Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: 6Y+FSok92S72B2xupiii9fRK9j0VytbAEoKVVRa8gns=
Subject key identifier: A4:A0:12:CB:2E:E8:50:07:BD:43:D3:4B:B6:65:B8:18:B6:D2:B0:D1
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 01A0CF36A3FEE51521DFA4D272C8E0469811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 1395
Signing time: Wed 23 Sep 2026 17:00:59 +0000
Manifest this update: Wed 23 Sep 2026 17:00:59 +0000
Manifest next update: Thu 24 Sep 2026 17:00:59 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: qltnvDFTf98x8O+JfLqAIF7ZH9aXpT/hUc1Go57N4bA=)
2: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (hash: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:a3:fe:e5:15:21:df:a4:d2:72:c8:e0:46:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Sep 23 17:00:59 2026 GMT
Not After : Sep 24 17:00:59 2026 GMT
Subject: CN=a4a012cb2ee85007bd43d34bb665b818b6d2b0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:9c:3f:c2:15:94:16:66:5d:c7:04:d4:71:
5c:96:e1:f1:d9:4e:e1:77:8a:91:0c:15:de:3f:68:
8a:33:16:52:18:c6:8a:a8:c4:18:fc:05:a3:0f:50:
7b:80:e7:94:e1:40:f8:70:c3:16:72:db:d4:bd:13:
25:32:b4:ca:df:28:cf:02:5b:3d:e4:26:f0:1c:76:
ea:c7:fb:6a:b5:19:47:6e:3c:42:94:2e:54:a6:e0:
6f:d0:08:a9:b2:84:c2:8b:b7:1d:28:44:58:0a:f4:
2d:b1:b4:75:d9:b2:b4:b3:65:8d:37:05:63:18:21:
32:dd:c0:44:ba:2d:0c:38:67:ec:d2:16:58:60:f8:
b0:ef:d2:cb:e8:74:f3:ea:3c:eb:09:49:f6:94:88:
27:dc:44:a8:5e:72:ff:71:21:a8:3e:82:24:58:84:
6d:26:28:15:e0:fd:4f:51:f6:e2:75:38:a4:8b:2c:
69:68:36:37:19:1d:ea:0d:db:84:6c:b1:2e:d0:b1:
f0:cb:76:b8:c1:46:3d:19:36:e3:60:d5:a3:45:15:
c0:f7:4f:61:3f:7a:13:d0:c1:63:a5:19:f8:77:4e:
8b:0f:70:47:f6:23:25:26:f1:19:b9:58:a7:8a:98:
4e:c1:c5:cd:37:47:98:7d:84:58:eb:e3:cf:b4:c3:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:12:CB:2E:E8:50:07:BD:43:D3:4B:B6:65:B8:18:B6:D2:B0:D1
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b8:e6:09:69:be:ac:dc:dc:ed:7a:45:0b:33:4a:65:8c:a1:
b4:bd:f8:8c:c3:f8:e0:1e:8f:2c:85:2e:d4:3b:f7:69:69:ac:
ac:c9:bd:17:95:d8:88:40:13:57:74:3c:0f:19:65:31:c6:94:
ff:bc:b0:30:08:c9:dd:0b:8e:49:ab:69:d4:b8:ac:67:93:1d:
7b:4a:76:99:5b:07:74:0d:46:65:1c:74:e4:cd:ce:e2:c3:ef:
1c:66:bf:12:24:fd:12:83:cd:9a:42:00:07:b0:6f:94:d1:77:
a9:f1:26:07:88:e6:51:3b:5f:8c:00:31:51:6d:05:79:7b:6b:
ba:74:59:53:3f:d9:02:b5:5c:d4:b5:13:b9:5d:bf:0e:a9:a4:
be:d6:d2:d7:b2:f1:db:6b:47:b5:fc:69:94:de:d5:33:a3:21:
1d:77:07:0d:de:13:c1:5a:22:0d:19:53:b9:09:54:b8:8d:18:
ac:e8:f9:b9:52:9d:ab:52:34:d5:d5:33:85:24:29:e2:f1:04:
2b:a3:83:65:f4:02:e6:e7:07:57:f7:7b:8e:7a:ea:d4:0c:7a:
d3:79:f9:1f:2e:f8:91:17:96:28:25:8d:15:10:45:bd:fd:c0:
9b:9d:64:aa:32:d5:64:18:eb:1f:f7:7b:82:e5:ef:7b:2c:b8:
c3:eb:ff:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNqP+5RUh36TScsjgRpgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGI1YTVmYjEzODY4M2QxYThjYzcwMTlmNzg5NzBiYWU2
NzgyMjgwHhcNMjYwOTIzMTcwMDU5WhcNMjYwOTI0MTcwMDU5WjAzMTEwLwYDVQQD
EyhhNGEwMTJjYjJlZTg1MDA3YmQ0M2QzNGJiNjY1YjgxOGI2ZDJiMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03OcP8IVlBZmXccE1HFcluHx2U7h
d4qRDBXeP2iKMxZSGMaKqMQY/AWjD1B7gOeU4UD4cMMWctvUvRMlMrTK3yjPAls9
5CbwHHbqx/tqtRlHbjxClC5UpuBv0AipsoTCi7cdKERYCvQtsbR12bK0s2WNNwVj
GCEy3cBEui0MOGfs0hZYYPiw79LL6HTz6jzrCUn2lIgn3ESoXnL/cSGoPoIkWIRt
JigV4P1PUfbidTikiyxpaDY3GR3qDduEbLEu0LHwy3a4wUY9GTbjYNWjRRXA909h
P3oT0MFjpRn4d06LD3BH9iMlJvEZuViniphOwcXNN0eYfYRY6+PPtMNV9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSgEssu6FAHvUPTS7ZluBi20rDRMB8GA1UdIwQY
MBaAFNmLWl+xOGg9GozHAZ94lwuuZ4IoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgt
ODMxN2E4Mjg4ZDEwLzEvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMmU5NWQtMmNiNy00NmJlLWEyMjgtODMxN2E4Mjg4ZDEw
LzEvMll0YVg3RTRhRDBhak1jQm4zaVhDNjVuZ2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbjmCWm+
rNzc7XpFCzNKZYyhtL34jMP44B6PLIUu1Dv3aWmsrMm9F5XYiEATV3Q8DxllMcaU
/7ywMAjJ3QuOSatp1LisZ5Mde0p2mVsHdA1GZRx05M3O4sPvHGa/EiT9EoPNmkIA
B7BvlNF3qfEmB4jmUTtfjAAxUW0FeXtrunRZUz/ZArVc1LUTuV2/DqmkvtbS17Lx
22tHtfxplN7VM6MhHXcHDd4TwVoiDRlTuQlUuI0YrOj5uVKdq1I01dUzhSQp4vEE
K6ODZfQC5ucHV/d7jnrq1Ax603n5Hy74kReWKCWNFRBFvf3Am51kqjLVZBjrH/d7
guXveyy4w+v/qw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:51:55 2026 by rpki-client