Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
File: 2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft (raw, json)
Hash identifier: coGc97Mt4acyhPtmhxIzFbCDw/cz42Chwz62mLD86ds=
Subject key identifier: 47:6E:EA:B7:26:DD:B9:6C:74:61:E6:35:DC:CC:4F:AD:F2:04:6B:64
Authority key identifier: DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36
Certificate issuer: /CN=dbe627e43eb116236cc713615ce9134140718636
Certificate serial: 019F8F7ECC38D26D6098D3771736C8A3F525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:18 +0000
Manifest this update: Thu 23 Jul 2026 15:01:18 +0000
Manifest next update: Fri 24 Jul 2026 15:01:18 +0000
Files and hashes: 1: 2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl (hash: CVo9OvSkr+Te7S7nQIEg3/EmO69rlMwoa9Xe/AkvP30=)
2: uO7fIJXDVwXmWvYzrLvCvk6vMyw.roa (hash: 7VZi8vf9cTd9cPoBtyXJxKld01rVJ8ydI/MS363lfA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:cc:38:d2:6d:60:98:d3:77:17:36:c8:a3:f5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe627e43eb116236cc713615ce9134140718636
Validity
Not Before: Jul 23 15:01:18 2026 GMT
Not After : Jul 24 15:01:18 2026 GMT
Subject: CN=476eeab726ddb96c7461e635dccc4fadf2046b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:1f:f7:f9:15:85:7f:65:9c:23:2c:56:3f:
ad:ca:4a:f1:3e:f1:e3:de:97:9a:1a:be:15:92:a3:
e9:bb:b0:12:9b:47:d5:4e:24:fc:fb:70:47:6f:a6:
0a:6e:b4:10:9f:d3:fd:e9:4f:2a:bb:63:d5:08:2c:
5b:8e:63:04:50:c2:30:fc:5a:fb:ba:d9:fe:87:6d:
31:26:4d:a4:13:f7:08:7c:b8:7d:2e:2b:88:f1:c6:
80:95:b6:c1:90:52:16:bd:57:0c:f1:ae:13:46:de:
d9:46:11:5c:f0:d3:13:78:a4:bc:58:ee:29:fe:7b:
03:7e:38:c5:eb:73:78:c1:aa:aa:d6:dc:78:39:08:
85:62:5a:f9:7a:8a:b3:da:5e:0e:16:3b:1d:92:68:
7e:93:4e:da:e5:c0:7a:0b:39:45:c2:39:7e:d6:00:
ea:ee:ba:da:fe:64:82:63:bd:c3:73:1d:8f:43:f6:
9a:14:71:44:1a:b1:ea:d7:40:0d:83:60:0c:dd:4e:
31:bc:dc:cf:43:6e:78:7d:3c:69:50:a5:db:47:79:
45:26:46:61:e3:db:c3:1b:0d:97:2b:8c:07:36:7c:
d8:d1:b8:b1:6e:f8:98:ad:8b:b9:37:e4:bd:cb:5f:
cb:05:17:21:b9:de:0d:a5:e9:ce:d7:ff:95:e7:23:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6E:EA:B7:26:DD:B9:6C:74:61:E6:35:DC:CC:4F:AD:F2:04:6B:64
X509v3 Authority Key Identifier:
keyid:DB:E6:27:E4:3E:B1:16:23:6C:C7:13:61:5C:E9:13:41:40:71:86:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/2-Yn5D6xFiNsxxNhXOkTQUBxhjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:a7:cf:c2:61:ba:7b:53:8e:05:b9:92:b1:1f:8e:ad:b7:
15:0b:78:ec:69:dd:8f:69:a8:c2:2a:81:ea:41:28:ee:07:3e:
b7:93:25:da:8d:fd:76:5f:d0:5b:2a:ed:dc:8c:3e:4a:f9:2f:
a2:39:be:02:a9:73:4d:0a:ae:4b:a7:bc:8a:7e:df:32:60:ee:
c7:20:a8:17:35:3a:98:16:6a:4a:9a:42:da:7c:8a:75:d4:f6:
58:e5:4a:41:ba:06:45:f5:18:87:b1:cf:df:65:99:cd:a3:9d:
7d:92:a0:f8:88:f6:6a:91:f1:6d:47:2b:7f:da:f7:a9:6a:8b:
fb:22:e1:7f:48:4c:ac:ca:69:99:19:0a:b6:d5:bb:50:41:4b:
ab:82:cc:20:d1:6c:a4:1e:17:ac:c4:f6:1f:81:09:cf:1c:b9:
60:91:90:53:ac:7b:e5:7c:64:21:90:09:d8:6d:89:51:56:f6:
db:ab:de:d9:47:32:0b:7f:5c:e8:fe:b2:44:c2:e8:92:9b:a9:
48:0b:12:f0:c9:8e:79:65:fd:96:37:95:10:31:84:99:c6:f0:
d4:36:9b:73:e9:f1:1d:9b:dd:42:ff:4f:22:fb:2a:2a:32:31:
33:1c:87:47:e4:2c:a7:54:a7:b6:d3:59:a7:18:c5:95:4e:9b:
b1:c0:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:50 2026 by rpki-client