Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: 3rx4/OvhcAyJgiq2XcPsGQ6Si+cqR6iZERjLkWTM0gs=
Subject key identifier: 0F:1F:19:EF:96:38:42:FF:29:D3:CA:60:83:DB:EF:8C:ED:EC:DD:87
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 019F90912FA07A2C97E329DDFD2783E53A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 12F0
Signing time: Thu 23 Jul 2026 20:01:01 +0000
Manifest this update: Thu 23 Jul 2026 20:01:01 +0000
Manifest next update: Fri 24 Jul 2026 20:01:01 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: nMsMBDW4ysFVA+YvQdAKfh6/PDmhn1dF2A9VP4qARTY=)
2: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (hash: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2f:a0:7a:2c:97:e3:29:dd:fd:27:83:e5:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Jul 23 20:01:01 2026 GMT
Not After : Jul 24 20:01:01 2026 GMT
Subject: CN=0f1f19ef963842ff29d3ca6083dbef8cedecdd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:6e:d9:7e:91:18:d4:6e:50:d2:31:e3:b7:
48:c1:22:39:82:e8:91:05:63:c9:5c:82:76:50:3a:
2c:83:01:c9:24:1f:13:c7:6e:aa:11:33:c7:2e:b1:
72:0f:81:97:2b:7a:a0:ca:b4:05:dd:31:16:80:e6:
aa:2d:8d:6d:17:1a:61:5e:36:96:4a:28:5b:e3:a4:
4c:a8:e6:d2:75:ce:76:d1:fd:7a:b8:3d:a9:61:27:
de:3f:4e:ec:73:23:2c:bd:1c:fc:36:5f:44:8a:b7:
7d:53:9a:be:53:ca:57:51:52:0d:9c:b6:60:a9:9b:
e7:d7:36:35:7b:9e:e6:be:5c:7e:0e:c9:21:b3:28:
06:07:27:00:02:d8:4d:ab:85:2f:f1:99:b1:67:19:
10:3f:d2:7b:61:bd:0a:46:41:9f:2a:7e:2e:3b:da:
da:e1:62:c1:b8:c1:7e:12:bf:bc:fd:77:60:c7:ab:
3a:59:68:7d:d0:2d:f1:de:f3:f5:cf:08:0d:d3:6e:
05:2c:6d:9e:ca:a6:91:b2:8b:46:a1:06:94:cb:a6:
14:60:da:53:16:d7:6a:99:98:5a:4b:cb:d4:85:d7:
66:95:13:d0:ec:df:fa:f8:68:61:23:b7:e7:5b:5f:
89:53:23:7c:ee:a9:a3:2d:7b:bd:66:92:b5:92:e3:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:19:EF:96:38:42:FF:29:D3:CA:60:83:DB:EF:8C:ED:EC:DD:87
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:72:3b:27:28:15:21:54:62:37:60:d4:e3:93:41:bf:fe:18:
23:68:2d:25:d3:c2:3e:92:b5:c3:59:62:40:31:48:26:45:f0:
9c:4d:59:3b:e6:20:38:cc:18:4f:05:71:2b:b2:90:68:3f:85:
c8:0f:be:92:c6:48:53:f8:3e:b2:d1:91:75:c9:57:20:0c:26:
5a:21:8c:84:c4:c6:b3:7d:76:5d:7e:f1:70:e9:1e:b1:7c:3d:
b8:17:c2:1e:5b:7e:d9:c6:1f:de:09:7e:f7:f4:00:86:32:ef:
30:6a:f5:d3:35:01:b6:25:ab:a5:fb:2f:7c:84:e3:d7:e1:f4:
d0:e3:53:c1:d4:76:ae:b0:24:8e:43:17:2c:ca:2d:31:1d:52:
4d:74:2f:0e:ba:6d:d1:2a:aa:db:4d:50:83:19:98:10:f6:38:
1a:e5:85:88:3a:c6:d9:e8:c5:af:df:7b:13:a5:fe:79:f3:53:
db:c3:47:38:82:ab:e0:c6:46:9b:01:2e:19:95:f8:eb:7a:a0:
63:07:2b:7a:8e:a1:3f:97:91:f1:96:62:40:55:d4:cd:75:c5:
be:0e:be:c6:23:0b:83:9b:73:f3:8f:c4:0b:65:1b:fe:25:75:
73:d7:0b:87:d1:bf:81:45:70:62:f0:5d:5c:f5:24:77:f6:cc:
b3:e9:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:08 2026 by rpki-client