ad:63:eb:a0:a3:9b:43:
c4:30:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:38:20 2026 by rpki-client